{"id":"642715f4-9ae0-4309-8740-5b1d489bcdb6","name":"loyal-gnarled-jerboa","protocol":"ssh","channel_kind":null,"src_ip":"103.78.2.252","src_port":49006,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T06:27:24.405532+00:00","ended_at":"2026-08-27T06:27:24.864158+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"58db3423-2524-4062-ace6-6b9b73a8ef68","name":"airy-obsidian-vulture","protocol":"ssh","channel_kind":null,"src_ip":"38.148.20.75","src_port":41288,"username":"user","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T06:33:04.259530+00:00","ended_at":"2026-08-25T06:33:05.239946+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"user","method":"password","accepted":true,"tier":"common"}]}
{"id":"99664a92-d78e-48cf-b9de-d74cd77b3f0f","name":"keen-jovial-ptarmigan","protocol":"ssh","channel_kind":null,"src_ip":"38.148.20.75","src_port":47850,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T06:32:24.298053+00:00","ended_at":"2026-08-25T06:32:26.745120+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}
{"id":"9d4398f6-f222-494b-82b2-c8c166368299","name":"inland-quaint-mink","protocol":"ssh","channel_kind":"exec","src_ip":"178.175.167.68","src_port":44402,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":391,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-24T09:47:15.632476+00:00","ended_at":"2026-08-24T09:48:00.990751+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":4856,"events":[{"seq":1,"at":"2026-08-24T09:46:56.166943+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-24T09:46:58.521131+00:00","kind":"output","latency_ms":2353,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-24T09:46:58.911162+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-24T09:46:58.911631+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-24T09:46:59.302175+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-24T09:46:59.302939+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-24T09:46:59.695023+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-24T09:47:06.890232+00:00","kind":"output","latency_ms":7193,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a201105\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 13\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx avx2 f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core perfctr_nb bpext amd_lbr_v2 hw_pstate bmi1 avx2 bmi2 xsaveopt xsavec xgetbv1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold\nbugs\t\t: sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass swapgs itlb_multihit\nbogomips\t: 4000.00\nTLB size\t: 2560 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 52 bits physical, 57 bits virtual\npower management: tsx\n\nprocessor\t: 1\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a201105\ncpu MHz\t\t: 2000.000\ncache size\t\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 1\ncpu cores\t: 64\napicid\t\t: 1\ninitial apicid\t: 1\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 13\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid aper"},{"seq":9,"at":"2026-08-24T09:47:07.280465+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-24T09:47:09.803445+00:00","kind":"output","latency_ms":2522,"data":"root       812  0.0  0.1  10232  3128 ?        Ss   Aug20   0:00 /usr/sbin/cron -f\nroot      1194  0.0  0.2  48216  4564 ?        Ss   Aug20   0:03 /usr/sbin/sshd -D\nroot      1450  0.1  1.3 318420 21024 ?        Ssl  Aug20   6:11 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\npostgres  1522  0.2  4.1 212344 65884 ?        Ssl  Aug20  12:44 /usr/lib/postgresql/16/bin/postgres -D /var/lib/postgresql/16/main\nnode      1678  0.4  3.8 1023456 61200 ?       Ssl  Aug20  21:02 node /opt/stable/src/server.js\nroot      2481  0.0  0.0   6668  1564 pts/0    S+   06:58   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-24T09:47:10.195645+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-24T09:47:11.982872+00:00","kind":"output","latency_ms":1788,"data":"root        812       1  0 Aug20 ?        00:00:00 /usr/sbin/cron -f\nroot       1194       1  0 Aug20 ?        00:00:03 /usr/sbin/sshd -D\nroot       1450       1  0 Aug20 ?        00:06:11 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\npostgres    1522       1  0 Aug20 ?        00:12:44 /usr/lib/postgresql/16/bin/postgres -D /var/lib/postgresql/16/main\nnode        1678       1  0 Aug20 ?        00:21:02 node /opt/stable/src/server.js\nroot       2481    2439  0 06:58 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-24T09:47:12.374165+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-24T09:47:14.103964+00:00","kind":"output","latency_ms":1728,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-24T09:47:14.497288+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-24T09:47:15.243052+00:00","kind":"output","latency_ms":744,"data":"bash: locate: command not found"},{"seq":17,"at":"2026-08-24T09:47:15.633265+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-24T09:47:16.322618+00:00","kind":"output","latency_ms":689,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"e432dba5-0b48-4d62-9d7e-0f31d806883f","name":"freckled-shifting-crane","protocol":"ssh","channel_kind":null,"src_ip":"85.239.149.72","src_port":57698,"username":"user","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T12:54:55.699202+00:00","ended_at":"2026-08-23T12:54:55.988601+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"user","method":"password","accepted":true,"tier":"common"}]}
{"id":"f9089b69-23bf-4bfc-aa1e-f178d271e8d6","name":"watchful-lunar-shearwater","protocol":"ssh","channel_kind":null,"src_ip":"85.239.149.72","src_port":56552,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T12:45:59.606140+00:00","ended_at":"2026-08-23T12:46:00.614063+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}
{"id":"acdd3b51-4b3a-4590-80a9-15b76ea54355","name":"balmy-steady-ermine","protocol":"ssh","channel_kind":null,"src_ip":"212.227.188.160","src_port":50762,"username":"user","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T12:26:30.540627+00:00","ended_at":"2026-08-23T12:26:30.761835+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"user","method":"password","accepted":true,"tier":"common"}]}
{"id":"31bc3d6d-1fa1-4918-8c97-25f7e4a80d56","name":"nameless-thorny-manatee","protocol":"ssh","channel_kind":null,"src_ip":"212.227.188.160","src_port":38210,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T12:25:59.067197+00:00","ended_at":"2026-08-23T12:26:00.141952+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}
{"id":"68a5a21a-6ef2-41b7-9206-d0572ed6baa4","name":"alpine-plucky-capuchin","protocol":"ssh","channel_kind":"exec","src_ip":"84.74.163.210","src_port":54812,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":473,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-23T11:31:00.862069+00:00","ended_at":"2026-08-23T11:31:47.614046+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":4070,"events":[{"seq":1,"at":"2026-08-23T11:30:44.214506+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-23T11:30:46.080106+00:00","kind":"output","latency_ms":1858,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-23T11:30:46.554877+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-23T11:30:46.555353+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-23T11:30:47.028749+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-23T11:30:47.029235+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-23T11:30:47.523499+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-23T11:30:53.715015+00:00","kind":"output","latency_ms":6188,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0xa0011d1\ncpu MHz\t\t: 1995.312\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 24\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt topoext perfctr_core perfctr_nb bpext arat npt lbrv svm_lock nrip_save pausefilter cpi umip rdpid\nbugs\t\t: sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass\nbogomips\t: 3990.62\nTLB size\t: 3584 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 52 bits physical, 57 bits virtual\npower management:\n\nprocessor\t: 1\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0xa0011d1\ncpu MHz\t\t: 1995.312\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 1\ninitial apicid\t: 2\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 24\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misaligns"},{"seq":9,"at":"2026-08-23T11:30:54.184412+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-23T11:30:55.856247+00:00","kind":"output","latency_ms":1669,"data":"root       1234  0.0  0.1  10240  3120 ?        S    Aug20   0:12 /usr/bin/python3 /opt/stable/src/worker.js --role=miner\nroot       1288  0.0  0.0   6500   812 pts/0    S+   11:31   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-23T11:30:56.329320+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-23T11:30:57.308423+00:00","kind":"output","latency_ms":978,"data":"root       1234     1  0 Aug20 ?        00:00:12 /usr/bin/python3 /opt/stable/src/worker.js --role=miner\nroot       1288  1277  0 11:31 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-23T11:30:57.776127+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-23T11:30:59.004755+00:00","kind":"output","latency_ms":1226,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-23T11:30:59.475657+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-23T11:31:00.384488+00:00","kind":"output","latency_ms":908,"data":"-bash: locate: command not found"},{"seq":17,"at":"2026-08-23T11:31:00.862771+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-23T11:31:01.323106+00:00","kind":"output","latency_ms":459,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"77756607-383a-4aae-a644-895b7647bdb4","name":"solar-dutiful-otter","protocol":"ssh","channel_kind":"exec","src_ip":"75.156.145.235","src_port":42330,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":230,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-23T00:57:14.429180+00:00","ended_at":"2026-08-23T00:58:53.958519+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":4678,"events":[{"seq":1,"at":"2026-08-23T00:57:02.077068+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-23T00:57:02.712692+00:00","kind":"output","latency_ms":633,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-23T00:57:02.943743+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-23T00:57:02.944222+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-23T00:57:03.174443+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-23T00:57:03.183325+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-23T00:57:03.405053+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-23T00:57:08.587245+00:00","kind":"output","latency_ms":5180,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a20102b\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 0\ncpu cores\t: 8\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 32\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl tsc_known_freq nonstop_tsc cpuid extd_apicid aperfmperf rapl pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibpb stibp vmmcall fsgsbase bmi1 avx2 smep bmi2 erms invpcid rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves ibpb-vmexit ssbd-virt ssbd-no ibpb-no fma4\nbugs\t\t: sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass\nbogomips\t: 4000.00\nTLB size\t: 4096 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 48 bits physical, 48 bits virtual\npower management:\n\nprocessor\t: 1\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0x0a20102b\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 1\ncpu cores\t: 8\napicid\t\t: 2\ninitial apicid\t: 2\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 32\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl tsc_known_freq nonstop_tsc cpuid extd_apicid aperfmperf rapl pni pclmul"},{"seq":9,"at":"2026-08-23T00:57:08.816521+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-23T00:57:10.751027+00:00","kind":"output","latency_ms":1933,"data":"root        1234  0.0  0.1  12345  6789 ?        Ss   Aug20   0:02 /usr/bin/node /opt/stable/src/server.js\nroot        2345  0.0  0.0   2345  1234 ?        Ssl  Aug20   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master process\nroot        3456  0.0  0.2  45678  9876 ?        Ssl  Aug20   0:15 postgres: 14/main: checkpointer \nroot        4567  0.0  0.0   4321  2100 ?        Ss   Aug20   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups\nroot        5678  0.0  0.0   1111   888 ?        Ss   Aug20   0:00 /usr/sbin/cron -f"},{"seq":11,"at":"2026-08-23T00:57:10.982347+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-23T00:57:12.109717+00:00","kind":"output","latency_ms":1126,"data":"root        1234       1  0 Aug20 ?        00:00:02 /usr/bin/node /opt/stable/src/server.js\nroot        2345       1  0 Aug20 ?        00:00:00 nginx: master process /usr/sbin/nginx -g daemon on; master process\nroot        3456       1  0 Aug20 ?        00:00:15 postgres: 14/main: checkpointer \nroot        4567       1  0 Aug20 ?        00:00:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups\nroot        5678       1  0 Aug20 ?        00:00:00 /usr/sbin/cron -f"},{"seq":13,"at":"2026-08-23T00:57:12.341107+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-23T00:57:13.533182+00:00","kind":"output","latency_ms":1187,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-23T00:57:13.764027+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-23T00:57:14.199964+00:00","kind":"output","latency_ms":437,"data":"-bash: locate: command not found"},{"seq":17,"at":"2026-08-23T00:57:14.431076+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-23T00:57:14.915958+00:00","kind":"output","latency_ms":484,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"7473b2d3-0544-4e2f-8545-36b01df67e8d","name":"snowy-graceful-merlin","protocol":"ssh","channel_kind":null,"src_ip":"212.227.188.160","src_port":47924,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-22T22:53:21.078996+00:00","ended_at":"2026-08-22T22:54:20.723560+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}
{"id":"6982de41-3624-4393-b6d7-56f0d15f6238","name":"stormy-lunar-pheasant","protocol":"ssh","channel_kind":null,"src_ip":"138.124.33.255","src_port":56230,"username":"user","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-22T00:22:45.297784+00:00","ended_at":"2026-08-22T00:22:45.800930+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"user","method":"password","accepted":true,"tier":"common"}]}
{"id":"fec8bc2b-9e94-41b7-b964-867bea909cc8","name":"northern-upland-narwhal","protocol":"ssh","channel_kind":null,"src_ip":"138.124.33.255","src_port":34700,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-22T00:21:20.921336+00:00","ended_at":"2026-08-22T00:21:22.200357+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}
{"id":"62c52a1e-8571-4be3-97c0-746619549d3a","name":"amiable-indigo-boar","protocol":"ssh","channel_kind":"exec","src_ip":"119.119.6.53","src_port":43108,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":2087,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T20:45:45.214465+00:00","ended_at":"2026-08-20T20:46:36.900190+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":3818,"events":[{"seq":1,"at":"2026-08-20T20:45:15.087074+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T20:45:17.136788+00:00","kind":"output","latency_ms":2031,"data":"bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T20:45:19.366364+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T20:45:19.367563+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T20:45:21.944546+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T20:45:21.945793+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T20:45:23.538908+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T20:45:28.625569+00:00","kind":"output","latency_ms":5081,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 1\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 1\nmicrocode\t: 0xa0011d5\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 8\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 25\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single ibrs ibpb stibp vmmcall fsgsbase bmi1 avx2 smep bmi2 erms invpcid xsaveopt arat npt nrip_save tsc_scale vmcb_clean flushbyasid umip pku ospke vaes vpclmulqdq rdpid overflow_recov succor smca fsrm\nbugs\t\t: sysret_ss_attrs spectre_v1 spectre_v2 spec_store_bypass\nbogomips\t: 4000.00\nTLB size\t: 3584 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 52 bits physical, 57 bits virtual\npower management: []"},{"seq":9,"at":"2026-08-20T20:45:30.393184+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T20:45:32.293289+00:00","kind":"output","latency_ms":1893,"data":"root        1123  0.0  0.0   6780  2256 ?        Ssl  03:10   0:00 /usr/bin/python3 /usr/local/bin/hoofcheck.sh\nroot        1188  0.0  0.0   9744  3180 ?        Ss   03:11   0:00 sshd: root@pts/0\nroot        1420  0.0  0.1  21432  7784 ?        Ssl  03:14   0:02 node /opt/stable/src/server.js\nroot        1589  0.0  0.0   7420  2364 ?        S    03:16   0:00 grep --color=auto [Mm]iner"},{"seq":11,"at":"2026-08-20T20:45:33.527462+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T20:45:34.604260+00:00","kind":"output","latency_ms":1078,"data":"root        1123       1  0 03:10 ?        00:00:00 /usr/bin/python3 /usr/local/bin/hoofcheck.sh\nroot        1188       1  0 03:11 ?        00:00:00 sshd: root@pts/0\nroot        1420       1  0 03:14 ?        00:00:02 node /opt/stable/src/server.js\nroot        1702    1188  0 03:16 pts/0    00:00:00 grep --color=auto [Mm]iner"},{"seq":13,"at":"2026-08-20T20:45:35.902835+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T20:45:37.393631+00:00","kind":"output","latency_ms":1488,"data":"ls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory"},{"seq":15,"at":"2026-08-20T20:45:40.035009+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T20:45:43.127736+00:00","kind":"output","latency_ms":3091,"data":"/root/.local/share/TelegramDesktop/tdata/D877F783D5D3EF8Cs\n"},{"seq":17,"at":"2026-08-20T20:45:45.216442+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T20:45:45.775478+00:00","kind":"output","latency_ms":559,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"649e05c8-86dc-4c86-adf4-6f9011dcfd5b","name":"supple-wistful-martin","protocol":"ssh","channel_kind":"exec","src_ip":"220.123.222.114","src_port":60276,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":624,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T12:28:41.217416+00:00","ended_at":"2026-08-20T12:29:19.443517+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":6448,"events":[{"seq":1,"at":"2026-08-20T12:28:17.071930+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T12:28:18.930827+00:00","kind":"output","latency_ms":1857,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T12:28:19.556564+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T12:28:19.557799+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T12:28:20.181630+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T12:28:20.182758+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T12:28:20.801740+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T12:28:27.747419+00:00","kind":"output","latency_ms":6941,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 33\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 2\nmicrocode\t: 0xa0011a9\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 25\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx avx2 f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase bmi1 bmi2 erms invpcid rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero wbnoinvd\nvmx flags\t: \nbugs\t\t: spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit mmio_stale_data bhi\nbogomips\t: 4000.00\nTLB size\t: 4096 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 40 bits physical, 48 bits virtual\npower management:  svm cstate\nprocessor\t: 1\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 33\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 2\nmicrocode\t: 0xa0011a9\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 1\ncpu cores\t: 64\napicid\t\t: 1\ninitial apicid\t: 1\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 25\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pcl"},{"seq":9,"at":"2026-08-20T12:28:28.369897+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T12:28:33.019453+00:00","kind":"output","latency_ms":4646,"data":"root        1264  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/cron -f\nroot        1272  0.0  0.4  24120  8644 ?        Ss   03:10   0:00 /usr/sbin/sshd -D\npostgres    1318  0.0  0.7 215632 15120 ?        Ss   03:10   0:02 postgres: 14/main: checkpointer\npostgres    1319  0.0  0.7 215632 15120 ?        Ss   03:10   0:01 postgres: 14/main: background writer\npostgres    1320  0.0  0.7 215632 15120 ?        Ss   03:10   0:01 postgres: 14/main: walwriter\npostgres    1321  0.0  0.7 215632 15120 ?        Ss   03:10   0:03 postgres: 14/main: autovacuum launcher\nroot        1330  0.0  0.2  12320  4480 ?        Ss   03:10   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data    1331  0.0  0.5  13084  5840 ?        S    03:10   0:00 nginx: worker process\nroot        1338  0.0  0.3  14572  5964 ?        Ss   03:10   0:00 /usr/bin/node /opt/stable/src/server.js\nroot        1342  0.0  0.1   9480  3248 ?        S    03:10   0:00 /opt/stable/bin/hoofcheck.sh\nroot        1347  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/python3 /opt/stable/bin/muck-out.sh\nroot        1351  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/bash /opt/stable/bin/gallop-backup.sh\nroot        1356  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/bash /opt/stable/bin/canter-deploy.sh\nroot        1360  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/systemd-resolved\n\n"},{"seq":11,"at":"2026-08-20T12:28:33.650296+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T12:28:36.948423+00:00","kind":"output","latency_ms":3296,"data":"root        1264       1  0 03:10 ?        00:00:00 /usr/bin/cron -f\nroot        1272       1  0 03:10 ?        00:00:00 /usr/sbin/sshd -D\npostgres    1318       1  0 03:10 ?        00:00:02 postgres: 14/main: checkpointer\npostgres    1319       1  0 03:10 ?        00:00:01 postgres: 14/main: background writer\npostgres    1320       1  0 03:10 ?        00:00:01 postgres: 14/main: walwriter\npostgres    1321       1  0 03:10 ?        00:00:03 postgres: 14/main: autovacuum launcher\nroot        1330       1  0 03:10 ?        00:00:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data    1331    1330  0 03:10 ?        00:00:00 nginx: worker process\nroot        1338       1  0 03:10 ?        00:00:00 /usr/bin/node /opt/stable/src/server.js\nroot        1342    1338  0 03:10 ?        00:00:00 /opt/stable/bin/hoofcheck.sh\nroot        1347    1338  0 03:10 ?        00:00:00 /usr/bin/python3 /opt/stable/bin/muck-out.sh\nroot        1351    1338  0 03:10 ?        00:00:00 /usr/bin/bash /opt/stable/bin/gallop-backup.sh\nroot        1356    1338  0 03:10 ?        00:00:00 /usr/bin/bash /opt/stable/bin/canter-deploy.sh\nroot        1360       1  0 03:10 ?        00:00:00 /usr/bin/systemd-resolved\nroot        1622    1619  0 03:11 pts/0    00:00:00 grep --color=auto '[Mm]iner'"},{"seq":13,"at":"2026-08-20T12:28:37.571150+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T12:28:39.076889+00:00","kind":"output","latency_ms":1504,"data":"ls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory\n/root/.local/share/TelegramDesktop/tdata:\nls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory"},{"seq":15,"at":"2026-08-20T12:28:39.717373+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T12:28:40.596757+00:00","kind":"output","latency_ms":889,"data":"bash: locate: command not found"},{"seq":17,"at":"2026-08-20T12:28:41.218765+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T12:28:41.678308+00:00","kind":"output","latency_ms":459,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
{"id":"fa809501-0c1b-4642-80bd-7fc2f6337ffe","name":"proud-wistful-bison","protocol":"ssh","channel_kind":null,"src_ip":"193.151.135.110","src_port":53420,"username":"user","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T06:45:05.322603+00:00","ended_at":"2026-08-20T06:45:05.975465+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"user","method":"password","accepted":true,"tier":"common"}]}
{"id":"05e66a40-b8b1-4d65-9a97-61020acc7e68","name":"fabled-silent-wombat","protocol":"ssh","channel_kind":null,"src_ip":"193.151.135.110","src_port":60782,"username":"admin","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T06:42:06.425483+00:00","ended_at":"2026-08-20T06:42:08.479052+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":false,"tier":"common"}]}