SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pineapple1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "5ecb6fbe0518",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:36:07.567121Z",
"end_time": "2026-07-11T19:36:10.539150Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pineapple1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / iloveyou13
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "b202067ace71",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:36:04.284885Z",
"end_time": "2026-07-11T19:36:07.269901Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "iloveyou13"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / hallo1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "36d5322322a1",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:36:00.785430Z",
"end_time": "2026-07-11T19:36:04.037387Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hallo1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / robbie1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "c23568cb569b",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:57.783957Z",
"end_time": "2026-07-11T19:36:00.460459Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "robbie1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / asshole2
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e3f71ecd8cf4",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:54.092347Z",
"end_time": "2026-07-11T19:35:57.540901Z",
"duration": "3.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asshole2"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / eleven11
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "bc67c744f03d",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:51.193602Z",
"end_time": "2026-07-11T19:35:53.805099Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "eleven11"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / sublime1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "eeae27e0b591",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:47.552368Z",
"end_time": "2026-07-11T19:35:50.867947Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sublime1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / michael123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "c9020c11c857",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:44.908047Z",
"end_time": "2026-07-11T19:35:47.312924Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "michael123"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / baller23
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e7b85434e346",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:41.554887Z",
"end_time": "2026-07-11T19:35:44.672802Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "baller23"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / MaprCheM56458
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "109e7061268e",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:38.589526Z",
"end_time": "2026-07-11T19:35:41.272748Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "MaprCheM56458"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / soccer22
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "c139a6b13765",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:35.521880Z",
"end_time": "2026-07-11T19:35:38.294318Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "soccer22"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 200
Credential acceptance event recorded. Target authentication: guest / 1234
Remote entity achieved interactive shell state. Command sequence (9 executed):
[obs-node]:~$
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$
uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$
busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
( [ -f /proc/version ]
[obs-node]:~$
[ -f /proc/version ]
[obs-node]:~$
head -1 /proc/version | cut -d -f1
[obs-node]:~$
[ -f /etc/os-release ]
{
"id": "24536d46a9ad",
"src_ip": "91.92.40.11",
"start_time": "2026-07-11T19:35:35.052042Z",
"end_time": "2026-07-11T19:35:36.516992Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "1234"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / hayden1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "812cea2164dc",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:32.388283Z",
"end_time": "2026-07-11T19:35:35.199457Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hayden1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / sexy01
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "1bce2d167a55",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:29.235265Z",
"end_time": "2026-07-11T19:35:32.147682Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sexy01"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / puppies1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "b90b54c9e39c",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:26.041400Z",
"end_time": "2026-07-11T19:35:28.955175Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "puppies1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / godisgreat
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "69300660b269",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:23.086571Z",
"end_time": "2026-07-11T19:35:25.795630Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "godisgreat"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / 1234abc
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "d00476d4aa09",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:19.704473Z",
"end_time": "2026-07-11T19:35:22.878992Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234abc"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / stinky1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e0f650006764",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:16.683807Z",
"end_time": "2026-07-11T19:35:19.339792Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "stinky1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / babycakes1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "ad3a7186184d",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:13.671102Z",
"end_time": "2026-07-11T19:35:16.398393Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "babycakes1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / garrett1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e4b7bf2997f7",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:10.137695Z",
"end_time": "2026-07-11T19:35:13.385579Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "garrett1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / corvette1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "9c0a7cba61b3",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:06.930243Z",
"end_time": "2026-07-11T19:35:09.794705Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "corvette1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / football11
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "2181e84760db",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:35:03.797018Z",
"end_time": "2026-07-11T19:35:06.680238Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "football11"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / vaffanculo
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e118bf2b6135",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:59.514453Z",
"end_time": "2026-07-11T19:35:03.531395Z",
"duration": "4.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "vaffanculo"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / iceman1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "8860d2d9b414",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:56.648868Z",
"end_time": "2026-07-11T19:34:59.279817Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "iceman1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pickle1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "a27808c6767a",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:53.634683Z",
"end_time": "2026-07-11T19:34:56.396445Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pickle1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / bigred1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "9555acda9b1b",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:50.740097Z",
"end_time": "2026-07-11T19:34:53.327708Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "bigred1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / pizza123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "d594f6d9f5be",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:47.773705Z",
"end_time": "2026-07-11T19:34:50.448718Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "pizza123"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / reggie1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "003560a2e6a5",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:44.545142Z",
"end_time": "2026-07-11T19:34:47.444447Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "reggie1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / nicole123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "7dbfeebfc5e8",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:41.066135Z",
"end_time": "2026-07-11T19:34:44.287366Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nicole123"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / anthony2
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "8ceb1cf70a13",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:38.275618Z",
"end_time": "2026-07-11T19:34:40.834833Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "anthony2"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / daddy123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "f3cc69c48bb1",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:34.831015Z",
"end_time": "2026-07-11T19:34:38.057526Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "daddy123"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / baseball5
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "a6e7a77537e4",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:31.629685Z",
"end_time": "2026-07-11T19:34:34.489259Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "baseball5"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
RECONNAISSANCE
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 200
Credential acceptance event recorded. Target authentication: guest / 123
Remote entity achieved interactive shell state. Command sequence (9 executed):
[obs-node]:~$
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$
uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
/usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$
busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$
( [ -f /proc/version ]
[obs-node]:~$
[ -f /proc/version ]
[obs-node]:~$
head -1 /proc/version | cut -d -f1
[obs-node]:~$
[ -f /etc/os-release ]
{
"id": "1297f9bacb1f",
"src_ip": "91.92.40.11",
"start_time": "2026-07-11T19:34:28.927200Z",
"end_time": "2026-07-11T19:34:30.963959Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "123"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / derrick1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "0860f1e3eac6",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:28.748140Z",
"end_time": "2026-07-11T19:34:31.354701Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "derrick1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / nick123
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "829e7d238f91",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:25.594409Z",
"end_time": "2026-07-11T19:34:28.525397Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nick123"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / kaitlyn1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "bfa4842a2d95",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:22.404208Z",
"end_time": "2026-07-11T19:34:25.372029Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "kaitlyn1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / hottie101
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "54f668ac1585",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:19.010898Z",
"end_time": "2026-07-11T19:34:22.153350Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "hottie101"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / bananas1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "bc1f5f90d4ad",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:16.176631Z",
"end_time": "2026-07-11T19:34:18.706408Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "bananas1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / suckit1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "cef407fd813e",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:13.129745Z",
"end_time": "2026-07-11T19:34:15.951041Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "suckit1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / monkey22
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "24e05ec67510",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:09.818228Z",
"end_time": "2026-07-11T19:34:12.894064Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "monkey22"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / family4
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "2a45d0efc1c4",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:06.227556Z",
"end_time": "2026-07-11T19:34:09.528922Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "family4"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / eastside1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "66d3133adb9d",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:34:03.328650Z",
"end_time": "2026-07-11T19:34:05.917023Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "eastside1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / sammie1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "e9945d4e3c09",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:59.626691Z",
"end_time": "2026-07-11T19:34:02.989453Z",
"duration": "3.4",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sammie1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / simpsons1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "cf258bf05701",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:56.746681Z",
"end_time": "2026-07-11T19:33:59.372834Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "simpsons1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / my2boys
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "6e93cefce0fb",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:53.313422Z",
"end_time": "2026-07-11T19:33:56.431318Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "my2boys"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / classof09
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "979e934b0ff6",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:50.268206Z",
"end_time": "2026-07-11T19:33:53.032945Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "classof09"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / zk.
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "59afc83e00ac",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:46.886461Z",
"end_time": "2026-07-11T19:33:49.928467Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zk."
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / daniel12
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "4ae3336c475e",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:43.440521Z",
"end_time": "2026-07-11T19:33:46.472640Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "daniel12"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / russell1
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "0c11ff6d7112",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:39.862233Z",
"end_time": "2026-07-11T19:33:43.192982Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "russell1"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}
SUCCESSFUL LOGIN
COMMANDS RUN
SCORE: 80
Credential acceptance event recorded. Target authentication: root / love12345
Remote entity achieved interactive shell state. Command sequence (1 executed):
[obs-node]:~$
echo -e "\x6F\x6B"
{
"id": "db09c7e611eb",
"src_ip": "78.107.31.154",
"start_time": "2026-07-11T19:33:36.890020Z",
"end_time": "2026-07-11T19:33:39.571595Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "love12345"
},
"commands": [
"echo -e \"\\x6F\\x6B\""
],
"detailed_commands": [
{
"cmd": "echo -e \"\\x6F\\x6B\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}