COMMANDS RUN
RECONNAISSANCE
SUCCESSFUL LOGIN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / 159159159
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "6c38bd3d27d9",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:50:17.129246Z",
"end_time": "2026-09-25T09:50:19.097655Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "159159159"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / cameltoe
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "1bc96e92f751",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:16.176701Z",
"end_time": "2026-09-25T09:50:17.788698Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "cameltoe"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
RECONNAISSANCE
SUCCESSFUL LOGIN
SCORE: 200
Credential acceptance event recorded. Target authentication: root / root
Remote entity achieved interactive shell state. Command sequence (9 executed):
[obs-node]:~$
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$
uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$
busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
( [ -f /proc/version ]
[obs-node]:~$
[ -f /proc/version ]
[obs-node]:~$
head -1 /proc/version | cut -d -f1
[obs-node]:~$
[ -f /etc/os-release ]
{
"id": "b9bd519599d9",
"src_ip": "195.178.110.217",
"start_time": "2026-09-25T09:50:16.168723Z",
"end_time": "2026-09-25T09:50:25.689286Z",
"duration": "9.5",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / caravan
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "f39a6d3dc3e6",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:14.235671Z",
"end_time": "2026-09-25T09:50:16.018117Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "caravan"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin123
{
"id": "184c8aae533b",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:50:12.010266Z",
"end_time": "2026-09-25T09:50:14.819668Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin123",
"pass": "admin123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / chinook
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "31c2607dcee5",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:11.471345Z",
"end_time": "2026-09-25T09:50:14.053716Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "chinook"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / chuo
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e8043425776d",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:09.729056Z",
"end_time": "2026-09-25T09:50:11.322319Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "chuo"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / circle
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "37c3129ecbd5",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:08.178263Z",
"end_time": "2026-09-25T09:50:09.580117Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "circle"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: actian
{
"id": "f9ec7a9e093c",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:50:07.172662Z",
"end_time": "2026-09-25T09:50:09.233711Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "actian",
"pass": "actian"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / crow
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "3a8d094153b1",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:06.386575Z",
"end_time": "2026-09-25T09:50:08.011144Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "crow"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / diggler
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "bbe811cc9ab7",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:04.789809Z",
"end_time": "2026-09-25T09:50:06.219535Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "diggler"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / ferris
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "8e2b325cda0c",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:50:02.711812Z",
"end_time": "2026-09-25T09:50:04.637888Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ferris"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "3bbcfbfdc3b0",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:50:01.278204Z",
"end_time": "2026-09-25T09:50:03.513810Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pi",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / ghblehjr
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "cb75397e521d",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:59.564559Z",
"end_time": "2026-09-25T09:50:02.513126Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ghblehjr"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / hill
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "cb1597695e1b",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:57.731071Z",
"end_time": "2026-09-25T09:49:59.405630Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hill"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / hotbox
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "62a1bb0f7f79",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:55.953177Z",
"end_time": "2026-09-25T09:49:57.582396Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hotbox"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vbox
{
"id": "9dea4ce4bc57",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:55.871502Z",
"end_time": "2026-09-25T09:49:58.192556Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "vbox",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / ib6ub9
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "cba84ccfd56a",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:54.289492Z",
"end_time": "2026-09-25T09:49:55.803544Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ib6ub9"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / illinois
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "626c9e3d50b2",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:52.805161Z",
"end_time": "2026-09-25T09:49:54.138053Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "illinois"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / jockey
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "fc93ea75165c",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:51.180104Z",
"end_time": "2026-09-25T09:49:52.656597Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "jockey"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: media
{
"id": "250e352aafb3",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:50.325220Z",
"end_time": "2026-09-25T09:49:52.564293Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "media",
"pass": "rock"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / keegan
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "845598d83304",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:49.640849Z",
"end_time": "2026-09-25T09:49:51.030199Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "keegan"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / kissing
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "474958b1f13e",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:47.213571Z",
"end_time": "2026-09-25T09:49:49.459899Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "kissing"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / lynn
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "1b89f83a9b9a",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:45.696206Z",
"end_time": "2026-09-25T09:49:47.060929Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "lynn"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "04168031c944",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:45.017564Z",
"end_time": "2026-09-25T09:49:47.108939Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / meng
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "c20fe988f341",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:43.989253Z",
"end_time": "2026-09-25T09:49:45.547849Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "meng"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / michae
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "3a802bb1dd18",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:42.016233Z",
"end_time": "2026-09-25T09:49:43.782022Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "michae"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / mollydog
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "63adc3d9cf70",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:40.643262Z",
"end_time": "2026-09-25T09:49:41.869039Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "mollydog"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
RECONNAISSANCE
SUCCESSFUL LOGIN
SCORE: 100
Credential acceptance event recorded. Target authentication: user / 12345
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "e18372778fc7",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:39.263801Z",
"end_time": "2026-09-25T09:49:40.816301Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "12345"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / monte
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "6e26f6cbc9db",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:39.123676Z",
"end_time": "2026-09-25T09:49:40.494320Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "monte"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / niao
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "8eba95b1b778",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:36.528582Z",
"end_time": "2026-09-25T09:49:38.965326Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "niao"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pippin
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "0b29febd55ec",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:34.795830Z",
"end_time": "2026-09-25T09:49:36.332668Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pippin"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nominatim
{
"id": "3b799c50af44",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:33.819294Z",
"end_time": "2026-09-25T09:49:35.853057Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "nominatim",
"pass": "nominatim123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pothead
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "792ef3111fae",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:33.221158Z",
"end_time": "2026-09-25T09:49:34.644023Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pothead"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pussey
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "aa72802ff3f8",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:31.377373Z",
"end_time": "2026-09-25T09:49:33.073393Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pussey"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo SFTP_CHECK
{
"id": "127104b97484",
"src_ip": "96.62.71.5",
"start_time": "2026-09-25T09:49:31.005885Z",
"end_time": "2026-09-25T09:49:31.158833Z",
"duration": "0.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root"
},
"commands": [
"echo SFTP_CHECK"
],
"detailed_commands": [
{
"cmd": "echo SFTP_CHECK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
SCORE: 0
Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a484918834c9",
"src_ip": "96.62.71.5",
"start_time": "2026-09-25T09:49:30.975901Z",
"end_time": "2026-09-25T09:49:30.993730Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}
SCORE: 0
Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9e046a2c178c",
"src_ip": "96.62.71.5",
"start_time": "2026-09-25T09:49:30.974886Z",
"end_time": "2026-09-25T09:49:31.025028Z",
"duration": "0.0",
"version": "SSH-2.0-Go_rawssh_1.0",
"hassh": "6c6da52307978db65609fa3c6e720e4c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / qqqqqqq
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "b1a67133dfb0",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:29.203376Z",
"end_time": "2026-09-25T09:49:31.189482Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qqqqqqq"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gayan
{
"id": "b0b1c9f611f0",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:28.157411Z",
"end_time": "2026-09-25T09:49:30.448162Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gayan",
"pass": "gayan123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / rolling
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "f84f09cee90c",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:27.597310Z",
"end_time": "2026-09-25T09:49:29.020058Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "rolling"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / sander
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "05d785feba07",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:26.081158Z",
"end_time": "2026-09-25T09:49:27.447622Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sander"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / shei
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "885d207bb02c",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:23.699761Z",
"end_time": "2026-09-25T09:49:25.895797Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "shei"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / stanford
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "da721f5e2be5",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:22.357471Z",
"end_time": "2026-09-25T09:49:23.551860Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "stanford"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
RECONNAISSANCE
SUCCESSFUL LOGIN
SCORE: 100
Credential acceptance event recorded. Target authentication: root / Aa112211
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
uname -s -v -n -r -m
{
"id": "13a22a416a02",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:22.058592Z",
"end_time": "2026-09-25T09:49:23.685670Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa112211"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / templar
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "44672570f88c",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:20.823020Z",
"end_time": "2026-09-25T09:49:22.210878Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "templar"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / xxxpass
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "6f01f2b887d3",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:18.602500Z",
"end_time": "2026-09-25T09:49:20.675157Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "xxxpass"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
FAILED LOGIN
SCORE: 0
Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser
{
"id": "2c5cd367269b",
"src_ip": "109.160.32.102",
"start_time": "2026-09-25T09:49:16.499021Z",
"end_time": "2026-09-25T09:49:18.972594Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rdpuser",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / 02031984
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "01e121c3232b",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:15.930570Z",
"end_time": "2026-09-25T09:49:18.418678Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "02031984"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}
COMMANDS RUN
SUCCESSFUL LOGIN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / adam12
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "1dd53d3ebcc9",
"src_ip": "64.226.70.222",
"start_time": "2026-09-25T09:49:13.835812Z",
"end_time": "2026-09-25T09:49:15.752940Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "adam12"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}