Ssh Pci And Nvidia Gpu Count Cross Validation

Identifies SSH sessions where the actor performs structured hardware reconnaissance including CPU core enumeration, GPU detection via nvidia-smi, VGA/3D controller inspection via lspci, system uptime queries, and kernel/architecture fingerprinting to assess computational capabilities of the compromised host.

Observed IPs

460

Avg Confidence

98%

Severity

medium

Top IPs by event countSSH

IP Address	Risk	Events	Sessions	Country	ASN	Last Seen
2.57.122.177	100%	590,075	160,561	🇷🇴 RO	AS47890	2026-04-09
45.148.10.240	100%	536,019	166,441	🇳🇱 NL	AS48090	2026-04-09
195.178.110.30	100%	419,714	113,434	🇧🇬 BG	AS48090	2026-04-09
92.118.39.62	100%	390,289	103,058	🇺🇸 US	AS47890	2026-04-09
80.94.92.187	100%	352,627	116,412	🇷🇴 RO	AS47890	2026-04-09
80.94.92.164	100%	343,763	114,973	🇷🇴 RO	AS47890	2026-04-09
80.94.92.167	100%	329,221	112,637	🇷🇴 RO	AS47890	2026-04-09
80.94.92.177	100%	324,480	115,834	🇷🇴 RO	AS47890	2026-04-09
93.123.109.38	100%	277,567	75,726	🇧🇬 BG	AS48090	2026-03-12
2.57.122.208	100%	269,910	85,661	🇷🇴 RO	AS47890	2026-04-09
92.118.39.87	100%	265,858	75,985	🇺🇸 US	AS47890	2026-04-09
80.94.92.166	100%	256,735	86,943	🇷🇴 RO	AS47890	2026-04-09
80.94.92.165	100%	230,291	86,747	🇷🇴 RO	AS47890	2026-04-09
80.94.92.183	100%	172,451	55,746	🇷🇴 RO	AS47890	2026-04-09
193.32.162.13	100%	121,612	118,549	🇷🇴 RO	AS47890	2026-04-09
92.118.39.72	100%	121,493	26,552	🇺🇸 US	AS47890	2026-04-09
92.118.39.56	100%	121,092	26,072	🇺🇸 US	AS47890	2026-04-09
92.118.39.76	100%	113,408	24,496	🇺🇸 US	AS47890	2026-04-09
92.118.39.92	100%	112,236	34,664	🇺🇸 US	AS47890	2026-04-09
193.32.162.151	100%	99,375	32,388	🇷🇴 RO	AS47890	2026-04-09