FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mongo
{
"id": "a48357db3cfa",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:18:09.153717Z",
"end_time": "2026-09-11T00:18:12.005537Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mongo",
"pass": "qwe123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: ubuntu / data@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "6be40f51d7b2",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:18:04.146323Z",
"end_time": "2026-09-11T00:18:05.871927Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "data@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: token
{
"id": "97da2ad7a597",
"src_ip": "77.94.99.50",
"start_time": "2026-09-11T00:18:01.250908Z",
"end_time": "2026-09-11T00:18:03.426971Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "token",
"pass": "token-2023"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / baby88
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "949eef041a28",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:58.562640Z",
"end_time": "2026-09-11T00:18:01.080816Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "baby88"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 821028
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "209222298164",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:53.385970Z",
"end_time": "2026-09-11T00:17:55.245524Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "821028"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 545545
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "0e115d08f7ef",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:47.587068Z",
"end_time": "2026-09-11T00:17:49.633190Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "545545"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user
{
"id": "86e8b4201719",
"src_ip": "67.206.199.37",
"start_time": "2026-09-11T00:17:42.452304Z",
"end_time": "2026-09-11T00:17:44.211649Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "ec2-user",
"pass": "Example2022"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / P@sswoRD
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "fc657a63e89d",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:42.428139Z",
"end_time": "2026-09-11T00:17:44.235017Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@sswoRD"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / w%49Z%DzexLf
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "82fe7e407552",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:37.205429Z",
"end_time": "2026-09-11T00:17:38.425266Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "w%49Z%DzexLf"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Myd123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "eecd4c7a0b48",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:31.576725Z",
"end_time": "2026-09-11T00:17:33.001409Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Myd123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / dimabilan
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "7b7a8858a2de",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:26.149112Z",
"end_time": "2026-09-11T00:17:27.756559Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "dimabilan"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 80898
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "511ec2db3563",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:20.781946Z",
"end_time": "2026-09-11T00:17:22.536846Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "80898"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 200
Credential acceptance event recorded. Target authentication: root / 111111
Remote entity achieved interactive shell state. Command sequence (9 executed):
[obs-node]:~$
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$
uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$
busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
( [ -f /proc/version ]
[obs-node]:~$
[ -f /proc/version ]
[obs-node]:~$
head -1 /proc/version | cut -d -f1
[obs-node]:~$
[ -f /etc/os-release ]
{
"id": "2b7352d24775",
"src_ip": "92.118.39.49",
"start_time": "2026-09-11T00:17:20.549705Z",
"end_time": "2026-09-11T00:17:22.548115Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "111111"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: properties
{
"id": "3403b9f7a9dd",
"src_ip": "34.26.152.184",
"start_time": "2026-09-11T00:17:15.762045Z",
"end_time": "2026-09-11T00:17:17.068464Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "properties",
"pass": "properties"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: ubuntu / debian12345678
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "eff55debf60d",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:15.692436Z",
"end_time": "2026-09-11T00:17:17.624799Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "debian12345678"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sharepoint
{
"id": "0fb1413aa6f3",
"src_ip": "103.179.111.84",
"start_time": "2026-09-11T00:17:12.622290Z",
"end_time": "2026-09-11T00:17:14.983052Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "sharepoint",
"pass": "TeamCollab@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 6aseHuG6Ey8mRtz@
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "74a639b37460",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:10.306310Z",
"end_time": "2026-09-11T00:17:12.222846Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "6aseHuG6Ey8mRtz@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webmaster
{
"id": "ae69c2d7afb4",
"src_ip": "222.124.1.243",
"start_time": "2026-09-11T00:17:09.401296Z",
"end_time": "2026-09-11T00:17:14.858926Z",
"duration": "5.5",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "webmaster",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
SCORE: 0
Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "13095380485c",
"src_ip": "114.16.207.90",
"start_time": "2026-09-11T00:17:09.195086Z",
"end_time": "2026-09-11T00:17:19.001584Z",
"duration": "9.8",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 880088
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "17e1d8d72833",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:17:04.688620Z",
"end_time": "2026-09-11T00:17:06.499467Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "880088"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: matcha
{
"id": "7adaa1110b95",
"src_ip": "103.16.72.118",
"start_time": "2026-09-11T00:17:02.361259Z",
"end_time": "2026-09-11T00:17:04.801207Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "matcha",
"pass": "matcha"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / hunger
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "809420420cee",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:59.349756Z",
"end_time": "2026-09-11T00:17:01.164130Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hunger"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / stella11
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "87e715c6004f",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:53.578298Z",
"end_time": "2026-09-11T00:16:55.380258Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "stella11"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: george
{
"id": "1983a75426fe",
"src_ip": "37.252.75.165",
"start_time": "2026-09-11T00:16:48.764664Z",
"end_time": "2026-09-11T00:16:50.797529Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "george",
"pass": "password38.123.139.74"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: omikawa
{
"id": "2520c6ad11cf",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:48.122665Z",
"end_time": "2026-09-11T00:16:50.985794Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "omikawa",
"pass": "123654"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / huawe@1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "2f3b45f1d118",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:42.455945Z",
"end_time": "2026-09-11T00:16:44.134687Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "huawe@1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hans
{
"id": "dab5962ca573",
"src_ip": "84.236.153.83",
"start_time": "2026-09-11T00:16:40.414515Z",
"end_time": "2026-09-11T00:16:42.201793Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "hans",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: chainlink
{
"id": "2bc0201bb4b2",
"src_ip": "62.80.98.102",
"start_time": "2026-09-11T00:16:39.991241Z",
"end_time": "2026-09-11T00:16:41.775314Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "chainlink",
"pass": "chainlink"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dell
{
"id": "61306bac51af",
"src_ip": "190.2.22.129",
"start_time": "2026-09-11T00:16:37.573395Z",
"end_time": "2026-09-11T00:16:41.237912Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "dell",
"pass": "dell"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / marketing1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "317dc4472975",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:36.894556Z",
"end_time": "2026-09-11T00:16:39.035747Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "marketing1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Qib123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "abeb1bdce451",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:31.646407Z",
"end_time": "2026-09-11T00:16:33.253169Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qib123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Root2021
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -a 2>/dev/null
{
"id": "6368d432b94b",
"src_ip": "179.61.137.23",
"start_time": "2026-09-11T00:16:31.121953Z",
"end_time": "2026-09-11T00:16:31.639049Z",
"duration": "0.5",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Root2021"
},
"commands": [
"uname -a 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "uname -a 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: crypto
{
"id": "cf37cbeb2a1d",
"src_ip": "178.73.10.24",
"start_time": "2026-09-11T00:16:28.883725Z",
"end_time": "2026-09-11T00:16:30.743029Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "crypto",
"pass": "crypto!2021"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / hwserver2011
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "af36d983bbf6",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:26.056324Z",
"end_time": "2026-09-11T00:16:28.149939Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hwserver2011"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / i@1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "b9b86445a627",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:20.651703Z",
"end_time": "2026-09-11T00:16:21.969491Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "i@1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / darkhorse
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "5eefabd0c1c4",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:15.265534Z",
"end_time": "2026-09-11T00:16:16.504219Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "darkhorse"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / shift*nycblssip
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "cb31adac096b",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:10.057556Z",
"end_time": "2026-09-11T00:16:11.533880Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "shift*nycblssip"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Admin!2024
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -a 2>/dev/null
{
"id": "c0fc63c7128b",
"src_ip": "66.29.129.108",
"start_time": "2026-09-11T00:16:09.236792Z",
"end_time": "2026-09-11T00:16:09.379524Z",
"duration": "0.1",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Admin!2024"
},
"commands": [
"uname -a 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "uname -a 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 894159177
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "694da0737691",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:16:04.103444Z",
"end_time": "2026-09-11T00:16:05.342765Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "894159177"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Super147258..
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "58f06593bd53",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:58.321084Z",
"end_time": "2026-09-11T00:15:59.532806Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Super147258.."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Pdr123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "8c842e8252f4",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:52.176910Z",
"end_time": "2026-09-11T00:15:53.553677Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Pdr123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: delivery
{
"id": "f1b1a05dc1b2",
"src_ip": "37.112.63.139",
"start_time": "2026-09-11T00:15:50.432009Z",
"end_time": "2026-09-11T00:15:52.436867Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "delivery",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / hengbing654321
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "eccdf6cae367",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:46.690186Z",
"end_time": "2026-09-11T00:15:48.144269Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hengbing654321"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Qme123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "9a84f4292503",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:40.919677Z",
"end_time": "2026-09-11T00:15:42.344688Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qme123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / huawei@321
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "5ae5acd3b174",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:35.551701Z",
"end_time": "2026-09-11T00:15:37.717322Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "huawei@321"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: test / qwe123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -a 2>/dev/null
{
"id": "d7cb94c89ebd",
"src_ip": "175.139.151.249",
"start_time": "2026-09-11T00:15:35.372541Z",
"end_time": "2026-09-11T00:15:38.934485Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "qwe123"
},
"commands": [
"uname -a 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "uname -a 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: support / asdfgh
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "7cdbf3d2c37a",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:29.793577Z",
"end_time": "2026-09-11T00:15:31.120003Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "asdfgh"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dinghanzhou
{
"id": "54bb6e37268c",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:24.052174Z",
"end_time": "2026-09-11T00:15:25.921271Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dinghanzhou",
"pass": "dinghanzhou"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: business
{
"id": "3b99a14476c2",
"src_ip": "103.28.38.27",
"start_time": "2026-09-11T00:15:20.433070Z",
"end_time": "2026-09-11T00:15:22.380520Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "06ff3615a51b2af343ec22abc8e30bbc",
"attempts": [
{
"user": "business",
"pass": "business"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 16041992
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "5561e551f658",
"src_ip": "109.160.32.85",
"start_time": "2026-09-11T00:15:18.229435Z",
"end_time": "2026-09-11T00:15:20.198846Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "16041992"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}