{"id":"feff3d29-93bb-4366-9ed0-6aa9b9157174","name":"crimson-faded-eagle","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":10624,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T05:43:02.304213+00:00","ended_at":"2026-08-25T05:43:02.749192+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"admin@2025","method":"password","accepted":true,"tier":"other"}]}
{"id":"e5744bda-a742-4a28-8d89-5573afb36a12","name":"shifting-marine-linnet","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":52544,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T05:01:17.280714+00:00","ended_at":"2026-08-25T05:01:18.154641+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Admin@2023","method":"password","accepted":false,"tier":"other"}]}
{"id":"42ce9254-6d99-4fbd-86ef-5100b7beef2b","name":"buoyant-nimble-peccary","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":56675,"username":"user1","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T04:19:16.486733+00:00","ended_at":"2026-08-25T04:19:18.427629+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user1","password":"test","method":"password","accepted":false,"tier":"other"}]}
{"id":"02ca33d2-5d0b-46a1-a5c2-d6d480f7651c","name":"amiable-electric-quail","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":56491,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T03:36:12.412045+00:00","ended_at":"2026-08-25T03:36:13.147949+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"toor","method":"password","accepted":false,"tier":"other"}]}
{"id":"d03e3767-10a4-419b-b8d6-71c4e5ccd256","name":"lanky-humble-magpie","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":19335,"username":"hadoop","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T02:50:35.968087+00:00","ended_at":"2026-08-25T02:50:37.052013+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"hadoop","password":"hadoop","method":"password","accepted":false,"tier":"other"}]}
{"id":"78d53bb5-3f26-4ebb-aa16-9463470a5879","name":"airy-seaward-catbird","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":18642,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T00:08:37.930661+00:00","ended_at":"2026-08-25T00:08:39.244006+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3.14159","method":"password","accepted":false,"tier":"other"}]}
{"id":"f2d0c36c-2ba2-4424-8c80-6ba12a090a0c","name":"placid-tidal-falcon","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":59786,"username":"guest","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T02:42:37.534723+00:00","ended_at":"2026-08-24T02:42:37.925399+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"guest","password":"123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"435e2434-7889-4348-99e4-c20ebfc188c8","name":"breezy-balmy-bowerbird","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":26581,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T02:01:29.874335+00:00","ended_at":"2026-08-24T02:01:30.498003+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"p@ssw0rd","method":"password","accepted":false,"tier":"other"}]}
{"id":"9f4e8d5b-d3e3-44e4-9164-ca5e9aaf69e2","name":"woven-tranquil-gazelle","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":31168,"username":"marcel","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T01:19:31.803226+00:00","ended_at":"2026-08-24T01:19:33.171303+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"marcel","password":"marcel","method":"password","accepted":false,"tier":"other"}]}
{"id":"d85137ba-59f6-426c-b4da-4857975291f5","name":"vivid-painted-hamster","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":43722,"username":"0","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T00:35:26.363073+00:00","ended_at":"2026-08-24T00:35:27.220661+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"0","password":"0","method":"password","accepted":false,"tier":"other"}]}
{"id":"43fd53e9-0a10-4d86-bf87-4584580fa6fe","name":"feathered-plush-dolphin","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":52063,"username":"123","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T21:48:41.229595+00:00","ended_at":"2026-08-23T21:48:42.335179+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"123","password":"123","method":"password","accepted":false,"tier":"other"}]}
{"id":"92dbf49e-86e2-4449-82f3-a02e814a272c","name":"steady-merry-macaw","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":42982,"username":"mail","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T05:55:51.952035+00:00","ended_at":"2026-08-23T05:55:52.478613+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"mail","password":"mail","method":"password","accepted":true,"tier":"other"}]}
{"id":"d5c91f1b-201a-4032-8f4a-77ee03fb28c3","name":"watchful-balmy-tinamou","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":7415,"username":"tester","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T05:12:22.120024+00:00","ended_at":"2026-08-23T05:12:23.014699+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"tester","password":"retset","method":"password","accepted":false,"tier":"other"}]}
{"id":"55362289-85f3-4d00-8845-0ba5d0c8ab18","name":"meadow-merry-moorhen","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":50686,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T04:29:19.982470+00:00","ended_at":"2026-08-23T04:29:21.209005+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"zxc123","method":"password","accepted":false,"tier":"other"}]}
{"id":"32736e59-f390-4ec9-839a-d1180a61858b","name":"cunning-crimson-ibis","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":42849,"username":"vincent","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T03:42:28.306332+00:00","ended_at":"2026-08-23T03:42:29.682699+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"vincent","password":"vincent","method":"password","accepted":false,"tier":"other"}]}
{"id":"0f83c4ab-6777-4ce0-baad-748ce52706c3","name":"hazel-craggy-camel","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":6939,"username":"2020","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T00:52:17.486478+00:00","ended_at":"2026-08-23T00:52:18.333822+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"2020","password":"2020","method":"password","accepted":false,"tier":"other"}]}
{"id":"fba3d491-a430-4b73-bcf1-4797cdb2a94d","name":"somber-rustic-barbet","protocol":"ssh","channel_kind":"exec","src_ip":"81.181.129.252","src_port":56669,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":464,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T13:53:48.005948+00:00","ended_at":"2026-08-20T13:55:09.047291+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":4640,"events":[{"seq":1,"at":"2026-08-20T13:53:29.120749+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T13:53:31.209087+00:00","kind":"output","latency_ms":2086,"data":"bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T13:53:31.677233+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T13:53:31.677958+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T13:53:32.097596+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T13:53:32.098373+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T13:53:32.692311+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T13:53:37.142033+00:00","kind":"output","latency_ms":4447,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a201013\ncpu MHz\t\t: 2245.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 33\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single ssbd ibrs ibpb stibp\nbugs\t\t: spectre_v1 spectre_v2 spec_store_bypass\nbogomips\t: 4490.00\nTLB size\t: 2560 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 48 bits physical, 48 bits virtual\npower management:\n\n"},{"seq":9,"at":"2026-08-20T13:53:37.601581+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T13:53:41.496072+00:00","kind":"output","latency_ms":3906,"data":"root         1  0.0  0.2  22564  4568 ?        Ss   Aug20   0:03 /sbin/init\nroot       418  0.0  0.4  67244  8460 ?        Ss   Aug20   0:12 /lib/systemd/systemd-journald\nroot       501  0.0  0.3  41124  6120 ?        Ss   Aug20   0:01 /lib/systemd/systemd-udevd\nroot       732  0.0  0.5  84220 10124 ?        Ss   Aug20   0:00 /usr/sbin/cron -f\npostgres   845  0.1  1.8 210344 18324 ?        Ss   Aug20   0:44 /usr/lib/postgresql/15/bin/postgres -D /var/lib/postgresql/15/main\nwww-data   913  0.0  0.4  17428  4880 ?        S    Aug20   0:00 nginx: worker process\nwww-data   914  0.0  0.4  17428  4880 ?        S    Aug20   0:00 nginx: worker process\nroot      1024  0.0  0.6  30488  6124 ?        Ss   Aug20   0:00 /usr/sbin/sshd -D\nroot      1188  0.0  0.7  49872  7320 ?        Ss   Aug20   0:02 node /opt/stable/src/server.js\nroot      1679  0.0  0.1   9876  2320 pts/0    Ss   07:52   0:00 bash\nroot      1844  0.0  0.0  10888   980 pts/0    S+   07:53   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-20T13:53:42.010451+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T13:53:44.321711+00:00","kind":"output","latency_ms":2308,"data":"root         1     0  0 Aug20 ?        00:03:12 /sbin/init\nroot       418     1  0 Aug20 ?        00:00:21 /lib/systemd/systemd-journald\nroot       501     1  0 Aug20 ?        00:00:03 /lib/systemd/systemd-udevd\nroot       732     1  0 Aug20 ?        00:00:01 /usr/sbin/cron -f\npostgres   845     1  0 Aug20 ?        00:00:44 /usr/lib/postgresql/15/bin/postgres -D /var/lib/postgresql/15/main\nwww-data   913     1  0 Aug20 ?        00:00:00 nginx: worker process\nwww-data   914     1  0 Aug20 ?        00:00:00 nginx: worker process\nroot      1024     1  0 Aug20 ?        00:00:00 /usr/sbin/sshd -D\nroot      1188     1  0 Aug20 ?        00:00:02 node /opt/stable/src/server.js\nroot      1679  1602  0 07:52 pts/0    00:00:00 bash\nroot      1851  1679  0 07:53 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-20T13:53:44.785691+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T13:53:46.368071+00:00","kind":"output","latency_ms":1581,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-20T13:53:46.813471+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T13:53:47.558857+00:00","kind":"output","latency_ms":742,"data":"bash: locate: command not found"},{"seq":17,"at":"2026-08-20T13:53:48.006905+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T13:53:48.610710+00:00","kind":"output","latency_ms":602,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":true,"tier":"common"}]}
{"id":"482d2cd2-f153-4f1c-88f3-591cb9406ccf","name":"burly-icy-ibex","protocol":"ssh","channel_kind":"exec","src_ip":"81.181.129.252","src_port":14221,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":626,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T13:28:38.770203+00:00","ended_at":"2026-08-20T13:29:18.200655+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":4747,"events":[{"seq":1,"at":"2026-08-20T13:28:08.112402+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T13:28:08.770940+00:00","kind":"output","latency_ms":657,"data":"bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T13:28:09.397593+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T13:28:09.399137+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T13:28:09.924612+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T13:28:09.926144+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T13:28:10.392615+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T13:28:16.738393+00:00","kind":"output","latency_ms":6345,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0xa00116f\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 32\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt tce topoext perfctr_core perfctr_nb bpext perfctr_llc mwaitx cpb cat_l3 cdp_l3 hw_pstate ssbd ibpb stibp vmmcall fsgsbase bmi1 avx2 smep bmi2 erms invpcid xsaveopt arat npt nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold\nvmx flags\t: \nbugs\t\t: spectre_v1 spectre_v2 spec_store_bypass\nbogomips\t: 4000.00\nTLB size\t: 3584 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 52 bits physical, 48 bits virtual\npower management:\n\n"},{"seq":9,"at":"2026-08-20T13:28:17.553056+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T13:28:20.558191+00:00","kind":"output","latency_ms":3005,"data":"root       1123  0.0  0.0   9048  3200 ?        Ss   Aug20   0:00 /usr/sbin/cron -f\nroot       1168  0.0  0.1  87220  6784 ?        Ss   Aug20   0:00 /lib/systemd/systemd-journald\nroot       1284  0.2  2.1  74232 20788 ?        Sl   Aug20   0:01 node /opt/stable/src/server.js\nroot       1310  0.0  0.2  22988  2484 ?        Ss   Aug20   0:00 postgres: checkpointer \nroot       1311  0.0  0.2  22988  2484 ?        Ss   Aug20   0:00 postgres: background writer \nroot       1312  0.0  0.2  22988  2484 ?        Ss   Aug20   0:00 postgres: walwriter \nroot       1313  0.0  0.2  22988  2484 ?        Ss   Aug20   0:00 postgres: autovacuum launcher \nroot       1314  0.0  0.2  22988  2484 ?        Ss   Aug20   0:00 postgres: logical replication launcher \nroot       1341  0.0  0.0  10428  1580 pts/0    S+   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-20T13:28:21.163348+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T13:28:23.309133+00:00","kind":"output","latency_ms":2144,"data":"root       1123       1  0 Aug20 ?        00:00:00 /usr/sbin/cron -f\nroot       1168       1  0 Aug20 ?        00:00:00 /lib/systemd/systemd-journald\nroot       1284       1  0 Aug20 ?        00:00:01 node /opt/stable/src/server.js\nroot       1310       1  0 Aug20 ?        00:00:00 postgres: checkpointer \nroot       1311       1  0 Aug20 ?        00:00:00 postgres: background writer \nroot       1312       1  0 Aug20 ?        00:00:00 postgres: walwriter \nroot       1313       1  0 Aug20 ?        00:00:00 postgres: autovacuum launcher \nroot       1314       1  0 Aug20 ?        00:00:00 postgres: logical replication launcher \nroot       1358    1340  0 00:00 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-20T13:28:24.397013+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T13:28:25.963810+00:00","kind":"output","latency_ms":1572,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-20T13:28:37.265849+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T13:28:38.202432+00:00","kind":"output","latency_ms":936,"data":"/root/.local/share/TelegramDesktop/tdata/D877F783D5D3EF8Cs"},{"seq":17,"at":"2026-08-20T13:28:38.770932+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T13:28:39.579261+00:00","kind":"output","latency_ms":806,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":true,"tier":"common"}]}
{"id":"47e20a45-62ce-4fb4-925b-fb4335cc6e8b","name":"mindful-nameless-wigeon","protocol":"ssh","channel_kind":"exec","src_ip":"81.181.129.252","src_port":48905,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":2,"automation":"bot","think_ms":507,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T13:28:07.074512+00:00","ended_at":"2026-08-20T13:28:49.397326+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":5082,"events":[{"seq":1,"at":"2026-08-20T13:27:47.145341+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T13:27:50.047860+00:00","kind":"output","latency_ms":2901,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T13:27:50.526252+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T13:27:50.527779+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T13:27:50.969631+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T13:27:50.971459+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T13:27:51.461917+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T13:27:56.317282+00:00","kind":"output","latency_ms":4854,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a500018\ncpu MHz\t\t: 1995.313\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 128\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 16\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt rdtscp lm 3dnowext 3dnow rep_good nopl cpuid extd_apicid perfctr_core cqm lm perfctr_nb bpext cat_l3 cdp_l3 invpcid_single hw_pstate tsc_scale bmi1 avx2 smep bmi2 erms invpcid xsaveopt arat umip pku ospke vaes vpclmulqdq rdpid overflow_recov succor smca\nbugs\t\t: spectre_v1 spectre_v2 spec_store_bypass swapgs itlb_multihit l1tf mds\nbogomips\t: 3990.62\nTLB size\t: 3584 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 52 bits physical, 57 bits virtual\npower management:\n\n"},{"seq":9,"at":"2026-08-20T13:27:56.756835+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T13:28:00.605917+00:00","kind":"output","latency_ms":3848,"data":"root         612  0.0  0.1   9124  2480 ?        Ss   03:10   0:00 /usr/sbin/sshd -D\nroot         644  0.0  1.2  20484 12340 ?        Ss   03:10   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data     645  0.0  0.6  21244  6428 ?        S    03:10   0:00 nginx: worker process\npostgres     668  0.0  0.9 213548  9380 ?        Ss   03:10   0:00 /usr/lib/postgresql/16/bin/postgres -D /var/lib/postgresql/16/main\npostgres     669  0.0  0.1 213548  1496 ?        Ss   03:10   0:00 postgres: 16/main: checkpointer \npostgres     670  0.0  0.1 213548  1496 ?        Ss   03:10   0:00 postgres: 16/main: background writer \npostgres     671  0.0  0.1 213548  1496 ?        Ss   03:10   0:00 postgres: 16/main: walwriter \npostgres     672  0.0  0.1 214372  2384 ?        Ss   03:10   0:00 postgres: 16/main: autovacuum launcher \npostgres     673  0.0  0.1 214220  2368 ?        Ss   03:10   0:00 postgres: 16/main: logical replication launcher \nroot         711  0.0  0.7  75444  7288 ?        Ss   03:10   0:00 node /opt/stable/src/server.js\nroot         834  0.0  0.0  10240   964 pts/0    S+   03:10   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-20T13:28:01.237387+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T13:28:03.397958+00:00","kind":"output","latency_ms":2158,"data":"root         612       1  0 03:10 ?        00:00:00 /usr/sbin/sshd -D\nroot         644       1  0 03:10 ?        00:00:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data     645     644  0 03:10 ?        00:00:00 nginx: worker process\npostgres     668       1  0 03:10 ?        00:00:00 /usr/lib/postgresql/16/bin/postgres -D /var/lib/postgresql/16/main\npostgres     669     668  0 03:10 ?        00:00:00 postgres: 16/main: checkpointer \npostgres     670     668  0 03:10 ?        00:00:00 postgres: 16/main: background writer \npostgres     671     668  0 03:10 ?        00:00:00 postgres: 16/main: walwriter \npostgres     672     668  0 03:10 ?        00:00:00 postgres: 16/main: autovacuum launcher \npostgres     673     668  0 03:10 ?        00:00:00 postgres: 16/main: logical replication launcher \nroot         711       1  0 03:10 ?        00:00:00 node /opt/stable/src/server.js\nroot         847     828  0 03:10 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-20T13:28:03.906329+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T13:28:05.288044+00:00","kind":"output","latency_ms":1381,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-20T13:28:05.811203+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T13:28:06.568473+00:00","kind":"output","latency_ms":759,"data":"-bash: locate: command not found"},{"seq":17,"at":"2026-08-20T13:28:07.075110+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T13:28:07.720897+00:00","kind":"output","latency_ms":645,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"c9c0cec8-7348-4d73-8cd5-95c77cea154b","name":"spirited-leafy-thrush","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":28865,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T10:23:05.933653+00:00","ended_at":"2026-08-20T10:23:06.443228+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"xmhdipc","method":"password","accepted":true,"tier":"other"}]}
{"id":"d15abd93-756d-4fe8-9a00-957364d5baf8","name":"steady-distant-ibis","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":13739,"username":"acc","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T09:42:05.610172+00:00","ended_at":"2026-08-20T09:42:06.838279+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"acc","password":"acc","method":"password","accepted":false,"tier":"other"}]}
{"id":"d362947c-47df-45dd-b5c3-109b8472b7c9","name":"dutiful-western-cicada","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":4570,"username":"root","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T09:00:09.184235+00:00","ended_at":"2026-08-20T09:00:10.579597+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"admin@321","method":"password","accepted":false,"tier":"other"}]}
{"id":"1293c656-4950-4c43-9cc3-ae717b2501d6","name":"arctic-vernal-oxpecker","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":56050,"username":"test","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T08:17:32.469485+00:00","ended_at":"2026-08-20T08:17:33.098224+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"test","password":"Test12","method":"password","accepted":false,"tier":"other"}]}
{"id":"7021abdd-1698-4cef-b130-076e72993756","name":"glassy-flinty-finch","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":53907,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T07:33:35.951819+00:00","ended_at":"2026-08-20T07:33:36.997077+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"0000","method":"password","accepted":false,"tier":"other"}]}
{"id":"48ee4085-a6ae-47a8-97a3-cd73bd25a0a5","name":"humble-quiet-gibbon","protocol":"ssh","channel_kind":null,"src_ip":"193.24.211.204","src_port":23520,"username":"mike","client_version":"SSH-2.0-libssh2_1.11.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T06:46:54.673123+00:00","ended_at":"2026-08-20T06:46:55.969914+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"mike","password":"mike","method":"password","accepted":false,"tier":"other"}]}