flux fleet digest — 2026-10-17 07:33 UTC
Fleet overview (last 24h vs 7-day baseline)
| sensor |
events |
uniq IPs |
7d avg events |
7d avg uniq |
events delta |
| ai-devbox-1 |
1990 |
178 |
2033 |
157 |
-2% |
| canary-farm-1 |
2132 |
133 |
2373 |
196 |
-10% |
| control-1 |
2715 |
102 |
3712 |
115 |
-27% |
| frantech-ts |
487 |
76 |
14749 |
83 |
-97% |
| lauterbourg-01-ts |
1441 |
124 |
1628 |
151 |
-11% |
| netcup-ts |
4770 |
89 |
2926 |
102 |
+63% |
| ru-edge-1 |
889 |
104 |
1720 |
114 |
-48% |
| sponge-01-ts |
4894 |
107 |
2591 |
98 |
+89% |
Sensors discovered in the sink: ai-devbox-1, canary-farm-1, control-1, frantech-ts, lauterbourg-01-ts, netcup-ts, ru-edge-1, sponge-01-ts.
Result-tag spikes (campaign candidates)
| sensor |
result |
24h |
7d avg |
ratio |
| canary-farm-1 |
phpinfo |
73 |
20.3 |
3.6x |
| lauterbourg-01-ts |
webshell-probe |
42 |
7.6 |
5.5x |
Campaign clusters (24h, journey-fingerprinted)
| signature |
IPs |
events |
sensors |
first seen |
sample journey (6 steps) |
| 3e1c5eb879e7 ⟳ |
84 |
595 |
ai-devbox-1,canary-farm-1,control-1,frantech-ts,netcup-ts,ru-edge-1,sponge-01-ts ⚠FLEET-WIDE |
08-29 |
/ [tarpit-module] → / [tarpit] → / [tarpit-disconnect] |
| e6e6f15a77e8 ⟳ |
47 |
141 |
ai-devbox-1 |
09-03 |
/wp-login.php [wp-login-probe] → /wp-login.php [wp-login-credentials] → /wp-login.php [wp-login-probe] |
| 850993125b15 ⟳ |
14 |
693 |
canary-farm-1 |
08-29 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → … |
| 218630667b2c ⟳ |
12 |
504 |
ai-devbox-1,canary-farm-1,control-1,frantech-ts,netcup-ts,ru-edge-1,sponge-01-ts ⚠FLEET-WIDE |
09-02 |
/ [tarpit-module] → / [tarpit] → / [tarpit-disconnect] → / [tarpit-module] → / [tarpit] → / [tarpit-disconnect] → … |
| b07c7bb207b4 ⟳ |
7 |
328 |
ai-devbox-1 |
08-29 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → … |
| b3c6048a4870 ⟳ |
7 |
280 |
lauterbourg-01-ts |
10-10 |
/ [kiteworks-root-redirect] → /console/ [weblogic-console-login] → /download/resources/jira.webresources:color-picker-popup/images/..::..::..::..::..::META-INF::maven::com.atlassian.jira::atlassian-ji |
| 09d3f351065c ⟳ |
5 |
40 |
ai-devbox-1 |
10-14 |
/wp-login.php [wp-login-credentials] → /wp-login.php [wp-login-probe] → /wp-admin/profile.php [wp-admin-redirect] → /wp-login.php [wp-login-probe] → /wp-admin/ [wp-admin-redirect] → /wp-login.php [wp- |
| 321f17b2aca0 ⟳ |
5 |
39 |
ai-devbox-1,control-1,frantech-ts,netcup-ts ⚠FLEET-WIDE |
08-31 |
/ [tarpit-module] → /favicon.ico [tarpit-module] → /geoserver/web/ [geoserver-web-landing] |
Signature = SHA-256 of the ordered path[result] sequence (≤40 steps). Same signature across IPs = one tooling campaign; IPs rotate, signatures persist.
First-seen in this window
New paths:
| sensor |
path |
first seen |
| sponge-01-ts |
/client-app/.env |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/ClientApp/.env |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/higlass-website/.env |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/scripts/.env |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/scripts/fvt/.env |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/en4 |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/basic-network/.env |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/.git/.env |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/repos/.env |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/services/traefik/.env |
2026-10-17 03:15:44.180903-04:00 |
| netcup-ts |
/hasura/.env |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/server.php |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/manage/env |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/old.php |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/wp-content/plugins/bitfire/bitfire_data/config.ini |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/img/login/favicon.ico |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/images/favicon.ico |
2026-10-17 03:15:44.180903-04:00 |
| lauterbourg-01-ts |
/wmf/base/images/WiseNet_Logo_0.png |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/administrator |
2026-10-17 03:15:44.180903-04:00 |
| sponge-01-ts |
/.gitignore |
2026-10-17 03:15:44.180903-04:00 |
New user agents:
| sensor |
user agent |
first seen |
| netcup-ts |
Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KH |
2026-10-17 03:15:55.558847-04:00 |
| ai-devbox-1 |
Mozilla/5.0 (Linux; Android 9; ZTE Blade A7 2020) AppleWebKi |
2026-10-17 03:15:55.558847-04:00 |
| netcup-ts |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, l |
2026-10-17 03:15:55.558847-04:00 |
| control-1 |
Mozilla/5.0 (X11; Linux x86_64; rv:141.0) Gecko/20100101 Fir |
2026-10-17 03:15:55.558847-04:00 |
| control-1 |
Mozilla/5.0 (Linux U; en-US) AppleWebKit/528.5 (KHTML, lik |
2026-10-17 03:15:55.558847-04:00 |
| canary-farm-1 |
Mozilla/5.0 (Linux; Android 9; SM-N950F) AppleWebKit/537.36 |
2026-10-17 03:15:55.558847-04:00 |
| lauterbourg-01-ts |
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/2 |
2026-10-17 03:15:55.558847-04:00 |
| ru-edge-1 |
Mozilla/5.0 (Linux; Android 5.0.1; SCH-R970 Build/LRX22C) Ap |
2026-10-17 03:15:55.558847-04:00 |
| frantech-ts |
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHT |
2026-10-17 03:15:55.558847-04:00 |
| lauterbourg-01-ts |
Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about); |
2026-10-17 03:15:55.558847-04:00 |
Top talkers (24h)
| sensor |
IP |
events |
trap fams |
paths |
first |
last |
blocklist |
ASN org |
cc |
POSTed |
| netcup-ts |
185.73.23.162 |
2699 |
3 |
20 |
10-16 03:37 |
10-17 06:09 |
- |
Ruhr-Universitaet Bochum |
DE |
0 |
| sponge-01-ts |
185.73.23.162 |
2358 |
3 |
15 |
10-16 03:38 |
10-17 06:11 |
- |
Ruhr-Universitaet Bochum |
DE |
0 |
| control-1 |
204.76.203.18 |
2017 |
2 |
569 |
10-16 03:33 |
10-17 06:12 |
ipsum:2 |
Pfcloud UG (haftungsbeschran |
NL |
0 |
| netcup-ts |
185.73.23.161 |
1329 |
3 |
7 |
10-16 03:36 |
10-17 03:09 |
- |
Ruhr-Universitaet Bochum |
DE |
0 |
| sponge-01-ts |
185.73.23.161 |
1160 |
2 |
8 |
10-16 03:36 |
10-17 06:11 |
- |
Ruhr-Universitaet Bochum |
DE |
0 |
| canary-farm-1 |
102.220.163.155 |
514 |
34 |
511 |
10-16 22:57 |
10-17 00:46 |
- |
VPS Dedicated LLC |
SI |
0 |
| sponge-01-ts |
185.177.72.50 |
277 |
31 |
191 |
10-17 05:30 |
10-17 05:31 |
ipsum:3 firehol2 |
Bucklog SARL |
FR |
22 |
| sponge-01-ts |
185.177.72.64 |
258 |
6 |
254 |
10-16 12:53 |
10-16 12:55 |
ipsum:1 |
Bucklog SARL |
FR |
0 |
| ai-devbox-1 |
191.217.250.172 |
178 |
30 |
83 |
10-16 08:12 |
10-16 08:17 |
- |
Samuel Dierich |
US |
0 |
| ai-devbox-1 |
45.138.12.51 |
176 |
20 |
85 |
10-16 14:53 |
10-17 01:37 |
- |
Tc Datacenter Limited |
LT |
0 |
| netcup-ts |
213.209.159.154 |
171 |
5 |
167 |
10-16 18:18 |
10-16 18:18 |
- |
Feo Prest SRL |
DE |
0 |
| sponge-01-ts |
213.209.159.154 |
171 |
5 |
167 |
10-16 23:42 |
10-16 23:43 |
- |
Feo Prest SRL |
DE |
0 |
| lauterbourg-01-ts |
45.67.216.15 |
161 |
17 |
84 |
10-16 17:15 |
10-16 17:16 |
- |
Contabo GmbH |
FR |
2 |
| canary-farm-1 |
190.93.152.243 |
153 |
2 |
3 |
10-16 18:50 |
10-16 18:50 |
- |
Colombia |
CO |
0 |
| canary-farm-1 |
104.167.19.205 |
144 |
2 |
142 |
10-16 06:34 |
10-16 06:34 |
- |
3xK Tech GmbH |
US |
0 |
Canary economics (24h)
| sensor |
mints |
distinct minting IPs |
| ai-devbox-1 |
20 |
16 |
| control-1 |
10 |
6 |
| canary-farm-1 |
21 |
18 |
| ru-edge-1 |
6 |
6 |
| frantech-ts |
0 |
0 |
| netcup-ts |
0 |
0 |
Mint failures (24h): ai-devbox-1:400x7; canary-farm-1:400x5; ru-edge-1:400x2
Mints by type label:
| sensor |
types |
mints |
| ai-devbox-1 |
["aws"] |
20 |
| canary-farm-1 |
["aws"] |
21 |
| control-1 |
["aws"] |
10 |
| ru-edge-1 |
["aws"] |
6 |
XFF forgery signals (24h)
- requests with any X-Forwarded-For: 1711
- multi-entry XFF (forged chains — no proxy appends on the direct path): 6
- XFF present but ignored as the source (all entries internal, or it agrees with the peer): 7
- XFF naming a source other than the socket peer, from a direct connection (single-entry forgery): 0
TLS split + Host census (24h)
| sensor |
protocol |
events |
| ai-devbox-1 |
http |
1138 |
| ai-devbox-1 |
https |
852 |
| canary-farm-1 |
http |
1760 |
| canary-farm-1 |
https |
372 |
| control-1 |
http |
2715 |
| frantech-ts |
http |
487 |
| lauterbourg-01-ts |
http |
961 |
| lauterbourg-01-ts |
https |
480 |
| netcup-ts |
http |
4770 |
| ru-edge-1 |
http |
889 |
| sponge-01-ts |
http |
4894 |
Top Host headers:
| sensor |
host |
events |
| control-1 |
38.54.2.209 |
2705 |
| canary-farm-1 |
109.123.246.142 |
1379 |
| sponge-01-ts |
89.167.72.144 |
1372 |
| ai-devbox-1 |
inference.fapthropic.com |
1235 |
| ru-edge-1 |
130.94.89.46 |
883 |
| lauterbourg-01-ts |
kiteworks.rightabouteverything.show |
830 |
| canary-farm-1 |
sso.rightabouteverything.show |
744 |
| netcup-ts |
159.195.21.150 |
737 |
| ai-devbox-1 |
217.15.163.226 |
731 |
| lauterbourg-01-ts |
89.116.25.211 |
576 |
Control node discovery velocity
- first event ever: 2026-09-12 07:59 UTC (34 days live)
- daily unique-IP ramp (newest first):
| day |
events |
uniq IPs |
| 2026-10-17 |
2715 |
102 |
| 2026-10-16 |
5453 |
133 |
| 2026-10-15 |
3148 |
110 |
| 2026-10-14 |
3578 |
105 |
| 2026-10-13 |
4659 |
109 |
| 2026-10-12 |
3089 |
115 |
| 2026-10-11 |
1641 |
111 |
| 2026-10-10 |
4416 |
123 |
| 2026-10-09 |
3138 |
114 |
| 2026-10-08 |
3354 |
146 |
| 2026-10-07 |
2313 |
126 |
| 2026-10-06 |
3132 |
154 |
| 2026-10-05 |
2928 |
133 |
| 2026-10-04 |
4542 |
157 |
Kill-chain watchlist (24h)
| sensor |
IP |
trap fams |
journey (chronological) |
ASN org |
cc |
| canary-farm-1 |
64.227.32.66 |
36 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
GB |
| canary-farm-1 |
46.101.1.225 |
36 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
GB |
| ai-devbox-1 |
167.99.182.39 |
34 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
CA |
| canary-farm-1 |
102.220.163.155 |
34 |
/ [tarpit-module] → /pscan-79ead659-nonexistent.txt [not-handled] → /.env [issued] → /vendor/.env [env-production] → /lib/.env [env-production] → /lab/.env [env-production] → /cronlab/.env [env-production] → /cron/.env [env-production] → /core/.env [env-production] → /core/app/.env [tarpit-module] → /core/Datavase/.env [tarpit-module] → /database/.env [phpmyadmin-login] |
VPS Dedicated LLC |
SI |
| sponge-01-ts |
185.177.72.50 |
31 |
/ [tarpit-module] → / [tarpit-disconnect] → / [tarpit] → /i8xy3mnsa59v1rwjvsvz9bffb [not-handled] → /1ocs7jt4bbo7x1ciexx1cu2jta.html [not-handled] → /fwifqyeoynl9vddmfni39uh8.php [webshell-sweep-observed] → /wp-login.php [wp-login-probe] → /wp-admin [not-handled] → /login [webapp-form-login] → /admin [webapp-form-profile] → /administrator [not-handled] → /.env [not-handled] |
Bucklog SARL |
FR |
| ai-devbox-1 |
191.217.250.172 |
30 |
/.env [issued] → /.env.prod [env-production] → /.env.example [env-production] → /.env.docker [env-production] → /.env.local [env-production] → /.env.backup [env-production] → /.env.test [env-production] → /.env.development [env-production] → /.env.production [env-production] → /.env.old [env-production] → /.env.testing [tarpit-module] → /.env.dist [env-production] |
Samuel Dierich |
US |
| ai-devbox-1 |
209.38.208.202 |
28 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
DE |
| ai-devbox-1 |
64.23.218.208 |
28 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
US |
| canary-farm-1 |
147.182.149.75 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
CA |
| canary-farm-1 |
159.223.132.86 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
US |
| ai-devbox-1 |
159.89.174.87 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
IN |
| ai-devbox-1 |
143.110.213.72 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
CA |
| canary-farm-1 |
164.90.228.79 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
DE |
| canary-farm-1 |
157.245.105.107 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
IN |
| control-1 |
164.90.208.56 |
27 |
/ [tarpit-module] → /console/ [weblogic-console-login] → /server [not-handled] → /server-status [server-status-html] → /about [not-handled] → /login.action [confluence-login] → /___proxy_subdomain_whm/login [whm-login] → /___proxy_subdomain_cpanel [whm-login] → /v2/_catalog [docker-registry-catalog] → /v2/internal/api-gateway/tags/list [docker-registry-tags] → /v2/internal/api-gateway/manifests/latest [docker-registry-manifest] → /v2/internal/auth-service/tags/list [docker-registry-tags] |
DigitalOcean, LLC |
DE |
SSH/telnet honeypot (single sensor: frantech-ts)
Own honeypots on :2222/:2323, not the flux trap surface. Condensed feed (/data/hp-logs/), deliberately not part of v_logs. One host, so read it as a single-sensor view, not a fleet number.
- funnel: 411 sources sent credentials → 324 got a shell (79%) → 265 ran a command (82% of shell-getters, 64% of sources)
- event level: 19441 credential attempts → 3765 accepted logins → 6429 commands (171% of accepted logins go on to run something)
- telnet (commodity IoT botnets): 857 attempts
New commands this window (0 of 54 distinct):
no command seen for the first time this window
Recurring commands (⟳ seen in an earlier window):
| events |
IPs |
example source |
command (head) |
| 1006 |
201 |
1.222.42.237 |
"cd ~; chattr -ia .ssh; lockr -ia .ssh" |
| 913 |
191 |
1.222.42.237 |
"cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0b |
| 625 |
1 |
8.134.58.87 |
"echo -e "\x6F\x6B"" |
| 342 |
6 |
142.93.43.28 |
"uptime -p" |
| 342 |
6 |
142.93.43.28 |
"lspci | grep VGA | cut -f5- -d ' '" |
| 342 |
6 |
142.93.43.28 |
"/bin/./uname -s -v -n -r -m" |
| 341 |
6 |
142.93.43.28 |
"lspci | grep VGA -c" |
| 340 |
6 |
142.93.43.28 |
"nvidia-smi -q | grep "Product Name" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'" |
Credentials: 14371 distinct pairs offered this window, 0 new. Concentration is the signal, not the list — top pairs:
| attempts |
user |
password |
| 951 |
345gs5662d34 |
345gs5662d34 |
| 714 |
root |
3245gs5662d34 |
| 63 |
root |
123456 |
| 54 |
user |
wasd |
| 52 |
pi |
raspberry |
| 47 |
ubuntu |
3245gs5662d34 |
| 39 |
admin |
3245gs5662d34 |
| 28 |
support |
support |