nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 2439 / 13462 (673067 total records)
Passive Observation Node - Active Operational Overview
64.226.70.222
2026-09-25 05:18:10.228422 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / westham

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 98319d4b9d78
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "98319d4b9d78",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:10.228422Z",
  "end_time": "2026-09-25T05:18:11.989448Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "westham"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:18:08.238208 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yagami

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: b30e40627e26
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "b30e40627e26",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:08.238208Z",
  "end_time": "2026-09-25T05:18:10.072427Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yagami"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:18:07.226409 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myuser

Record ID: e6a8019c0deb
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "e6a8019c0deb",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:18:07.226409Z",
  "end_time": "2026-09-25T05:18:09.340727Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "myuser",
      "pass": "myuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:18:06.500741 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yamato

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ae391427948e
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ae391427948e",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:06.500741Z",
  "end_time": "2026-09-25T05:18:08.014958Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yamato"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:18:04.820174 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yangyang1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: d1bd2faa01d3
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "d1bd2faa01d3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:04.820174Z",
  "end_time": "2026-09-25T05:18:06.283845Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yangyang1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:18:02.635863 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / zamora

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 6c8516959245
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "6c8516959245",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:02.635863Z",
  "end_time": "2026-09-25T05:18:04.657294Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zamora"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:18:02.375876 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / qwe123!@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 651fe5d4231f
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "651fe5d4231f",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:18:02.375876Z",
  "end_time": "2026-09-25T05:18:03.794038Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwe123!@"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:18:00.899561 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 010587

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: eb8abf7b1d79
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "eb8abf7b1d79",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:18:00.899561Z",
  "end_time": "2026-09-25T05:18:02.487047Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "010587"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:58.923271 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 021279

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: bdac1b6fa602
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "bdac1b6fa602",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:58.923271Z",
  "end_time": "2026-09-25T05:18:00.752930Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "021279"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:57.704610 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wso2

Record ID: d12e59f02897
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "d12e59f02897",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:57.704610Z",
  "end_time": "2026-09-25T05:17:59.537924Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "wso2",
      "pass": "wso2"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:56.999115 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 0406091

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0ec63cf249ff
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0ec63cf249ff",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:56.999115Z",
  "end_time": "2026-09-25T05:17:58.725022Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "0406091"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:55.183875 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 041185

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4c841e46a2dc
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4c841e46a2dc",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:55.183875Z",
  "end_time": "2026-09-25T05:17:56.846934Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "041185"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:53.560925 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 050790

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 8fd74b7095ff
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "8fd74b7095ff",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:53.560925Z",
  "end_time": "2026-09-25T05:17:55.019537Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "050790"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:52.595454 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: arya

Record ID: 9e6f968d558d
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9e6f968d558d",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:52.595454Z",
  "end_time": "2026-09-25T05:17:54.695831Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "arya",
      "pass": "arya@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:51.765024 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 051289

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 52eb0c9edea9
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "52eb0c9edea9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:51.765024Z",
  "end_time": "2026-09-25T05:17:53.392269Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "051289"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:50.008469 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 061284

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 7e9abd0a9f8c
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "7e9abd0a9f8c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:50.008469Z",
  "end_time": "2026-09-25T05:17:51.570747Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "061284"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:48.452516 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 100289

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f475265a6cc8
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f475265a6cc8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:48.452516Z",
  "end_time": "2026-09-25T05:17:49.862569Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "100289"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:47.985097 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 1q2w3e4r

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 6e633f4913e5
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "6e633f4913e5",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:47.985097Z",
  "end_time": "2026-09-25T05:17:49.180905Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "1q2w3e4r"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:46.869945 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 10041991

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f8906f2ff051
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f8906f2ff051",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:46.869945Z",
  "end_time": "2026-09-25T05:17:48.286963Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "10041991"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:44.108880 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 100784

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a1e88229cd37
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a1e88229cd37",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:44.108880Z",
  "end_time": "2026-09-25T05:17:46.699945Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "100784"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:43.487281 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fahmi

Record ID: 75723dae38ac
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "75723dae38ac",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:43.487281Z",
  "end_time": "2026-09-25T05:17:45.281978Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "fahmi",
      "pass": "fahmi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:42.387259 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 10101982

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: b399273cea63
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "b399273cea63",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:42.387259Z",
  "end_time": "2026-09-25T05:17:43.928217Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "10101982"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:40.829705 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 10101983

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e3bf6d1fa4be
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e3bf6d1fa4be",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:40.829705Z",
  "end_time": "2026-09-25T05:17:42.225745Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "10101983"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:38.337457 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: user / passw0rd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: e6e7d6e2a022
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "e6e7d6e2a022",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:38.337457Z",
  "end_time": "2026-09-25T05:17:39.696615Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "passw0rd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:37.924500 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 101281

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: cdaf741a90ff
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "cdaf741a90ff",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:37.924500Z",
  "end_time": "2026-09-25T05:17:40.623457Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "101281"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:35.933565 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 110589

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 99787f87cbbd
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "99787f87cbbd",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:35.933565Z",
  "end_time": "2026-09-25T05:17:37.706832Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "110589"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:34.210913 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 110692

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 828a176479cb
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "828a176479cb",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:34.210913Z",
  "end_time": "2026-09-25T05:17:35.782016Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "110692"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:33.476219 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: service

Record ID: c8341a154421
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "c8341a154421",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:33.476219Z",
  "end_time": "2026-09-25T05:17:35.288723Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "service",
      "pass": "service"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:31.384547 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 110789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: bbd1549ab7b8
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "bbd1549ab7b8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:31.384547Z",
  "end_time": "2026-09-25T05:17:34.042615Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "110789"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:28.987106 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1109

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 5eb59bb4ffbe
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "5eb59bb4ffbe",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:28.987106Z",
  "end_time": "2026-09-25T05:17:31.101413Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1109"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:28.958971 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1

Record ID: 42337afe58d7
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "42337afe58d7",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:28.958971Z",
  "end_time": "2026-09-25T05:17:30.892315Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin1",
      "pass": "12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:26.219847 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 110981

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ad223b175057
Client Version: SSH-2.0-Go
Engagement Duration: 2.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ad223b175057",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:26.219847Z",
  "end_time": "2026-09-25T05:17:28.627478Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "110981"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:24.360187 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zyang

Record ID: 05f23019f1e8
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "05f23019f1e8",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:24.360187Z",
  "end_time": "2026-09-25T05:17:26.323266Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "zyang",
      "pass": "zyang"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:23.191931 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 111288

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ba152a4b07ae
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ba152a4b07ae",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:23.191931Z",
  "end_time": "2026-09-25T05:17:26.025634Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "111288"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:20.509204 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 111983

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f673237a2f76
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f673237a2f76",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:20.509204Z",
  "end_time": "2026-09-25T05:17:22.984733Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "111983"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
193.32.162.84
2026-09-25 05:17:19.644261 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / 123321

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: 903a3773fc69
Client Version: SSH-2.0-Go
Engagement Duration: 8.7s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "903a3773fc69",
  "src_ip": "193.32.162.84",
  "start_time": "2026-09-25T05:17:19.644261Z",
  "end_time": "2026-09-25T05:17:28.334600Z",
  "duration": "8.7",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123321"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:19.633847 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: user / Aa123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: b51f9fb56f8f
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b51f9fb56f8f",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:19.633847Z",
  "end_time": "2026-09-25T05:17:21.462919Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "Aa123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:18.441969 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 120185

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a3a3596e0ab8
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a3a3596e0ab8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:18.441969Z",
  "end_time": "2026-09-25T05:17:20.253780Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "120185"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:16.661057 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 120786

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3bff7c67ce93
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3bff7c67ce93",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:16.661057Z",
  "end_time": "2026-09-25T05:17:18.294151Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "120786"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:15.094745 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newuser

Record ID: ce614511d2a3
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "ce614511d2a3",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:15.094745Z",
  "end_time": "2026-09-25T05:17:17.083567Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "newuser",
      "pass": "newuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:14.372525 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 121089

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 2930e0530419
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "2930e0530419",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:14.372525Z",
  "end_time": "2026-09-25T05:17:16.484672Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "121089"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:12.525245 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 121187

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 78f9b1bedb89
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "78f9b1bedb89",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:12.525245Z",
  "end_time": "2026-09-25T05:17:14.203084Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "121187"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:10.718546 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 121277

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: bf2bdab591ea
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "bf2bdab591ea",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:10.718546Z",
  "end_time": "2026-09-25T05:17:12.378393Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "121277"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:10.294948 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jeet

Record ID: b3d022b6a6bb
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b3d022b6a6bb",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:10.294948Z",
  "end_time": "2026-09-25T05:17:12.088498Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jeet",
      "pass": "jeet@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:08.578342 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1234567890q

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a6cf66d9ca42
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a6cf66d9ca42",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:08.578342Z",
  "end_time": "2026-09-25T05:17:10.537616Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890q"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:06.663271 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12356

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: b20efbee12dd
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "b20efbee12dd",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:06.663271Z",
  "end_time": "2026-09-25T05:17:08.417170Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12356"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:05.657648 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 051178

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: adf5317d8686
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "adf5317d8686",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:05.657648Z",
  "end_time": "2026-09-25T05:17:07.111831Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "051178"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:05.125053 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1237894561

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4494579db7ce
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4494579db7ce",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:05.125053Z",
  "end_time": "2026-09-25T05:17:06.516125Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1237894561"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 05:17:02.739326 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 130479

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 72ef5cb3a731
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "72ef5cb3a731",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T05:17:02.739326Z",
  "end_time": "2026-09-25T05:17:04.937158Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "130479"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.110
2026-09-25 05:17:00.721941 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 83d8d2f1d382
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "83d8d2f1d382",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T05:17:00.721941Z",
  "end_time": "2026-09-25T05:17:02.235574Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}