nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 298 / 5437 (271805 total records)
Passive Observation Node - Active Operational Overview
78.107.31.154
2026-07-11 19:28:07.588090 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hotstuff1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0166d448d4ed
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0166d448d4ed",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:28:07.588090Z",
  "end_time": "2026-07-11T19:28:10.532545Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hotstuff1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:28:04.154280 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bubblegum1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a7b415cdbe89
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a7b415cdbe89",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:28:04.154280Z",
  "end_time": "2026-07-11T19:28:07.241639Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bubblegum1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:28:01.147045 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ireland1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 333c99671731
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "333c99671731",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:28:01.147045Z",
  "end_time": "2026-07-11T19:28:03.924196Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ireland1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:57.589266 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / everton1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f75e1776e092
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f75e1776e092",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:57.589266Z",
  "end_time": "2026-07-11T19:28:00.807133Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "everton1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:54.644253 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / brownie1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 45b7bf52c756
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "45b7bf52c756",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:54.644253Z",
  "end_time": "2026-07-11T19:27:57.357752Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "brownie1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:51.326627 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1asshole

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: d272c20fde35
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "d272c20fde35",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:51.326627Z",
  "end_time": "2026-07-11T19:27:54.309692Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1asshole"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:48.667068 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / baseball3

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ecb1a13398d1
Client Version: SSH-2.0-Go
Engagement Duration: 2.3s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ecb1a13398d1",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:48.667068Z",
  "end_time": "2026-07-11T19:27:51.008972Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "baseball3"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:45.098670 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fucklove1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ec641e93f7cb
Client Version: SSH-2.0-Go
Engagement Duration: 3.3s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ec641e93f7cb",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:45.098670Z",
  "end_time": "2026-07-11T19:27:48.421849Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fucklove1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:42.024553 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / horse1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 41a2790d8be1
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "41a2790d8be1",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:42.024553Z",
  "end_time": "2026-07-11T19:27:44.851898Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "horse1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:38.810338 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mate1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e355ed32def6
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e355ed32def6",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:38.810338Z",
  "end_time": "2026-07-11T19:27:41.635003Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mate1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:35.364125 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / myspace7

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 543395986fd9
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "543395986fd9",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:35.364125Z",
  "end_time": "2026-07-11T19:27:38.594761Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "myspace7"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:32.412471 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / monkey3

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f9faabf9d3c9
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f9faabf9d3c9",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:32.412471Z",
  "end_time": "2026-07-11T19:27:35.105249Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "monkey3"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:28.579834 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / random1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 12cced9a6228
Client Version: SSH-2.0-Go
Engagement Duration: 3.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "12cced9a6228",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:28.579834Z",
  "end_time": "2026-07-11T19:27:32.064115Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "random1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:25.466280 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / heyhey1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 328db51b3597
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "328db51b3597",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:25.466280Z",
  "end_time": "2026-07-11T19:27:28.320855Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "heyhey1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:22.111172 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / k12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 5d5d1c690d55
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "5d5d1c690d55",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:22.111172Z",
  "end_time": "2026-07-11T19:27:25.194959Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "k12345"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:18.845959 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / alladin79

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 7e14945c4f0b
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "7e14945c4f0b",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:18.845959Z",
  "end_time": "2026-07-11T19:27:21.884021Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "alladin79"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:15.505113 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / football7

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fab3b4e15585
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fab3b4e15585",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:15.505113Z",
  "end_time": "2026-07-11T19:27:18.504644Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "football7"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
91.92.40.11
2026-07-11 19:27:14.539491 UTC
RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 200

Credential acceptance event recorded. Target authentication: git / git

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: cd1b65a872f9
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "cd1b65a872f9",
  "src_ip": "91.92.40.11",
  "start_time": "2026-07-11T19:27:14.539491Z",
  "end_time": "2026-07-11T19:27:16.501915Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "git"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:12.681993 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hotboy1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4422eea3731a
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4422eea3731a",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:12.681993Z",
  "end_time": "2026-07-11T19:27:15.240473Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hotboy1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:09.599887 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lindsay1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 561a9bade4f9
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "561a9bade4f9",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:09.599887Z",
  "end_time": "2026-07-11T19:27:12.429888Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lindsay1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:06.296025 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / snowman1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: c9d26207fb96
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "c9d26207fb96",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:06.296025Z",
  "end_time": "2026-07-11T19:27:09.368718Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "snowman1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:27:02.948076 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / renee1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 47870456b466
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "47870456b466",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:27:02.948076Z",
  "end_time": "2026-07-11T19:27:05.939477Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "renee1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:59.466826 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / blue13

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: fdcda77877ec
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "fdcda77877ec",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:59.466826Z",
  "end_time": "2026-07-11T19:27:02.703263Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "blue13"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:56.206792 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / star12

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: f36bc3d89c3e
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "f36bc3d89c3e",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:56.206792Z",
  "end_time": "2026-07-11T19:26:59.215791Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "star12"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:53.221671 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / juggalo1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 021e0fc1d48a
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "021e0fc1d48a",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:53.221671Z",
  "end_time": "2026-07-11T19:26:55.998049Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "juggalo1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:49.942146 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / myspace.co

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 46a35e22686c
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "46a35e22686c",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:49.942146Z",
  "end_time": "2026-07-11T19:26:52.847963Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "myspace.co"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:46.980796 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / coupons

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 054c24f7a796
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "054c24f7a796",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:46.980796Z",
  "end_time": "2026-07-11T19:26:49.587209Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "coupons"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:43.938050 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bettyboop1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e9054f1d5668
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e9054f1d5668",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:43.938050Z",
  "end_time": "2026-07-11T19:26:46.704791Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bettyboop1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:41.181126 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bscirc

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 0ce8fe1c671c
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "0ce8fe1c671c",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:41.181126Z",
  "end_time": "2026-07-11T19:26:43.716535Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bscirc"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:37.827788 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / soccer4

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 395b2601de93
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "395b2601de93",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:37.827788Z",
  "end_time": "2026-07-11T19:26:40.928958Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "soccer4"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:34.560519 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / password23

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e84b04b63daf
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e84b04b63daf",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:34.560519Z",
  "end_time": "2026-07-11T19:26:37.553837Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "password23"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:31.598770 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / daddysgirl

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a5287730992a
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a5287730992a",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:31.598770Z",
  "end_time": "2026-07-11T19:26:34.325690Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "daddysgirl"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:27.973240 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / love24

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 4ae0f28fb58c
Client Version: SSH-2.0-Go
Engagement Duration: 3.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "4ae0f28fb58c",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:27.973240Z",
  "end_time": "2026-07-11T19:26:31.375465Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "love24"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:25.199531 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lakshmi

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 477c5d5964a0
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "477c5d5964a0",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:25.199531Z",
  "end_time": "2026-07-11T19:26:27.695798Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lakshmi"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:21.719411 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / yomama1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: dc7b8538f0ca
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "dc7b8538f0ca",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:21.719411Z",
  "end_time": "2026-07-11T19:26:24.898893Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "yomama1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:18.831174 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / smile123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 6a0a20b2944a
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "6a0a20b2944a",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:18.831174Z",
  "end_time": "2026-07-11T19:26:21.427222Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "smile123"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
91.92.40.11
2026-07-11 19:26:17.500847 UTC
RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 200

Credential acceptance event recorded. Target authentication: git / code

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: 8c8354b9a7bd
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "8c8354b9a7bd",
  "src_ip": "91.92.40.11",
  "start_time": "2026-07-11T19:26:17.500847Z",
  "end_time": "2026-07-11T19:26:20.100451Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "code"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:15.104352 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hailey1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 017079fd5c68
Client Version: SSH-2.0-Go
Engagement Duration: 3.4s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "017079fd5c68",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:15.104352Z",
  "end_time": "2026-07-11T19:26:18.499599Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hailey1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:11.703999 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / youngmoney

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 167c6db08ba5
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "167c6db08ba5",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:11.703999Z",
  "end_time": "2026-07-11T19:26:14.776735Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "youngmoney"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:08.786102 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ethan1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: dbdef41bc5d7
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "dbdef41bc5d7",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:08.786102Z",
  "end_time": "2026-07-11T19:26:11.480606Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ethan1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:05.605901 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pickles1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: ec4d72205465
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "ec4d72205465",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:05.605901Z",
  "end_time": "2026-07-11T19:26:08.524617Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pickles1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:26:02.557038 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / b12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: e8fa87d3fcb5
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "e8fa87d3fcb5",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:26:02.557038Z",
  "end_time": "2026-07-11T19:26:05.351056Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "b12345"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:59.467532 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / wow12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 385153dd7c61
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "385153dd7c61",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:59.467532Z",
  "end_time": "2026-07-11T19:26:02.328397Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "wow12345"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:56.414026 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / baseball7

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a205cb6a42c9
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a205cb6a42c9",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:56.414026Z",
  "end_time": "2026-07-11T19:25:59.208891Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "baseball7"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:53.389534 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / peewee1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: c397730da427
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "c397730da427",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:53.389534Z",
  "end_time": "2026-07-11T19:25:56.211697Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "peewee1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:50.147111 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / baby13

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: a60c7e9b7568
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "a60c7e9b7568",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:50.147111Z",
  "end_time": "2026-07-11T19:25:53.135355Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "baby13"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:46.770077 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bigdick1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 564082492e86
Client Version: SSH-2.0-Go
Engagement Duration: 3.1s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "564082492e86",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:46.770077Z",
  "end_time": "2026-07-11T19:25:49.892678Z",
  "duration": "3.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bigdick1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:43.339044 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 122001

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 8c5310a3a0c5
Client Version: SSH-2.0-Go
Engagement Duration: 3.2s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "8c5310a3a0c5",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:43.339044Z",
  "end_time": "2026-07-11T19:25:46.509498Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "122001"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:39.347927 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / butterfly2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 7a2715ed2d3c
Client Version: SSH-2.0-Go
Engagement Duration: 3.6s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "7a2715ed2d3c",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:39.347927Z",
  "end_time": "2026-07-11T19:25:42.984214Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "butterfly2"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
78.107.31.154
2026-07-11 19:25:36.376372 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / south13

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"
Record ID: 85fb24cc7740
Client Version: SSH-2.0-Go
Engagement Duration: 2.7s
HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821
{
  "id": "85fb24cc7740",
  "src_ip": "78.107.31.154",
  "start_time": "2026-07-11T19:25:36.376372Z",
  "end_time": "2026-07-11T19:25:39.118809Z",
  "duration": "2.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "south13"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}