{"id":"ec2b333e-bca8-4398-921f-0dc6980806fd","name":"stoic-silent-meerkat","protocol":"ssh","channel_kind":"exec","src_ip":"127.0.0.1","src_port":50628,"username":"root","client_version":"SSH-2.0-AsyncSSH_2.24.0","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"ls -la /opt/stable","started_at":"2026-08-20T06:34:50.105624+00:00","ended_at":"2026-08-20T06:34:51.260988+00:00","ended_reason":"exec complete","commands":5,"transcript_bytes":2024,"events":[{"seq":1,"at":"2026-08-20T06:34:42.556248+00:00","kind":"input","latency_ms":null,"data":"ls -la /opt/stable"},{"seq":2,"at":"2026-08-20T06:34:44.633186+00:00","kind":"output","latency_ms":2074,"data":"total 28\ndrwxr-xr-x  5 root root 4096 Aug 20 03:09 .\ndrwxr-xr-x 18 root root 4096 Aug 20 03:09 ..\ndrwxr-xr-x  2 root root 4096 Aug 20 03:09 bin\ndrwxr-xr-x  3 root root 4096 Aug 20 03:09 src\ndrwxr-xr-x  2 root root 4096 Aug 20 03:09 logs"},{"seq":3,"at":"2026-08-20T06:34:44.640438+00:00","kind":"input","latency_ms":null,"data":"cat /etc/passwd | tail -4"},{"seq":4,"at":"2026-08-20T06:34:45.774928+00:00","kind":"output","latency_ms":1133,"data":"mustang:x:1004:1004::/home/mustang:/bin/bash\npinto:x:1005:1005::/home/pinto:/bin/bash\npostgres:x:111:114:PostgreSQL administrator,,,:/var/lib/postgresql:/bin/bash\nbrumby:x:1000:1000:Brumby Stable Admin,,,:/home/brumby:/bin/bash"},{"seq":5,"at":"2026-08-20T06:34:45.799616+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":6,"at":"2026-08-20T06:34:47.146812+00:00","kind":"output","latency_ms":1349,"data":"# m h  dom mon dow   command\n17 * * * * /usr/local/bin/muck-out.sh >> /var/log/muck-out.log 2>&1\n*/15 * * * * /usr/local/bin/feed-cycle.timer >> /var/log/feed-cycle.log 2>&1\n0 3 * * * /usr/local/bin/gallop-backup.sh >> /var/log/gallop-backup.log 2>&1\n*/5 * * * * /usr/local/bin/bridle-sync >> /var/log/bridle-sync.log 2>&1\n30 2 * * 1 /usr/local/bin/canter-deploy.sh stable_prod >> /var/log/canter-deploy.log 2>&1"},{"seq":7,"at":"2026-08-20T06:34:47.153399+00:00","kind":"input","latency_ms":null,"data":"ps aux | head -7"},{"seq":8,"at":"2026-08-20T06:34:50.101565+00:00","kind":"output","latency_ms":2946,"data":"USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND\nroot           1  0.0  1.1  29036 10480 ?        Ss   03:09   0:01 /sbin/init splash\nroot         612  0.0  0.4  21980  4032 ?        Ss   03:09   0:00 /usr/lib/systemd/systemd-journald\nroot         689  0.0  0.3  18840  3120 ?        Ss   03:09   0:00 /usr/lib/systemd/systemd-udevd\npostgres     744  0.0  2.1 221664 20096 ?        Ss   03:09   0:00 /usr/lib/postgresql/15/bin/postgres -D /var/lib/postgresql/15/main -c config_file=/etc/postgresql/15/main/postgresql.conf\nroot         801  0.0  0.5  11240  4896 ?        Ss   03:09   0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nroot         812  0.0  0.6  14488  5792 ?        Ss   03:09   0:00 node /opt/stable/src/server.js"},{"seq":9,"at":"2026-08-20T06:34:50.107354+00:00","kind":"input","latency_ms":null,"data":"ls /var/backups"},{"seq":10,"at":"2026-08-20T06:34:51.235231+00:00","kind":"output","latency_ms":1125,"data":"total 16\ndrwxr-xr-x  2 root root 4096 Aug 20 03:12 .\ndrwxr-xr-x 14 root root 4096 Aug 20 03:09 ..\n-rw-r--r--  1 root root  842 Aug 19 23:00 bridle-sync.1.log\n-rw-r--r--  1 root root 1248 Aug 20 02:45 canter-deploy.1.log\n-rw-r--r--  1 root root 2048 Aug 20 03:05 gallop-backup.tar.gz"}],"credentials":[{"username":"root","password":"root","method":"password","accepted":true,"tier":"common"}]}
