Humoud Cyber Defense AI – 🛡️

Governed Cyber Decision Assurance Platform | ENTERPRISE_V1_FINAL | Standalone Ready: True

🧠 Decision Assurance Center

CONTINUE_MONITORING

Decision Engine: ACTIVE | Latest Incident Risk: HIGH

Recommended Action: ALREADY_CONTAINED | Confidence: 0.92

Governance Gate: REQUIRED | Containment: VERIFIED

Current Pressure · 15m: SAFE | Tactical Risk · 60m: LOW | Operational Exposure · 24h: HIGH

Decision Ledger: VALID | Controlled Memory: ACTIVE | Outcome: VERIFIED_CONTAINED

Conflict Handling: DETECTED & RESOLVED | Incident Episode: 24

No current time window justifies lockdown.

Execution Mode: ANALYSIS_ONLY · Last Decision Update: 2026-10-12T23:50:13.048353

📜 Governance Constitution Baseline

ACTIVE

Version: Constitution V2

Articles: 18 | Missing: 0

Emergency Mode: True | Safe Mode: True

Baseline Check: 2026-06-06 19:19:15 · Governance reference layer

🧬 Survival Engine

NORMAL

Checks: 10/10 | Failed: 0

Continue normal operation

Last Check: 2026-10-12 23:50:12

🧩 Legacy Controller Baseline

HEALTHY

Engines: 9/9

Failed: 0

Baseline Run: 2026-06-06 19:57:01 · Current authoritative status is Cyber Core 21/21

🖥️ Protected Nodes

Registered: 4 | Active: 4 | Healthy: 4 | Unhealthy: 0

✅ node-local-01 | Local Production Server | HEALTHY | Governance: ENFORCED

✅ node-lab-02 | Simulated Lab Node | HEALTHY | Governance: ENFORCED

✅ node-scenario-03 | Governance Scenario Environment | HEALTHY | Governance: ENFORCED

✅ node-deception-04 | Autonomous Threat Intelligence Node | HEALTHY | Governance: ENFORCED

🚨 Node Incidents

Total Incidents: 3

RESOLVED | node-scenario-03 | NODE_HEALTH_DEGRADATION | Severity: HIGH

RESOLVED | node-scenario-03 | NODE_HEALTH_DEGRADATION | Severity: HIGH

[TEST / SYNTHETIC] ACTIVE | node-deception-04 | SYNTHETIC_BRUTE_FORCE_ATTACK | Severity: HIGH

🧠 AI Commander

HIGH

Security Score: 98/100

Total Threats: 287 | Blocked IPs: 139

Incidents: 10 | Contained: 9 | Active Monitoring: 0

Recommendation: No current time window justifies lockdown.

Last Update: 2026-10-12T23:50:13.312019+02:00

📡 Live Threat Feed

Total Feed Events: 15

Last Update: 2026-10-12 23:50:12

2026-10-12T23:50:12.383922+02:00 | INCIDENT | 160.22.126.54 | User: - | Risk: MEDIUM | Action: CONTAINED
2026-10-12T23:50:12.383922+02:00 | INCIDENT | 159.65.128.76 | User: - | Risk: MEDIUM | Action: CONTAINED
2026-10-12T23:50:12.383922+02:00 | INCIDENT | 201.139.186.238 | User: - | Risk: MEDIUM | Action: CONTAINED
2026-10-12T23:50:12.383922+02:00 | INCIDENT | 62.60.130.201 | User: - | Risk: MEDIUM | Action: CONTAINED
2026-10-12T23:50:12.383922+02:00 | INCIDENT | 113.161.6.95 | User: - | Risk: MEDIUM | Action: CONTAINED
2026-10-12T23:30:42.482039+02:00 | SSH_FAILED_LOGIN | 201.139.186.238 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:54:29.112330+02:00 | SSH_FAILED_LOGIN | 159.65.128.76 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:53:45.857152+02:00 | SSH_FAILED_LOGIN | 200.50.67.106 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:53:20.872001+02:00 | SSH_FAILED_LOGIN | 58.211.152.4 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:31:02.888390+02:00 | SSH_FAILED_LOGIN | 168.232.66.60 | User: dell | Risk: LOW | Action: MONITOR

🚨 Temporal Threat Pressure

SAFE

15 Minutes: SAFE | 60 Minutes: LOW | 24 Hours: HIGH

Executive Decision: CONTINUE_MONITORING

2026-10-12T23:50:13.312019+02:00

🛡️ Executive Security Score

98/100

Status: SECURE

Latest Incident Risk: HIGH | Current Decision: CONTINUE_MONITORING

Total Attempts: 287 | Unique Attackers: 245

Containment: VERIFIED | Ledger: VALID

🧠 Unified Decision Evidence

Engine: ACTIVE

Risk: HIGH

Confidence: 0.92

Action: ALREADY_CONTAINED

Governance Required: REQUIRED

Containment: VERIFIED

Conflict: DETECTED & RESOLVED

Episode: 24

Updated: 2026-10-12T23:50:13.048353

📊 Cyber Report

==============================
📊 HUMOUD CYBER REPORT
==============================

Time: 2026-10-12 23:49:58

Total Attempts: 287
Unique Attackers: 245

Top Attacker:
3 62.60.130.201

Most Targeted User:
183 root

System Status: SECURE ✅
==============================

🛰️ Threat Intelligence

Total Failed Attempts: 287

Unique Threat IPs: 245

Top Threat IPs

160.22.126.54 | Attempts: 3 | Risk: MEDIUM
159.65.128.76 | Attempts: 3 | Risk: MEDIUM
201.139.186.238 | Attempts: 3 | Risk: MEDIUM
62.60.130.201 | Attempts: 3 | Risk: MEDIUM
113.161.6.95 | Attempts: 2 | Risk: MEDIUM

Top Targeted Users

root | Attempts: 183
ubuntu | Attempts: 23
admin | Attempts: 6
709394 | Attempts: 4
test | Attempts: 2

🌍 Geo Threat Map

Total Countries: 4

Last Update: 2026-10-12 23:50:12

Unknown | Attempts: 18
Asia | Attempts: 2
Netherlands | Attempts: 2
Europe | Attempts: 2

🕒 Attack Timeline

Total Timeline Events: 30

Last Update: 2026-10-12 23:50:12

2026-10-12T21:37:44.324405+02:00 | SSH_FAILED_LOGIN | 180.168.24.186 | User: md | Risk: LOW | Action: MONITOR
2026-10-12T21:39:33.151077+02:00 | SSH_FAILED_LOGIN | 51.178.24.143 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T21:42:40.737137+02:00 | SSH_FAILED_LOGIN | 152.32.171.213 | User: web | Risk: LOW | Action: MONITOR
2026-10-12T21:45:32.493435+02:00 | SSH_FAILED_LOGIN | 115.190.211.57 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T21:48:09.247291+02:00 | SSH_FAILED_LOGIN | 36.64.131.68 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:31:02.888390+02:00 | SSH_FAILED_LOGIN | 168.232.66.60 | User: dell | Risk: LOW | Action: MONITOR
2026-10-12T22:53:20.872001+02:00 | SSH_FAILED_LOGIN | 58.211.152.4 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:53:45.857152+02:00 | SSH_FAILED_LOGIN | 200.50.67.106 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T22:54:29.112330+02:00 | SSH_FAILED_LOGIN | 159.65.128.76 | User: root | Risk: HIGH | Action: MONITOR
2026-10-12T23:30:42.482039+02:00 | SSH_FAILED_LOGIN | 201.139.186.238 | User: root | Risk: HIGH | Action: MONITOR

🚨 Incident Center

Total Incidents: 10

Contained: 9 | Active Monitoring: 0

Last Update: 2026-10-12T23:50:12.383922+02:00

Latest Incident

Incident ID: INC-SSH-280AECAA8CA9
Threat Type: SSH_BRUTE_FORCE
Source IP: 160.22.126.54
Country: Unknown
Attempts: 3
Risk: MEDIUM
Action: AUTO_BLOCK
Status: CONTAINED

🛑 Auto Block Status

Status: ACTIVE

Total Blocked IPs: 139

Last Update: 2026-10-12 23:50:12

Blocked IPs

101.36.107.233
101.36.125.2
101.47.15.119
101.47.158.56
101.96.203.141
103.105.67.170
103.154.63.62
103.216.119.46
103.216.145.2
103.248.120.6

Historical Enforcement Evidence

[2026-07-30T23:01:37.098691] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 60, 'duration': '24h', 'reason': 'Repeated/high-volume SSH attack pattern detected'}
[2026-07-30T23:02:37.819192] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 60, 'duration': '24h', 'reason': 'Repeated/high-volume SSH attack pattern detected'}
[2026-07-30T23:03:38.204398] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 60, 'duration': '24h', 'reason': 'Repeated/high-volume SSH attack pattern detected'}
[2026-07-30T23:05:38.983489] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 60, 'profile': 'BRUTE_FORCE_ATTACKER', 'duration': '24h', 'reason': 'root_targeting, high_volume, repeated_history', 'decision_source': 'behavior_engine'}
[2026-07-30T23:12:24.198335] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 80, 'profile': 'BRUTE_FORCE_ATTACKER', 'duration': '24h', 'reason': 'root_targeting, high_volume, repeated_history, returned_after_block', 'decision_source': 'behavior_engine'}
[2026-07-30T23:13:42.770692] DECISION {'status': 'SUCCESS', 'approved': True, 'action': 'BLOCK_IP', 'ip': '59.24.133.197', 'risk': 'SEVERE', 'score': 80, 'profile': 'BRUTE_FORCE_ATTACKER', 'duration': '7d', 'reason': 'root_targeting, high_volume, repeated_history, returned_after_block', 'decision_source': 'behavior_engine'}
[2026-07-30T23:14:25.929009] DECISION {'status': 'ACTIVE', 'approved': False, 'action': 'ALREADY_BLOCKED', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': None, 'blocked_until': None, 'reason': 'IP is already blocked; duplicate action suppressed', 'decision_source': 'block_state'}
[2026-07-31T17:36:59.392900] DECISION {'status': 'ACTIVE', 'approved': False, 'action': 'ALREADY_BLOCKED', 'ip': '59.24.133.197', 'risk': 'HIGH', 'score': 80, 'blocked_until': '2026-08-01T17:36:35.663846', 'reason': 'IP is already blocked; duplicate action suppressed', 'decision_source': 'block_state'}
[2026-07-31T17:39:01.072873] DECISION {'status': 'ACTIVE', 'approved': False, 'action': 'ALREADY_BLOCKED', 'ip': '59.24.133.197', 'risk': 'SEVERE', 'score': 80, 'blocked_until': '2026-08-07T17:38:14.340156', 'reason': 'IP is already blocked; duplicate action suppressed', 'decision_source': 'block_state'}
[2026-07-31T17:41:01.252460] DECISION {'status': 'ACTIVE', 'approved': False, 'action': 'ALREADY_BLOCKED', 'ip': '59.24.133.197', 'risk': 'PERMANENT', 'score': 80, 'blocked_until': None, 'reason': 'IP is already blocked; duplicate action suppressed', 'decision_source': 'block_state'}

🛠️ Historical Self-Healing Evidence

Time: 2026-09-19 13:28:17
Status: ACTIVE
Event: SERVICE_FAILURE
Severity: ERROR
Strategy: RESTART_SERVICE
Governance: ALLOW
Execution: EXECUTED
Validation: NO_HEALING_REQUIRED
Confidence: LOW
Cycle: COMPLETED

🔐 Decision Governance & Memory

Ledger Chain: VALID

Ledger Entries: 134

Memory V2: ACTIVE

Memory Records: 124

Execution Outcome: VERIFIED_CONTAINED

Legacy Memory Authoritative: NO

Confidence Self-Amplification: NO