Ssh Pci And Nvidia Gpu Count Cross Validation

Identifies SSH sessions where the actor performs structured hardware reconnaissance including CPU core enumeration, GPU detection via nvidia-smi, VGA/3D controller inspection via lspci, system uptime queries, and kernel/architecture fingerprinting to assess computational capabilities of the compromised host.

Observed IPs

268

Avg Confidence

93%

Severity

medium

Top IPs by event countSSH

IP Address	Risk	Events	Sessions	Country	ASN	Last Seen
2.57.122.177	100%	521,275	93,569	🇷🇴 RO	AS47890	2026-03-02
45.148.10.240	100%	456,092	89,123	🇳🇱 NL	AS48090	2026-03-02
195.178.110.30	100%	373,262	67,715	🇧🇬 BG	AS48090	2026-03-02
92.118.39.62	100%	347,417	61,220	🇺🇸 US	AS47890	2026-03-02
80.94.92.187	100%	318,408	83,899	🇷🇴 RO	AS47890	2026-03-02
80.94.92.164	100%	310,256	82,719	🇷🇴 RO	AS47890	2026-03-02
80.94.92.167	100%	296,102	80,928	🇷🇴 RO	AS47890	2026-03-02
80.94.92.177	100%	290,712	82,664	🇷🇴 RO	AS47890	2026-03-02
93.123.109.38	100%	271,797	70,529	🇧🇬 BG	AS48090	2026-03-02
80.94.92.166	100%	232,217	63,047	🇷🇴 RO	AS47890	2026-03-02
92.118.39.87	100%	231,236	41,977	🇺🇸 US	AS47890	2026-03-02
2.57.122.208	100%	231,196	47,784	🇷🇴 RO	AS47890	2026-03-02
80.94.92.165	100%	206,043	63,055	🇷🇴 RO	AS47890	2026-03-02
2.57.122.209	97%	195,493	20,830	🇷🇴 RO	AS47890	2026-02-11
80.94.92.183	100%	148,115	31,845	🇷🇴 RO	AS47890	2026-03-02
92.118.39.56	100%	111,627	16,692	🇺🇸 US	AS47890	2026-03-02
92.118.39.72	100%	111,605	16,824	🇺🇸 US	AS47890	2026-03-02
92.118.39.76	100%	104,154	15,451	🇺🇸 US	AS47890	2026-03-02
92.118.39.92	100%	95,451	18,096	🇺🇸 US	AS47890	2026-03-02
193.32.162.151	100%	83,891	17,053	🇷🇴 RO	AS47890	2026-03-02