Adversarial Observation Interface

78.107.31.154

2026-07-11 19:24:41.132219 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / aaron431

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1c11b774d32e

Client Version: SSH-2.0-Go

Engagement Duration: 3.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1c11b774d32e",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:41.132219Z",
  "end_time": "2026-07-11T19:24:44.758096Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aaron431"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:38.179441 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / iluvu2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 4e455ae3dad8

Client Version: SSH-2.0-Go

Engagement Duration: 2.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "4e455ae3dad8",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:38.179441Z",
  "end_time": "2026-07-11T19:24:40.851903Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "iluvu2"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:34.433596 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / wayne1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: d21dfe1bcdd7

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "d21dfe1bcdd7",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:34.433596Z",
  "end_time": "2026-07-11T19:24:37.869937Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "wayne1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:31.303992 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / chargers1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 27670cddafde

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "27670cddafde",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:31.303992Z",
  "end_time": "2026-07-11T19:24:34.137266Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "chargers1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:27.971858 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yahoo123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 2aa7dd2de948

Client Version: SSH-2.0-Go

Engagement Duration: 3.1s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "2aa7dd2de948",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:27.971858Z",
  "end_time": "2026-07-11T19:24:31.059945Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yahoo123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:24.978666 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / cme2012

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: e078fe5944e2

Client Version: SSH-2.0-Go

Engagement Duration: 2.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "e078fe5944e2",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:24.978666Z",
  "end_time": "2026-07-11T19:24:27.722691Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cme2012"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

91.92.40.11

2026-07-11 19:24:23.530530 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 200

Credential acceptance event recorded. Target authentication: git / 12345678

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

[obs-node]:~$ uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null

Command not found: /usr/bin/uname -s -v -n -m

[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ ( [ -f /proc/version ]

[obs-node]:~$ [ -f /proc/version ]

[obs-node]:~$ head -1 /proc/version | cut -d -f1

[obs-node]:~$ [ -f /etc/os-release ]

Record ID: 4cc20c318fb5

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5

{
  "id": "4cc20c318fb5",
  "src_ip": "91.92.40.11",
  "start_time": "2026-07-11T19:24:23.530530Z",
  "end_time": "2026-07-11T19:24:26.401928Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "12345678"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:21.285597 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fuckyou12

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 76e9953d6c26

Client Version: SSH-2.0-Go

Engagement Duration: 3.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "76e9953d6c26",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:21.285597Z",
  "end_time": "2026-07-11T19:24:24.630913Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fuckyou12"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

14.29.248.43

2026-07-11 19:24:19.872102 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 058c6c788b4e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "058c6c788b4e",
  "src_ip": "14.29.248.43",
  "start_time": "2026-07-11T19:24:19.872102Z",
  "end_time": "2026-07-11T19:24:19.875090Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

78.107.31.154

2026-07-11 19:24:17.431602 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / my2girls

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: bfd088c23e2d

Client Version: SSH-2.0-Go

Engagement Duration: 3.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "bfd088c23e2d",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:17.431602Z",
  "end_time": "2026-07-11T19:24:21.079471Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "my2girls"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:14.797781 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / OcPOOok325

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 4e02b6a8e66d

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "4e02b6a8e66d",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:14.797781Z",
  "end_time": "2026-07-11T19:24:17.189182Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "OcPOOok325"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:11.476489 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / famous1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0e82e6fb5e6a

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0e82e6fb5e6a",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:11.476489Z",
  "end_time": "2026-07-11T19:24:14.485027Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "famous1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:08.844263 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / copper1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 9ea6c2889232

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "9ea6c2889232",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:08.844263Z",
  "end_time": "2026-07-11T19:24:11.267595Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "copper1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:05.187810 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yoyoyo1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b026fda1f57d

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b026fda1f57d",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:05.187810Z",
  "end_time": "2026-07-11T19:24:08.563521Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yoyoyo1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:24:02.213691 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / cookie123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 13bc26653821

Client Version: SSH-2.0-Go

Engagement Duration: 2.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "13bc26653821",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:24:02.213691Z",
  "end_time": "2026-07-11T19:24:04.956283Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cookie123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:58.871263 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / michigan1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 673c83e361ae

Client Version: SSH-2.0-Go

Engagement Duration: 3.1s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "673c83e361ae",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:58.871263Z",
  "end_time": "2026-07-11T19:24:01.982060Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "michigan1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:55.671431 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / cool12

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0f0137f23465

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0f0137f23465",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:55.671431Z",
  "end_time": "2026-07-11T19:23:58.582361Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cool12"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:52.531238 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / soccer5

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 3bf4b9a64103

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "3bf4b9a64103",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:52.531238Z",
  "end_time": "2026-07-11T19:23:55.436575Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "soccer5"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:49.771162 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hello!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: e38839181898

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "e38839181898",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:49.771162Z",
  "end_time": "2026-07-11T19:23:52.303414Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hello!"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:45.776601 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / tanner1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 49f0b463d032

Client Version: SSH-2.0-Go

Engagement Duration: 3.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "49f0b463d032",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:45.776601Z",
  "end_time": "2026-07-11T19:23:49.467874Z",
  "duration": "3.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "tanner1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:42.724501 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fresh1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 7c03dd3c6230

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "7c03dd3c6230",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:42.724501Z",
  "end_time": "2026-07-11T19:23:45.516692Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fresh1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:39.566652 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fatass1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 9af178afc493

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "9af178afc493",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:39.566652Z",
  "end_time": "2026-07-11T19:23:42.428282Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fatass1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:36.285659 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1jesus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 429433593de4

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "429433593de4",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:36.285659Z",
  "end_time": "2026-07-11T19:23:39.249230Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1jesus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:33.223879 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / donkey1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 27214fa5fcb0

Client Version: SSH-2.0-Go

Engagement Duration: 2.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "27214fa5fcb0",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:33.223879Z",
  "end_time": "2026-07-11T19:23:35.958726Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "donkey1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:30.089184 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / g123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0020db480be4

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0020db480be4",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:30.089184Z",
  "end_time": "2026-07-11T19:23:32.960088Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "g123456"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:27.332453 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bubble1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: cd44a73a919b

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "cd44a73a919b",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:27.332453Z",
  "end_time": "2026-07-11T19:23:29.770328Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bubble1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:24.035642 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12345b

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 69a61a8029b8

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "69a61a8029b8",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:24.035642Z",
  "end_time": "2026-07-11T19:23:27.078482Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345b"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

91.92.40.11

2026-07-11 19:23:21.461129 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 200

Credential acceptance event recorded. Target authentication: git / 123456

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

[obs-node]:~$ uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null

Command not found: /usr/bin/uname -s -v -n -m

[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ ( [ -f /proc/version ]

[obs-node]:~$ [ -f /proc/version ]

[obs-node]:~$ head -1 /proc/version | cut -d -f1

[obs-node]:~$ [ -f /etc/os-release ]

Record ID: 585322ead310

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5

{
  "id": "585322ead310",
  "src_ip": "91.92.40.11",
  "start_time": "2026-07-11T19:23:21.461129Z",
  "end_time": "2026-07-11T19:23:23.314152Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "123456"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:20.985594 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mariah1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: be64ab209710

Client Version: SSH-2.0-Go

Engagement Duration: 2.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "be64ab209710",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:20.985594Z",
  "end_time": "2026-07-11T19:23:23.732991Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mariah1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:17.829799 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / shawn1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 290559bddf53

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "290559bddf53",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:17.829799Z",
  "end_time": "2026-07-11T19:23:20.735288Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "shawn1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:14.735076 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / froggy1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 92c2b9dd5908

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "92c2b9dd5908",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:14.735076Z",
  "end_time": "2026-07-11T19:23:17.554789Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "froggy1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:11.437293 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / usdopaa

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b8be996179c7

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b8be996179c7",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:11.437293Z",
  "end_time": "2026-07-11T19:23:14.376741Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "usdopaa"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:08.190573 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gabby1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 9099f3729595

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "9099f3729595",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:08.190573Z",
  "end_time": "2026-07-11T19:23:11.193592Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gabby1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:04.753352 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sexy11

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0ec22d72696d

Client Version: SSH-2.0-Go

Engagement Duration: 3.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0ec22d72696d",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:04.753352Z",
  "end_time": "2026-07-11T19:23:07.935344Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sexy11"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:23:00.670854 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / drpepper1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ffdc98d1d23b

Client Version: SSH-2.0-Go

Engagement Duration: 3.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ffdc98d1d23b",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:23:00.670854Z",
  "end_time": "2026-07-11T19:23:04.522705Z",
  "duration": "3.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "drpepper1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:57.351549 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / akopa123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ca8e7870fe7d

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ca8e7870fe7d",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:57.351549Z",
  "end_time": "2026-07-11T19:23:00.395998Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "akopa123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:54.218729 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / soccer14

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: d3f4140a6d6c

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "d3f4140a6d6c",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:54.218729Z",
  "end_time": "2026-07-11T19:22:57.071778Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "soccer14"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:50.478869 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / UsdopaA

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 429a08ebf0b3

Client Version: SSH-2.0-Go

Engagement Duration: 3.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "429a08ebf0b3",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:50.478869Z",
  "end_time": "2026-07-11T19:22:54.009071Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "UsdopaA"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:46.780923 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / coffee1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b5f1c883a866

Client Version: SSH-2.0-Go

Engagement Duration: 3.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b5f1c883a866",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:46.780923Z",
  "end_time": "2026-07-11T19:22:50.246363Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "coffee1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:43.172405 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hey123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 44516413d7ec

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "44516413d7ec",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:43.172405Z",
  "end_time": "2026-07-11T19:22:46.564879Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hey123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:39.796094 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / love143

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1451073334f0

Client Version: SSH-2.0-Go

Engagement Duration: 3.1s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1451073334f0",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:39.796094Z",
  "end_time": "2026-07-11T19:22:42.893535Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "love143"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:36.676952 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 5hsU75kpoT

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 6afa5d07104f

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "6afa5d07104f",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:36.676952Z",
  "end_time": "2026-07-11T19:22:39.494269Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "5hsU75kpoT"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:32.850882 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / love08

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ab549ea53d75

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ab549ea53d75",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:32.850882Z",
  "end_time": "2026-07-11T19:22:36.276500Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "love08"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:29.277665 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / willie1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 4da76a6f7c8b

Client Version: SSH-2.0-Go

Engagement Duration: 3.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "4da76a6f7c8b",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:29.277665Z",
  "end_time": "2026-07-11T19:22:32.495542Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "willie1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:26.051356 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / schalke04

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: aff52a80146e

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "aff52a80146e",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:26.051356Z",
  "end_time": "2026-07-11T19:22:28.960741Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "schalke04"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:22.148407 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / christmas1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 228b2a739dff

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "228b2a739dff",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:22.148407Z",
  "end_time": "2026-07-11T19:22:25.585408Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "christmas1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:18.974046 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jazzy1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b7cca3a3a1d6

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b7cca3a3a1d6",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:18.974046Z",
  "end_time": "2026-07-11T19:22:21.916338Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jazzy1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

91.92.40.11

2026-07-11 19:22:18.524620 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 200

Credential acceptance event recorded. Target authentication: git / 12345

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

[obs-node]:~$ uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null

Command not found: /usr/bin/uname -s -v -n -m

[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null

[obs-node]:~$ ( [ -f /proc/version ]

[obs-node]:~$ [ -f /proc/version ]

[obs-node]:~$ head -1 /proc/version | cut -d -f1

[obs-node]:~$ [ -f /etc/os-release ]

Record ID: 6628ed4df1fa

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5

{
  "id": "6628ed4df1fa",
  "src_ip": "91.92.40.11",
  "start_time": "2026-07-11T19:22:18.524620Z",
  "end_time": "2026-07-11T19:22:20.758490Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "12345"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:15.192429 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bitch2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a717e26631bf

Client Version: SSH-2.0-Go

Engagement Duration: 3.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a717e26631bf",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:15.192429Z",
  "end_time": "2026-07-11T19:22:18.658363Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bitch2"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

78.107.31.154

2026-07-11 19:22:11.603563 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bella123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: cb2e0be35355

Client Version: SSH-2.0-Go

Engagement Duration: 3.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "cb2e0be35355",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:22:11.603563Z",
  "end_time": "2026-07-11T19:22:14.856074Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bella123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}