nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 2511 / 13707 (685309 total records)
Passive Observation Node - Active Operational Overview
64.226.70.222
2026-09-25 09:49:20.823020 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / templar

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 44672570f88c
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "44672570f88c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:20.823020Z",
  "end_time": "2026-09-25T09:49:22.210878Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "templar"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:18.602500 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / xxxpass

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 6f01f2b887d3
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "6f01f2b887d3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:18.602500Z",
  "end_time": "2026-09-25T09:49:20.675157Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "xxxpass"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:49:16.499021 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser

Record ID: 2c5cd367269b
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "2c5cd367269b",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:16.499021Z",
  "end_time": "2026-09-25T09:49:18.972594Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "rdpuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:15.930570 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02031984

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 01e121c3232b
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "01e121c3232b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:15.930570Z",
  "end_time": "2026-09-25T09:49:18.418678Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02031984"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:13.835812 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / adam12

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 1dd53d3ebcc9
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "1dd53d3ebcc9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:13.835812Z",
  "end_time": "2026-09-25T09:49:15.752940Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "adam12"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:11.752166 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ashlee

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a6ae75a3fce4
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a6ae75a3fce4",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:11.752166Z",
  "end_time": "2026-09-25T09:49:13.605574Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ashlee"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:49:11.133497 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wjw

Record ID: 9a8325fb0ec2
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9a8325fb0ec2",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:11.133497Z",
  "end_time": "2026-09-25T09:49:13.607257Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "wjw",
      "pass": "wjw2019"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:09.964695 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / beautifu

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: afcb7282eab9
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "afcb7282eab9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:09.964695Z",
  "end_time": "2026-09-25T09:49:11.574423Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "beautifu"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:08.277529 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / buffy1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 323ea0f508a5
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "323ea0f508a5",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:08.277529Z",
  "end_time": "2026-09-25T09:49:09.808508Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "buffy1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:05.948063 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ceng

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fa1375206948
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fa1375206948",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:05.948063Z",
  "end_time": "2026-09-25T09:49:08.128725Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ceng"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:49:05.814977 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: paas

Record ID: 3ced6f000341
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "3ced6f000341",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:05.814977Z",
  "end_time": "2026-09-25T09:49:08.000295Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "paas",
      "pass": "Huawei12"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:04.246132 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / checkers

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: b78cee6c762a
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "b78cee6c762a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:04.246132Z",
  "end_time": "2026-09-25T09:49:05.783159Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "checkers"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:02.198056 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / flexible

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e269080bad03
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e269080bad03",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:02.198056Z",
  "end_time": "2026-09-25T09:49:04.098990Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "flexible"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:49:00.951573 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vyos

Record ID: 533a4c468278
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "533a4c468278",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:00.951573Z",
  "end_time": "2026-09-25T09:49:02.874564Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "vyos",
      "pass": "vyos"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:49:00.009548 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fuzzy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 1e34d0a386b0
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "1e34d0a386b0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:00.009548Z",
  "end_time": "2026-09-25T09:49:01.945027Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fuzzy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:58.380892 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fytxrf

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ed4165b42b46
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ed4165b42b46",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:58.380892Z",
  "end_time": "2026-09-25T09:48:59.838274Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fytxrf"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:56.455323 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gawker

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ea8a030b44e0
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ea8a030b44e0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:56.455323Z",
  "end_time": "2026-09-25T09:48:58.209153Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gawker"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:55.150597 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 56779acb3693
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "56779acb3693",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:55.150597Z",
  "end_time": "2026-09-25T09:48:56.806262Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
195.88.120.62
2026-09-25 09:48:53.964381 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 65d119ad5f95
Client Version: Unknown
Engagement Duration: 2.9s
{
  "id": "65d119ad5f95",
  "src_ip": "195.88.120.62",
  "start_time": "2026-09-25T09:48:53.964381Z",
  "end_time": "2026-09-25T09:48:56.825655Z",
  "duration": "2.9",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
64.226.70.222
2026-09-25 09:48:53.347565 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gobucks

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 57a7430bd7b8
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "57a7430bd7b8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:53.347565Z",
  "end_time": "2026-09-25T09:48:56.258085Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gobucks"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:50.948536 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hardcock

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: c10ce30d68f2
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "c10ce30d68f2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:50.948536Z",
  "end_time": "2026-09-25T09:48:53.174895Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hardcock"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:49.822525 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 3991e1f1e05a
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "3991e1f1e05a",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:49.822525Z",
  "end_time": "2026-09-25T09:48:51.607474Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:47.275171 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jamie1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 25e3c9caad97
Client Version: SSH-2.0-Go
Engagement Duration: 3.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "25e3c9caad97",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:47.275171Z",
  "end_time": "2026-09-25T09:48:50.787683Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jamie1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:45.229451 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jing

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: d219fb4f3c5c
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "d219fb4f3c5c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:45.229451Z",
  "end_time": "2026-09-25T09:48:47.028911Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jing"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:44.410444 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: mysql / mysql123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 23662aa189be
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "23662aa189be",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:44.410444Z",
  "end_time": "2026-09-25T09:48:47.226504Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "mysql",
    "pass": "mysql123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:43.483698 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jiong

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 48496fb1063b
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "48496fb1063b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:43.483698Z",
  "end_time": "2026-09-25T09:48:45.080014Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jiong"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:41.316818 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / just4me

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4fd528a69525
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4fd528a69525",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:41.316818Z",
  "end_time": "2026-09-25T09:48:43.291855Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "just4me"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:39.735758 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lexus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 81e41525c0d6
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "81e41525c0d6",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:39.735758Z",
  "end_time": "2026-09-25T09:48:41.150238Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lexus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:39.149215 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: astra

Record ID: 2be97f444381
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "2be97f444381",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:39.149215Z",
  "end_time": "2026-09-25T09:48:41.684900Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "astra",
      "pass": "astra"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:38.118392 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lighter

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 918ec4ac80a2
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "918ec4ac80a2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:38.118392Z",
  "end_time": "2026-09-25T09:48:39.568783Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lighter"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:36.441542 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / loaded

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 305bbc5fb204
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "305bbc5fb204",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:36.441542Z",
  "end_time": "2026-09-25T09:48:37.968773Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "loaded"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:34.506829 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lust

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3441690c8da2
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3441690c8da2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:34.506829Z",
  "end_time": "2026-09-25T09:48:36.199732Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lust"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:33.735734 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: chris

Record ID: 1f8f7ebd9797
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "1f8f7ebd9797",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:33.735734Z",
  "end_time": "2026-09-25T09:48:35.853334Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "chris",
      "pass": "chris"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:31.189442 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / milkman

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ecb4c3356170
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ecb4c3356170",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:31.189442Z",
  "end_time": "2026-09-25T09:48:34.359934Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "milkman"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:28.608612 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / nude

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0329be6986d8
Client Version: SSH-2.0-Go
Engagement Duration: 2.3s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0329be6986d8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:28.608612Z",
  "end_time": "2026-09-25T09:48:30.959771Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "nude"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:28.284814 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / bash

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: a0f77ad99643
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "a0f77ad99643",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:28.284814Z",
  "end_time": "2026-09-25T09:48:29.783578Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bash"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:26.414817 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / penny1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 22721d412c04
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "22721d412c04",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:26.414817Z",
  "end_time": "2026-09-25T09:48:28.438415Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "penny1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
139.19.117.130
2026-09-25 09:48:25.210498 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: root

Record ID: a6fa8627fdba
Client Version: SSH-2.0-Go
Engagement Duration: 10.0s
HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532
{
  "id": "a6fa8627fdba",
  "src_ip": "139.19.117.130",
  "start_time": "2026-09-25T09:48:25.210498Z",
  "end_time": "2026-09-25T09:48:35.209662Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:23.353587 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / phone

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 89307a952871
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "89307a952871",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:23.353587Z",
  "end_time": "2026-09-25T09:48:26.219429Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "phone"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:23.269515 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mapingyuan

Record ID: c5c1b70ccb4f
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "c5c1b70ccb4f",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:23.269515Z",
  "end_time": "2026-09-25T09:48:25.381967Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "mapingyuan",
      "pass": "qwe123!@"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:22.002095 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / puddin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3a658fef21d3
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3a658fef21d3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:22.002095Z",
  "end_time": "2026-09-25T09:48:23.200897Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "puddin"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:20.471318 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / qiong

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 36e0932ce3bb
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "36e0932ce3bb",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:20.471318Z",
  "end_time": "2026-09-25T09:48:21.853853Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qiong"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:18.056419 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Aa112211..

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: fea465f0f588
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "fea465f0f588",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:18.056419Z",
  "end_time": "2026-09-25T09:48:20.104445Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa112211.."
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:17.889874 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / recovery

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e3919806757b
Client Version: SSH-2.0-Go
Engagement Duration: 2.3s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e3919806757b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:17.889874Z",
  "end_time": "2026-09-25T09:48:20.235587Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "recovery"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:15.625096 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / riley

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 1d8862f37e2d
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "1d8862f37e2d",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:15.625096Z",
  "end_time": "2026-09-25T09:48:17.720660Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "riley"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 09:48:12.731840 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@ssword1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: a8adf14757e2
Client Version: SSH-2.0-Go
Engagement Duration: 2.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "a8adf14757e2",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:12.731840Z",
  "end_time": "2026-09-25T09:48:15.155627Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@ssword1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:12.437817 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / seahawks

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 04b164aa548f
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "04b164aa548f",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:12.437817Z",
  "end_time": "2026-09-25T09:48:15.406655Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "seahawks"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
195.178.110.217
2026-09-25 09:48:12.022969 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / qwerty

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: b96ac54dcafa
Client Version: SSH-2.0-Go
Engagement Duration: 11.2s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "b96ac54dcafa",
  "src_ip": "195.178.110.217",
  "start_time": "2026-09-25T09:48:12.022969Z",
  "end_time": "2026-09-25T09:48:23.181268Z",
  "duration": "11.2",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwerty"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:10.357210 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / stories

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: acea4399dd72
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "acea4399dd72",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:10.357210Z",
  "end_time": "2026-09-25T09:48:12.185043Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "stories"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 09:48:08.815545 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / strength

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f439eaf6bd13
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f439eaf6bd13",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:08.815545Z",
  "end_time": "2026-09-25T09:48:10.210010Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "strength"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}