nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 2515 / 13729 (686411 total records)
Passive Observation Node - Active Operational Overview
64.226.70.222
2026-09-25 10:09:59.042171 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pavel

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4a5442282e9e
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4a5442282e9e",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:59.042171Z",
  "end_time": "2026-09-25T10:10:00.830834Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pavel"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:58.087627 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / happy1314

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 241467dcee2b
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "241467dcee2b",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:58.087627Z",
  "end_time": "2026-09-25T10:09:59.681105Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "happy1314"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:57.419878 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / platypus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: d52f60f4e812
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "d52f60f4e812",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:57.419878Z",
  "end_time": "2026-09-25T10:09:58.858919Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "platypus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:55.483736 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / popper

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 6c5abfd1deb7
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "6c5abfd1deb7",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:55.483736Z",
  "end_time": "2026-09-25T10:09:57.271114Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "popper"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:53.228456 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ramrod

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0b6b55e5bc37
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0b6b55e5bc37",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:53.228456Z",
  "end_time": "2026-09-25T10:09:55.322921Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ramrod"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:53.225908 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: server

Record ID: 45b6cbc28f58
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "45b6cbc28f58",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:53.225908Z",
  "end_time": "2026-09-25T10:09:55.399020Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "server",
      "pass": "0000"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:51.075687 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / royal

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: c2c3bf344c0c
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "c2c3bf344c0c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:51.075687Z",
  "end_time": "2026-09-25T10:09:53.035642Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "royal"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:48.327981 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sergi

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 457e4f337e27
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "457e4f337e27",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:48.327981Z",
  "end_time": "2026-09-25T10:09:50.842989Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sergi"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:48.054948 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenkins

Record ID: 1b22ca5d831e
Client Version: SSH-2.0-Go
Engagement Duration: 2.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "1b22ca5d831e",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:48.054948Z",
  "end_time": "2026-09-25T10:09:50.238236Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jenkins",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:45.397969 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / simmons

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 9a386032afa1
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "9a386032afa1",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:45.397969Z",
  "end_time": "2026-09-25T10:09:48.013927Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "simmons"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:43.168022 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / spiker

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fafac5b5b553
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fafac5b5b553",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:43.168022Z",
  "end_time": "2026-09-25T10:09:45.023503Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "spiker"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:43.155856 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tom

Record ID: 5af4cf116792
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "5af4cf116792",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:43.155856Z",
  "end_time": "2026-09-25T10:09:45.167789Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "tom",
      "pass": "tom"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:41.439743 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / spoon

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 32d4b3b3e150
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "32d4b3b3e150",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:41.439743Z",
  "end_time": "2026-09-25T10:09:43.015612Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "spoon"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:39.763244 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / stylus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4050fa9e4e55
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4050fa9e4e55",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:39.763244Z",
  "end_time": "2026-09-25T10:09:41.292718Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "stylus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:38.225996 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sucking

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 2d7ed388f0f3
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "2d7ed388f0f3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:38.225996Z",
  "end_time": "2026-09-25T10:09:39.616501Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sucking"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:37.931010 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / qwertyuiop

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 6aadf892c8a1
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "6aadf892c8a1",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:37.931010Z",
  "end_time": "2026-09-25T10:09:39.266109Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "qwertyuiop"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:36.682313 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / taxman

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f844f2689821
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f844f2689821",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:36.682313Z",
  "end_time": "2026-09-25T10:09:38.077146Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "taxman"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:34.767040 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / webber

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fb15ca37c582
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fb15ca37c582",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:34.767040Z",
  "end_time": "2026-09-25T10:09:36.506295Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "webber"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:33.597861 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 090807

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 53c7ddf67eda
Client Version: SSH-2.0-Go
Engagement Duration: 1.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "53c7ddf67eda",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:33.597861Z",
  "end_time": "2026-09-25T10:09:34.690897Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "090807"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:33.174997 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / webmaste

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 898fe6134f31
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "898fe6134f31",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:33.174997Z",
  "end_time": "2026-09-25T10:09:34.619482Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "webmaste"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:31.426462 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / wwww

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 2df06d163c26
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "2df06d163c26",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:31.426462Z",
  "end_time": "2026-09-25T10:09:33.016032Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "wwww"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:29.678202 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / zander

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3e9cdcbfc5c0
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3e9cdcbfc5c0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:29.678202Z",
  "end_time": "2026-09-25T10:09:31.277631Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zander"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:28.774639 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 12345123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 05ce661d3e2e
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "05ce661d3e2e",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:28.774639Z",
  "end_time": "2026-09-25T10:09:30.202114Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:27.911923 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02041979

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: c15bb403dc79
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "c15bb403dc79",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:27.911923Z",
  "end_time": "2026-09-25T10:09:29.529456Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02041979"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:26.121850 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02071988

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 53d1a71dd3ce
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "53d1a71dd3ce",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:26.121850Z",
  "end_time": "2026-09-25T10:09:27.744166Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02071988"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:24.559725 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02081977

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3daeea4dbb6b
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3daeea4dbb6b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:24.559725Z",
  "end_time": "2026-09-25T10:09:25.959680Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02081977"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:24.383675 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / cupcake

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 692eb70f37ad
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "692eb70f37ad",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:24.383675Z",
  "end_time": "2026-09-25T10:09:25.705882Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cupcake"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:22.903916 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1121

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f49d406572be
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f49d406572be",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:22.903916Z",
  "end_time": "2026-09-25T10:09:24.414283Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1121"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:21.231507 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 22041987

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4c2e27177ae0
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4c2e27177ae0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:21.231507Z",
  "end_time": "2026-09-25T10:09:22.756407Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "22041987"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:19.705387 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: garcia

Record ID: 08e92a33af10
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "08e92a33af10",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:19.705387Z",
  "end_time": "2026-09-25T10:09:21.469279Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "garcia",
      "pass": "garcia"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:19.588421 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 333777

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a00c35a39dc6
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a00c35a39dc6",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:19.588421Z",
  "end_time": "2026-09-25T10:09:21.035826Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "333777"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:17.968701 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 426hemi

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 78f546aff093
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "78f546aff093",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:17.968701Z",
  "end_time": "2026-09-25T10:09:19.439538Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "426hemi"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
195.178.110.217
2026-09-25 10:09:17.009943 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: admin / 21

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: 419f69c0683e
Client Version: SSH-2.0-Go
Engagement Duration: 7.4s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "419f69c0683e",
  "src_ip": "195.178.110.217",
  "start_time": "2026-09-25T10:09:17.009943Z",
  "end_time": "2026-09-25T10:09:24.409442Z",
  "duration": "7.4",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "21"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:15.577822 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / almond

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 739da9c84eff
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "739da9c84eff",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:15.577822Z",
  "end_time": "2026-09-25T10:09:17.716126Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "almond"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:15.006742 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123321qwe

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 42d8df7d0235
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "42d8df7d0235",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:15.006742Z",
  "end_time": "2026-09-25T10:09:16.402681Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123321qwe"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:13.948220 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / banger

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: b13f7086ca5c
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "b13f7086ca5c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:13.948220Z",
  "end_time": "2026-09-25T10:09:15.378561Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "banger"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:11.231062 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / boozer

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 5285e4380d0c
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "5285e4380d0c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:11.231062Z",
  "end_time": "2026-09-25T10:09:13.788593Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "boozer"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:10.233124 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: njupt078

Record ID: 0cf9a1312b8e
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "0cf9a1312b8e",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:10.233124Z",
  "end_time": "2026-09-25T10:09:12.197973Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "njupt078",
      "pass": "Huawei@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:08.733540 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / brittney

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 5ee6186a76f3
Client Version: SSH-2.0-Go
Engagement Duration: 2.3s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "5ee6186a76f3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:08.733540Z",
  "end_time": "2026-09-25T10:09:11.078444Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "brittney"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:07.096924 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / broker

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 8a66a9bb0d31
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "8a66a9bb0d31",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:07.096924Z",
  "end_time": "2026-09-25T10:09:08.562489Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "broker"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:05.488156 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 244964c9a949
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "244964c9a949",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:05.488156Z",
  "end_time": "2026-09-25T10:09:07.000453Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:05.365601 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / buttfuck

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 3583fa7d2702
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "3583fa7d2702",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:05.365601Z",
  "end_time": "2026-09-25T10:09:06.946970Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "buttfuck"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:03.530807 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / citadel

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0a94d2988e72
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0a94d2988e72",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:03.530807Z",
  "end_time": "2026-09-25T10:09:05.197075Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "citadel"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:09:01.662837 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / dogboy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: dc5048787ca7
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "dc5048787ca7",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:09:01.662837Z",
  "end_time": "2026-09-25T10:09:03.308106Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "dogboy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:09:00.829326 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webmaster

Record ID: 2e1bf4b593e8
Client Version: SSH-2.0-Go
Engagement Duration: 2.3s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "2e1bf4b593e8",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:09:00.829326Z",
  "end_time": "2026-09-25T10:09:03.102406Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "webmaster",
      "pass": "webmaster"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:08:59.904516 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / dogcat

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e3cf39f6a992
Client Version: SSH-2.0-Go
Engagement Duration: 1.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e3cf39f6a992",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:08:59.904516Z",
  "end_time": "2026-09-25T10:09:01.488435Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "dogcat"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:08:58.391646 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / erin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e948ed77cbeb
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e948ed77cbeb",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:08:58.391646Z",
  "end_time": "2026-09-25T10:08:59.754925Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "erin"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:08:56.580431 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / everett

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ef258a25dc6a
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ef258a25dc6a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:08:56.580431Z",
  "end_time": "2026-09-25T10:08:58.241902Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "everett"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
109.160.32.102
2026-09-25 10:08:56.406912 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Caps

Record ID: 9bcf7cbd836a
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9bcf7cbd836a",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T10:08:56.406912Z",
  "end_time": "2026-09-25T10:08:58.530000Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "Caps",
      "pass": "Caps"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.226.70.222
2026-09-25 10:08:53.433950 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fishin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fd46c4e70aef
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fd46c4e70aef",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T10:08:53.433950Z",
  "end_time": "2026-09-25T10:08:56.164118Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fishin"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}