{"id":"649e05c8-86dc-4c86-adf4-6f9011dcfd5b","name":"supple-wistful-martin","protocol":"ssh","channel_kind":"exec","src_ip":"220.123.222.114","src_port":60276,"username":"root","client_version":"SSH-2.0-libssh2_1.11.1","auth_attempts":2,"automation":"bot","think_ms":624,"probe_flagged":0,"exec_command":"/ip cloud print","started_at":"2026-08-20T12:28:41.217416+00:00","ended_at":"2026-08-20T12:29:19.443517+00:00","ended_reason":"exec complete","commands":9,"transcript_bytes":6448,"events":[{"seq":1,"at":"2026-08-20T12:28:17.071930+00:00","kind":"input","latency_ms":null,"data":"/ip cloud print"},{"seq":2,"at":"2026-08-20T12:28:18.930827+00:00","kind":"output","latency_ms":1857,"data":"-bash: /ip: No such file or directory"},{"seq":3,"at":"2026-08-20T12:28:19.556564+00:00","kind":"input","latency_ms":null,"data":"ifconfig"},{"seq":4,"at":"2026-08-20T12:28:19.557799+00:00","kind":"output","latency_ms":null,"data":"eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\n        inet 203.0.113.1  netmask 255.255.255.0  broadcast 45.33.68.255\n        inet6 2001:db8::1  prefixlen 64  scopeid 0x0<global>\n        ether f2:3c:91:65:96:d6  txqueuelen 1000  (Ethernet)\n        RX packets 184392  bytes 21847392 (21.8 MB)\n        TX packets 92831  bytes 14203918 (14.2 MB)\n\nlo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536\n        inet 127.0.0.1  netmask 255.0.0.0\n        inet6 ::1  prefixlen 128  scopeid 0x10<host>\n        loop  txqueuelen 1000  (Local Loopback)"},{"seq":5,"at":"2026-08-20T12:28:20.181630+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":6,"at":"2026-08-20T12:28:20.182758+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":7,"at":"2026-08-20T12:28:20.801740+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo"},{"seq":8,"at":"2026-08-20T12:28:27.747419+00:00","kind":"output","latency_ms":6941,"data":"processor\t: 0\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 33\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 2\nmicrocode\t: 0xa0011a9\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 0\ncpu cores\t: 64\napicid\t\t: 0\ninitial apicid\t: 0\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 25\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx avx2 f16c rdrand hypervisor lahf_lm cmp_legacy svm cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw perfctr_core ssbd ibrs ibpb stibp vmmcall fsgsbase bmi1 bmi2 erms invpcid rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero wbnoinvd\nvmx flags\t: \nbugs\t\t: spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit mmio_stale_data bhi\nbogomips\t: 4000.00\nTLB size\t: 4096 4K pages\nclflush size\t: 64\ncache_alignment\t: 64\naddress sizes\t: 40 bits physical, 48 bits virtual\npower management:  svm cstate\nprocessor\t: 1\nvendor_id\t: AuthenticAMD\ncpu family\t: 25\nmodel\t\t: 33\nmodel name\t: AMD EPYC 7713 64-Core Processor\nstepping\t: 2\nmicrocode\t: 0xa0011a9\ncpu MHz\t\t: 2000.000\ncache size\t: 512 KB\nphysical id\t: 0\nsiblings\t: 1\ncore id\t\t: 1\ncpu cores\t: 64\napicid\t\t: 1\ninitial apicid\t: 1\nfpu\t\t: yes\nfpu_exception\t: yes\ncpuid level\t: 25\nwp\t\t: yes\nflags\t\t: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt rdtscp lm constant_tsc rep_good nopl cpuid extd_apicid aperfmperf pni pcl"},{"seq":9,"at":"2026-08-20T12:28:28.369897+00:00","kind":"input","latency_ms":null,"data":"ps | grep '[Mm]iner'"},{"seq":10,"at":"2026-08-20T12:28:33.019453+00:00","kind":"output","latency_ms":4646,"data":"root        1264  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/cron -f\nroot        1272  0.0  0.4  24120  8644 ?        Ss   03:10   0:00 /usr/sbin/sshd -D\npostgres    1318  0.0  0.7 215632 15120 ?        Ss   03:10   0:02 postgres: 14/main: checkpointer\npostgres    1319  0.0  0.7 215632 15120 ?        Ss   03:10   0:01 postgres: 14/main: background writer\npostgres    1320  0.0  0.7 215632 15120 ?        Ss   03:10   0:01 postgres: 14/main: walwriter\npostgres    1321  0.0  0.7 215632 15120 ?        Ss   03:10   0:03 postgres: 14/main: autovacuum launcher\nroot        1330  0.0  0.2  12320  4480 ?        Ss   03:10   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data    1331  0.0  0.5  13084  5840 ?        S    03:10   0:00 nginx: worker process\nroot        1338  0.0  0.3  14572  5964 ?        Ss   03:10   0:00 /usr/bin/node /opt/stable/src/server.js\nroot        1342  0.0  0.1   9480  3248 ?        S    03:10   0:00 /opt/stable/bin/hoofcheck.sh\nroot        1347  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/python3 /opt/stable/bin/muck-out.sh\nroot        1351  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/bash /opt/stable/bin/gallop-backup.sh\nroot        1356  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/bash /opt/stable/bin/canter-deploy.sh\nroot        1360  0.0  0.1   9480  3248 ?        S    03:10   0:00 /usr/bin/systemd-resolved\n\n"},{"seq":11,"at":"2026-08-20T12:28:33.650296+00:00","kind":"input","latency_ms":null,"data":"ps -ef | grep '[Mm]iner'"},{"seq":12,"at":"2026-08-20T12:28:36.948423+00:00","kind":"output","latency_ms":3296,"data":"root        1264       1  0 03:10 ?        00:00:00 /usr/bin/cron -f\nroot        1272       1  0 03:10 ?        00:00:00 /usr/sbin/sshd -D\npostgres    1318       1  0 03:10 ?        00:00:02 postgres: 14/main: checkpointer\npostgres    1319       1  0 03:10 ?        00:00:01 postgres: 14/main: background writer\npostgres    1320       1  0 03:10 ?        00:00:01 postgres: 14/main: walwriter\npostgres    1321       1  0 03:10 ?        00:00:03 postgres: 14/main: autovacuum launcher\nroot        1330       1  0 03:10 ?        00:00:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nwww-data    1331    1330  0 03:10 ?        00:00:00 nginx: worker process\nroot        1338       1  0 03:10 ?        00:00:00 /usr/bin/node /opt/stable/src/server.js\nroot        1342    1338  0 03:10 ?        00:00:00 /opt/stable/bin/hoofcheck.sh\nroot        1347    1338  0 03:10 ?        00:00:00 /usr/bin/python3 /opt/stable/bin/muck-out.sh\nroot        1351    1338  0 03:10 ?        00:00:00 /usr/bin/bash /opt/stable/bin/gallop-backup.sh\nroot        1356    1338  0 03:10 ?        00:00:00 /usr/bin/bash /opt/stable/bin/canter-deploy.sh\nroot        1360       1  0 03:10 ?        00:00:00 /usr/bin/systemd-resolved\nroot        1622    1619  0 03:11 pts/0    00:00:00 grep --color=auto '[Mm]iner'"},{"seq":13,"at":"2026-08-20T12:28:37.571150+00:00","kind":"input","latency_ms":null,"data":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*"},{"seq":14,"at":"2026-08-20T12:28:39.076889+00:00","kind":"output","latency_ms":1504,"data":"ls: cannot access '/home/*/.local/share/TelegramDesktop/tdata': No such file or directory\nls: cannot access '/dev/ttyGSM*': No such file or directory\nls: cannot access '/dev/ttyUSB-mod*': No such file or directory\nls: cannot access '/var/spool/sms/*': No such file or directory\nls: cannot access '/var/log/smsd.log': No such file or directory\nls: cannot access '/etc/smsd.conf*': No such file or directory\nls: cannot access '/usr/bin/qmuxd': No such file or directory\nls: cannot access '/var/qmux_connect_socket': No such file or directory\nls: cannot access '/etc/config/simman': No such file or directory\nls: cannot access '/dev/modem*': No such file or directory\nls: cannot access '/var/config/sms/*': No such file or directory\n/root/.local/share/TelegramDesktop/tdata:\nls: cannot access '/root/.local/share/TelegramDesktop/tdata': No such file or directory"},{"seq":15,"at":"2026-08-20T12:28:39.717373+00:00","kind":"input","latency_ms":null,"data":"locate D877F783D5D3EF8Cs"},{"seq":16,"at":"2026-08-20T12:28:40.596757+00:00","kind":"output","latency_ms":889,"data":"bash: locate: command not found"},{"seq":17,"at":"2026-08-20T12:28:41.218765+00:00","kind":"input","latency_ms":null,"data":"echo Hi | cat -n"},{"seq":18,"at":"2026-08-20T12:28:41.678308+00:00","kind":"output","latency_ms":459,"data":"     1\tHi"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":false,"tier":"common"},{"username":"root","password":"admin","method":"password","accepted":true,"tier":"common"}]}
