2026-08-03T13:35:40.126528-04:00 BSidesNYC0x06 systemd[1]: rsyslog.service: Sent signal SIGHUP to main process 659 (rsyslogd) on client request.
2026-08-03T13:35:40.127016-04:00 BSidesNYC0x06 rsyslogd: [origin software="rsyslogd" swVersion="8.2504.0" x-pid="659" x-info="https://www.rsyslog.com"] rsyslogd was HUPed
2026-08-03T13:35:40.135274-04:00 BSidesNYC0x06 systemd[1]: logrotate.service: Deactivated successfully.
2026-08-03T13:35:40.135726-04:00 BSidesNYC0x06 systemd[1]: Finished logrotate.service - Rotate log files.
2026-08-03T13:39:40.043649-04:00 BSidesNYC0x06 systemd[1]: Starting systemd-tmpfiles-clean.service - Cleanup of Temporary Directories...
2026-08-03T13:39:40.069700-04:00 BSidesNYC0x06 systemd-tmpfiles[888]: /usr/lib/tmpfiles.d/legacy.conf:14: Duplicate line for path "/run/lock", ignoring.
2026-08-03T13:39:40.078336-04:00 BSidesNYC0x06 systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully.
2026-08-03T13:39:40.078639-04:00 BSidesNYC0x06 systemd[1]: Finished systemd-tmpfiles-clean.service - Cleanup of Temporary Directories.
2026-08-03T13:47:40.043912-04:00 BSidesNYC0x06 systemd[1]: Starting fstrim.service - Discard unused blocks on filesystems from /etc/fstab...
2026-08-03T13:47:40.143046-04:00 BSidesNYC0x06 fstrim[913]: /: 3.1 GiB (3331108864 bytes) trimmed on /dev/sda1
2026-08-03T13:47:40.143940-04:00 BSidesNYC0x06 systemd[1]: fstrim.service: Deactivated successfully.
2026-08-03T13:47:40.144173-04:00 BSidesNYC0x06 systemd[1]: Finished fstrim.service - Discard unused blocks on filesystems from /etc/fstab.
2026-08-03T14:00:04.076514-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T14:00:04.106494-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T14:00:04.106751-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T14:17:01.852481-04:00 BSidesNYC0x06 CRON[995]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T15:00:04.076510-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T15:00:04.110468-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T15:00:04.110731-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T15:17:01.877822-04:00 BSidesNYC0x06 CRON[1187]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T16:00:04.076806-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T16:00:04.114652-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T16:00:04.114993-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T16:17:01.904389-04:00 BSidesNYC0x06 CRON[1360]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T17:00:04.077727-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T17:00:04.102650-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T17:00:04.102974-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T17:17:01.929906-04:00 BSidesNYC0x06 CRON[1529]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T18:00:04.076514-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T18:00:04.122902-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T18:00:04.123151-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T18:17:01.956628-04:00 BSidesNYC0x06 CRON[1693]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T19:00:04.076809-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T19:00:04.102060-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T19:00:04.102356-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T19:17:01.979498-04:00 BSidesNYC0x06 CRON[1854]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T20:00:04.077782-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T20:00:04.104957-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T20:00:04.105427-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T20:17:02.006188-04:00 BSidesNYC0x06 CRON[2021]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T21:00:04.077731-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T21:00:04.120718-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T21:00:04.121164-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T21:17:01.035086-04:00 BSidesNYC0x06 CRON[2189]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T22:00:04.077791-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T22:00:04.125395-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T22:00:04.125864-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T22:17:01.060465-04:00 BSidesNYC0x06 CRON[2357]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T23:00:04.077642-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-03T23:00:04.120460-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-03T23:00:04.120914-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-03T23:17:01.087922-04:00 BSidesNYC0x06 CRON[2522]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-03T23:31:02.570883-04:00 BSidesNYC0x06 kernel: hv_utils: Heartbeat IC version 3.0
2026-08-03T23:31:02.570937-04:00 BSidesNYC0x06 kernel: hv_utils: Shutdown IC version 3.2
2026-08-03T23:31:02.570939-04:00 BSidesNYC0x06 kernel: hv_utils: TimeSync IC version 4.0
2026-08-03T23:31:02.570941-04:00 BSidesNYC0x06 kernel: hv_utils: VSS IC version 5.0
2026-08-04T07:00:29.363210-04:00 BSidesNYC0x06 systemd[1]: Starting dpkg-db-backup.service - Daily dpkg database backup service...
2026-08-04T07:00:29.364334-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-04T07:00:29.366410-04:00 BSidesNYC0x06 systemd[1]: Starting logrotate.service - Rotate log files...
2026-08-04T07:00:29.419163-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-04T07:00:29.419449-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-04T07:00:29.496980-04:00 BSidesNYC0x06 systemd[1]: logrotate.service: Deactivated successfully.
2026-08-04T07:00:29.497251-04:00 BSidesNYC0x06 systemd[1]: Finished logrotate.service - Rotate log files.
2026-08-04T07:00:29.676407-04:00 BSidesNYC0x06 systemd[1]: dpkg-db-backup.service: Deactivated successfully.
2026-08-04T07:00:29.676883-04:00 BSidesNYC0x06 systemd[1]: Finished dpkg-db-backup.service - Daily dpkg database backup service.
2026-08-04T07:00:30.368065-04:00 BSidesNYC0x06 kernel: hv_balloon: Max. dynamic memory size: 4096 MB
2026-08-04T07:17:01.888244-04:00 BSidesNYC0x06 CRON[2679]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-04T07:59:05.191654-04:00 BSidesNYC0x06 dhclient[699]: DHCPREQUEST for 192.168.0.211 on eth0 to 192.168.0.1 port 67
2026-08-04T07:59:05.193504-04:00 BSidesNYC0x06 dhclient[699]: DHCPACK of 192.168.0.211 from 192.168.0.1
2026-08-04T07:59:05.224150-04:00 BSidesNYC0x06 dhclient[699]: bound to 192.168.0.211 -- renewal in 36544 seconds.
2026-08-04T08:00:04.076503-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-04T08:00:04.109121-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-04T08:00:04.109391-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-04T08:17:01.910349-04:00 BSidesNYC0x06 CRON[2860]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-04T09:00:04.076703-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-04T09:00:04.113390-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-04T09:00:04.113644-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-04T09:17:01.933045-04:00 BSidesNYC0x06 CRON[3021]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-04T10:00:04.076544-04:00 BSidesNYC0x06 systemd[1]: Starting fake-hwclock-save.service - Save the current clock...
2026-08-04T10:00:04.108926-04:00 BSidesNYC0x06 systemd[1]: fake-hwclock-save.service: Deactivated successfully.
2026-08-04T10:00:04.109151-04:00 BSidesNYC0x06 systemd[1]: Finished fake-hwclock-save.service - Save the current clock.
2026-08-04T10:16:08.973149-04:00 BSidesNYC0x06 dropbear[3182]: [3182] Aug 04 10:16:08 Child connection from 192.168.0.207:50220
2026-08-04T10:16:11.053963-04:00 BSidesNYC0x06 dropbear[3182]: [3182] Aug 04 10:16:11 Password auth succeeded for 'root' from 192.168.0.207:50220
2026-08-04T10:16:41.124902-04:00 BSidesNYC0x06 systemd[1]: Reload requested from client PID 3377 ('systemctl') (unit dropbear.service)...
2026-08-04T10:16:41.124995-04:00 BSidesNYC0x06 systemd[1]: Reloading...
2026-08-04T10:16:41.244125-04:00 BSidesNYC0x06 systemd[1]: Reloading finished in 118 ms.
2026-08-04T10:16:41.315312-04:00 BSidesNYC0x06 systemd[1]: Starting tailscaled.service - Tailscale node agent...
2026-08-04T10:16:41.361414-04:00 BSidesNYC0x06 tailscaled[3403]: TPM: error opening: stat /dev/tpmrm0: no such file or directory
2026-08-04T10:16:41.366708-04:00 BSidesNYC0x06 tailscaled[3403]: Program starting: v1.102.1-t8ebe8f7c3-gda6192991, Go 1.26.5: []string{"/usr/sbin/tailscaled", "--state=/var/lib/tailscale/tailscaled.state", "--socket=/run/tailscale/tailscaled.sock", "--port=41641"}
2026-08-04T10:16:41.366750-04:00 BSidesNYC0x06 tailscaled[3403]: LogID: 41e45436f560ef0cbb51a196d9330c077ad469bc63ae1c384da54ee499d5ec44
2026-08-04T10:16:41.366774-04:00 BSidesNYC0x06 tailscaled[3403]: logpolicy: using $STATE_DIRECTORY, "/var/lib/tailscale"
2026-08-04T10:16:41.366797-04:00 BSidesNYC0x06 tailscaled[3403]: logpolicy.ConfigFromFile /var/lib/tailscale/tailscaled.log.conf: open /var/lib/tailscale/tailscaled.log.conf: no such file or directory
2026-08-04T10:16:41.366816-04:00 BSidesNYC0x06 tailscaled[3403]: logpolicy.Config.Validate for /var/lib/tailscale/tailscaled.log.conf: config is nil
2026-08-04T10:16:41.367683-04:00 BSidesNYC0x06 tailscaled[3403]: dns: [rc=unknown ret=direct]
2026-08-04T10:16:41.367729-04:00 BSidesNYC0x06 tailscaled[3403]: dns: using "direct" mode
2026-08-04T10:16:41.367788-04:00 BSidesNYC0x06 tailscaled[3403]: dns: using *dns.directManager
2026-08-04T10:16:41.367931-04:00 BSidesNYC0x06 tailscaled[3403]: dns: inotify: NewDirWatcher: context canceled
2026-08-04T10:16:41.574278-04:00 BSidesNYC0x06 tailscaled[3403]: router: enumerating tailscale0 addresses for cleanup failed: failed to look up link "tailscale0": Link not found
2026-08-04T10:16:41.574677-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine.NewUserspaceEngine(tun "tailscale0") ...
2026-08-04T10:16:41.574879-04:00 BSidesNYC0x06 systemd[1]: Started tailscaled.service - Tailscale node agent.
2026-08-04T10:16:41.596859-04:00 BSidesNYC0x06 kernel: tun: Universal TUN/TAP device driver, 1.6
2026-08-04T10:16:41.598624-04:00 BSidesNYC0x06 systemd[1]: proc-sys-fs-binfmt_misc.automount: Got automount request for /proc/sys/fs/binfmt_misc, triggered by 3413 (tailscaled)
2026-08-04T10:16:41.599986-04:00 BSidesNYC0x06 systemd[1]: Mounting proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System...
2026-08-04T10:16:41.672621-04:00 BSidesNYC0x06 systemd[1]: Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System.
2026-08-04T10:16:41.673130-04:00 BSidesNYC0x06 tailscaled[3403]: dns: [rc=unknown ret=direct]
2026-08-04T10:16:41.673192-04:00 BSidesNYC0x06 tailscaled[3403]: dns: using "direct" mode
2026-08-04T10:16:41.674454-04:00 BSidesNYC0x06 tailscaled[3403]: dns: using *dns.directManager
2026-08-04T10:16:41.674498-04:00 BSidesNYC0x06 tailscaled[3403]: link state: interfaces.State{defaultRoute=eth0 ifs={eth0:[192.168.0.211/24 fdc4:d841:581b:d7c9:215:5dff:fe00:121a/64 llu6]} v4=true v6=true}
2026-08-04T10:16:43.675641-04:00 BSidesNYC0x06 tailscaled[3403]: router: portUpdate(port=41641, network=udp6)
2026-08-04T10:16:43.675725-04:00 BSidesNYC0x06 tailscaled[3403]: router: using firewall mode pref
2026-08-04T10:16:43.675763-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco key = d:f2fc10d4ed1a6915
2026-08-04T10:16:43.675788-04:00 BSidesNYC0x06 tailscaled[3403]: Creating WireGuard device...
2026-08-04T10:16:43.675809-04:00 BSidesNYC0x06 tailscaled[3403]: Bringing WireGuard device up...
2026-08-04T10:16:43.675846-04:00 BSidesNYC0x06 tailscaled[3403]: Bringing router up...
2026-08-04T10:16:43.675871-04:00 BSidesNYC0x06 tailscaled[3403]: external route: up
2026-08-04T10:16:43.678596-04:00 BSidesNYC0x06 tailscaled[3403]: router: default choosing iptables
2026-08-04T10:16:43.683540-04:00 BSidesNYC0x06 tailscaled[3403]: router: netfilter running in iptables mode v6 = true, v6filter = true, v6nat = true
2026-08-04T10:16:43.683578-04:00 BSidesNYC0x06 tailscaled[3403]: router: portUpdate(port=41641, network=udp4)
2026-08-04T10:16:43.684280-04:00 BSidesNYC0x06 tailscaled[3403]: Clearing router settings...
2026-08-04T10:16:43.684444-04:00 BSidesNYC0x06 tailscaled[3403]: Starting network monitor...
2026-08-04T10:16:43.684506-04:00 BSidesNYC0x06 tailscaled[3403]: Engine created.
2026-08-04T10:16:43.685425-04:00 BSidesNYC0x06 tailscaled[3403]: monitor: gateway and self IP changed: gw=192.168.0.1 self=192.168.0.211
2026-08-04T10:16:43.690810-04:00 BSidesNYC0x06 tailscaled[3403]: pm: migrating "_daemon" profile to new format
2026-08-04T10:16:43.690843-04:00 BSidesNYC0x06 tailscaled[3403]: envknob: PORT="41641"
2026-08-04T10:16:43.690966-04:00 BSidesNYC0x06 tailscaled[3403]: logpolicy: using $STATE_DIRECTORY, "/var/lib/tailscale"
2026-08-04T10:16:43.690995-04:00 BSidesNYC0x06 tailscaled[3403]: linkChange: in state NoState; PAC or proxyConfig changed; updating routes
2026-08-04T10:16:43.691130-04:00 BSidesNYC0x06 tailscaled[3403]: got LocalBackend in 2.116s
2026-08-04T10:16:43.691156-04:00 BSidesNYC0x06 tailscaled[3403]: Start
2026-08-04T10:16:43.691180-04:00 BSidesNYC0x06 tailscaled[3403]: ipnext: "conn25": skipping extension
2026-08-04T10:16:43.691203-04:00 BSidesNYC0x06 tailscaled[3403]: ipnext: active extensions: captiveportal, acme, portlist, posture, clientupdate, relayserver, routecheck, serviceclientprefs, taildrop
2026-08-04T10:16:43.691799-04:00 BSidesNYC0x06 tailscaled[3403]: profile data directory: profile not found
2026-08-04T10:16:43.691926-04:00 BSidesNYC0x06 tailscaled[3403]: Backend: logs: be:41e45436f560ef0cbb51a196d9330c077ad469bc63ae1c384da54ee499d5ec44 fe:
2026-08-04T10:16:43.691981-04:00 BSidesNYC0x06 tailscaled[3403]: Switching ipn state NoState -> NeedsLogin (WantRunning=false, nm=false)
2026-08-04T10:16:43.692012-04:00 BSidesNYC0x06 tailscaled[3403]: blockEngineUpdates(true)
2026-08-04T10:16:43.692031-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: configuring router
2026-08-04T10:16:43.692148-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=wantrunning-false): error: Tailscale is stopped.
2026-08-04T10:16:43.692322-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: user dialer
2026-08-04T10:16:43.692348-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: configuring DNS
2026-08-04T10:16:43.692372-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Set: {DefaultResolvers:[] Routes:{} SearchDomains:[] Hosts:0}
2026-08-04T10:16:43.692390-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Resolvercfg: {Routes:{} Hosts:0 LocalDomains:[]}
2026-08-04T10:16:43.692412-04:00 BSidesNYC0x06 tailscaled[3403]: dns: OScfg: {}
2026-08-04T10:16:48.003105-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [POST] /localapi/v0/check-prefs
2026-08-04T10:16:48.003266-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [POST] /localapi/v0/start
2026-08-04T10:16:48.003324-04:00 BSidesNYC0x06 tailscaled[3403]: control: client.Shutdown ...
2026-08-04T10:16:48.003351-04:00 BSidesNYC0x06 tailscaled[3403]: control: updateRoutine: exiting
2026-08-04T10:16:48.003396-04:00 BSidesNYC0x06 tailscaled[3403]: control: mapRoutine: exiting
2026-08-04T10:16:48.003417-04:00 BSidesNYC0x06 tailscaled[3403]: control: authRoutine: exiting
2026-08-04T10:16:48.003441-04:00 BSidesNYC0x06 tailscaled[3403]: control: Client.Shutdown done.
2026-08-04T10:16:48.003459-04:00 BSidesNYC0x06 tailscaled[3403]: Start
2026-08-04T10:16:48.003730-04:00 BSidesNYC0x06 tailscaled[3403]: Start: updated prefs: Prefs{ra=false dns=true want=true routes=[] statefulFiltering=false nf=on update=check Persist=nil}, reason: [opts.UpdatePrefs]
2026-08-04T10:16:48.003767-04:00 BSidesNYC0x06 tailscaled[3403]: generating new machine key
2026-08-04T10:16:48.009443-04:00 BSidesNYC0x06 tailscaled[3403]: machine key written to store
2026-08-04T10:16:48.009480-04:00 BSidesNYC0x06 tailscaled[3403]: profile data directory: profile not found
2026-08-04T10:16:48.009521-04:00 BSidesNYC0x06 tailscaled[3403]: Backend: logs: be:41e45436f560ef0cbb51a196d9330c077ad469bc63ae1c384da54ee499d5ec44 fe:
2026-08-04T10:16:48.009566-04:00 BSidesNYC0x06 tailscaled[3403]: Switching ipn state NoState -> NeedsLogin (WantRunning=true, nm=false)
2026-08-04T10:16:48.009592-04:00 BSidesNYC0x06 tailscaled[3403]: blockEngineUpdates(true)
2026-08-04T10:16:48.009615-04:00 BSidesNYC0x06 tailscaled[3403]: Reconfig(down): no changes made to Engine config
2026-08-04T10:16:48.009697-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=warming-up): error: Tailscale is starting. Please wait.
2026-08-04T10:16:48.009765-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=wantrunning-false): ok
2026-08-04T10:16:48.009858-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [POST] /localapi/v0/login-interactive
2026-08-04T10:16:48.009885-04:00 BSidesNYC0x06 tailscaled[3403]: StartLoginInteractiveAs("root"): url=false
2026-08-04T10:16:48.009903-04:00 BSidesNYC0x06 tailscaled[3403]: control: client.Login(2)
2026-08-04T10:16:48.009996-04:00 BSidesNYC0x06 tailscaled[3403]: control: LoginInteractive -> regen=true
2026-08-04T10:16:48.010027-04:00 BSidesNYC0x06 tailscaled[3403]: control: doLogin(regen=true, hasUrl=false)
2026-08-04T10:16:48.339951-04:00 BSidesNYC0x06 tailscaled[3403]: control: control server key from https://controlplane.tailscale.com: ts2021=[fSeS+], legacy=[nlFWp]
2026-08-04T10:16:48.340024-04:00 BSidesNYC0x06 tailscaled[3403]: control: Generating a new nodekey.
2026-08-04T10:16:48.341664-04:00 BSidesNYC0x06 tailscaled[3403]: control: RegisterReq: onode= node=[DvwJh] fup=false nks=false
2026-08-04T10:16:52.319501-04:00 BSidesNYC0x06 tailscaled[3403]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=false; authURL=true
2026-08-04T10:16:52.319570-04:00 BSidesNYC0x06 tailscaled[3403]: control: AuthURL is https://login.tailscale.com/a/45232a5013ebc
2026-08-04T10:16:52.319592-04:00 BSidesNYC0x06 tailscaled[3403]: control: doLogin(regen=false, hasUrl=true)
2026-08-04T10:16:52.319611-04:00 BSidesNYC0x06 tailscaled[3403]: control: RegisterReq: onode= node=[DvwJh] fup=true nks=false
2026-08-04T10:16:52.319629-04:00 BSidesNYC0x06 tailscaled[3403]: Received auth URL: https://login.tailsc...
2026-08-04T10:16:52.319655-04:00 BSidesNYC0x06 tailscaled[3403]: popBrowserAuthNow("root"): url=true, key-expired=false
2026-08-04T10:16:53.010250-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=warming-up): ok
2026-08-04T10:17:01.955756-04:00 BSidesNYC0x06 CRON[3484]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
2026-08-04T10:17:24.447107-04:00 BSidesNYC0x06 tailscaled[3403]: Received error: register request: http 410: auth path not found
2026-08-04T10:17:24.447184-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=login-state): error: You are logged out. The last login error was: register request: http 410: auth path not found
2026-08-04T10:17:24.453184-04:00 BSidesNYC0x06 tailscaled[3403]: control: doLogin(regen=false, hasUrl=true)
2026-08-04T10:17:24.453249-04:00 BSidesNYC0x06 tailscaled[3403]: control: RegisterReq: onode= node=[DvwJh] fup=true nks=false
2026-08-04T10:17:24.556039-04:00 BSidesNYC0x06 tailscaled[3403]: control: RegisterReq: got response; nodeKeyExpired=false, machineAuthorized=true; authURL=false
2026-08-04T10:17:24.556115-04:00 BSidesNYC0x06 tailscaled[3403]: blockEngineUpdates(false)
2026-08-04T10:17:24.556247-04:00 BSidesNYC0x06 tailscaled[3403]: health(warnable=login-state): ok
2026-08-04T10:17:24.662180-04:00 BSidesNYC0x06 tailscaled[3403]: control: netmap: got new dial plan from control
2026-08-04T10:17:24.662383-04:00 BSidesNYC0x06 tailscaled[3403]: using tailnet default auto-update setting: true
2026-08-04T10:17:24.662431-04:00 BSidesNYC0x06 tailscaled[3403]: EditPrefs: MaskedPrefs{AutoUpdate={Apply=true}}
2026-08-04T10:17:24.662490-04:00 BSidesNYC0x06 tailscaled[3403]: offline auto-update: starting update checks
2026-08-04T10:17:24.682205-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: new contact: control-netmap usec=41007202 cached=false
2026-08-04T10:17:24.682266-04:00 BSidesNYC0x06 tailscaled[3403]: active login: tailattack@outlook.com
2026-08-04T10:17:24.688372-04:00 BSidesNYC0x06 tailscaled[3403]: netmap: suggested exit node: no preferred DERP, try again later
2026-08-04T10:17:24.688421-04:00 BSidesNYC0x06 tailscaled[3403]: offline auto-update: stopping update checks
2026-08-04T10:17:24.688451-04:00 BSidesNYC0x06 tailscaled[3403]: Switching ipn state NeedsLogin -> Starting (WantRunning=true, nm=true)
2026-08-04T10:17:24.688956-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: SetPrivateKey called (init)
2026-08-04T10:17:24.689044-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: configuring router
2026-08-04T10:17:24.771508-04:00 BSidesNYC0x06 tailscaled[3403]: portmapper: UPnP meta changed: [{Location:http://192.168.0.1:46031/rootDesc.xml Server:AsusWRT/386 UPnP/1.1 MiniUPnPd/2.2.0 USN:uuid:3ddcd1d3-2380-45f5-b069-244bfe60eef0::urn:schemas-upnp-org:device:InternetGatewayDevice:1}]
2026-08-04T10:17:24.802289-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: home DERP changing from derp-0 [0ms] to derp-27 [27ms] (forced=false)
2026-08-04T10:17:24.802343-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: home is now derp-27 (iad)
2026-08-04T10:17:24.802374-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: adding connection to derp-27 for home-keep-alive
2026-08-04T10:17:24.802405-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: 1 active derp conns: derp-27=cr0s,wr0s
2026-08-04T10:17:24.802443-04:00 BSidesNYC0x06 tailscaled[3403]: derphttp.Client.Connect: connecting to derp-27 (iad)
2026-08-04T10:17:24.802559-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: endpoints changed: 185.199.108.153:41642 (portmap), 185.199.108.153:41641 (stun), 192.168.0.211:41641 (local)
2026-08-04T10:17:24.859774-04:00 BSidesNYC0x06 tailscaled[3403]: router: enabling connmark-based rp_filter workaround
2026-08-04T10:17:24.887418-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: user dialer
2026-08-04T10:17:24.887477-04:00 BSidesNYC0x06 tailscaled[3403]: tsdial: bart table size: 6
2026-08-04T10:17:24.887501-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: derp-27 connected; connGen=1
2026-08-04T10:17:24.887520-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: Reconfig: configuring DNS
2026-08-04T10:17:24.887536-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Set: {DefaultResolvers:[] Routes:{tail38266f.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail38266f.ts.net.] Hosts:0}
2026-08-04T10:17:24.887561-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Resolvercfg: {Routes:{.:[192.168.0.150 192.168.0.1] ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:0 LocalDomains:[tail38266f.ts.net.]+65arpa}
2026-08-04T10:17:24.887584-04:00 BSidesNYC0x06 tailscaled[3403]: dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail38266f.ts.net.] }
2026-08-04T10:17:24.894841-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: serving on http://100.126.64.59:47721
2026-08-04T10:17:24.894895-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: serving on http://[fd7a:115c:a1e0::ee3a:403c]:35542
2026-08-04T10:17:24.895128-04:00 BSidesNYC0x06 tailscaled[3403]: updating netmap in disk cache
2026-08-04T10:17:24.895729-04:00 BSidesNYC0x06 tailscaled[3403]: control: NetInfo: NetInfo{varies=false ipv6=false ipv6os=true udp=true icmpv4=false derp=#27 portmap=active-UMC link="" firewallmode="ipt-default"}
2026-08-04T10:17:24.895827-04:00 BSidesNYC0x06 tailscaled[3403]: Switching ipn state Starting -> Running (WantRunning=true, nm=true)
2026-08-04T10:17:25.147215-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: home DERP changing from derp-27 [26ms] to derp-1 [16ms] (forced=false)
2026-08-04T10:17:25.147281-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: home is now derp-1 (nyc)
2026-08-04T10:17:25.147350-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: adding connection to derp-1 for home-keep-alive
2026-08-04T10:17:25.147383-04:00 BSidesNYC0x06 tailscaled[3403]: updating netmap in disk cache
2026-08-04T10:17:25.147412-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: 2 active derp conns: derp-1=cr0s,wr0s derp-27=cr345ms,wr345ms
2026-08-04T10:17:25.147448-04:00 BSidesNYC0x06 tailscaled[3403]: derphttp.Client.Recv: connecting to derp-1 (nyc)
2026-08-04T10:17:25.147819-04:00 BSidesNYC0x06 tailscaled[3403]: control: NetInfo: NetInfo{varies=false ipv6=false ipv6os=true udp=true icmpv4=false derp=#1 portmap=active-UMC link="" firewallmode="ipt-default"}
2026-08-04T10:17:25.198755-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: derp-1 connected; connGen=1
2026-08-04T10:17:31.638284-04:00 BSidesNYC0x06 dropbear[3182]: [3182] Aug 04 10:17:31 syslogin_perform_logout: logout(pts/0) returned an error: No such file or directory
2026-08-04T10:17:31.638349-04:00 BSidesNYC0x06 dropbear[3182]: [3182] Aug 04 10:17:31 Exit (root) from <192.168.0.207:50220>: Disconnect received
2026-08-04T10:17:44.875548-04:00 BSidesNYC0x06 tailscaled[3403]: LinkChange: major, rebinding: old: interfaces.State{defaultRoute=eth0 ifs={eth0:[192.168.0.211/24 fdc4:d841:581b:d7c9:215:5dff:fe00:121a/64 llu6]} v4=true v6=true} new: interfaces.State{defaultRoute=eth0 ifs={eth0:[192.168.0.211/24 fdc4:d841:581b:d7c9:215:5dff:fe00:121a/64 llu6] tailscale0:[100.126.64.59/32 fd7a:115c:a1e0::ee3a:403c/128 llu6]} v4=true v6=true} diff: ips tailscale0: [fe80::ce04:ef91:1033:6626/64]->[100.126.64.59/32 fd7a:115c:a1e0::ee3a:403c/128 fe80::ce04:ef91:1033:6626/64] rebind-reason=[ips-changed]
2026-08-04T10:17:44.876850-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Set: {DefaultResolvers:[] Routes:{tail38266f.ts.net.:[] ts.net.:[199.247.155.53 2620:111:8007::53]}+65arpa SearchDomains:[tail38266f.ts.net.] Hosts:0}
2026-08-04T10:17:44.876892-04:00 BSidesNYC0x06 tailscaled[3403]: dns: Resolvercfg: {Routes:{.:[192.168.0.150 192.168.0.1] ts.net.:[199.247.155.53 2620:111:8007::53]} Hosts:0 LocalDomains:[tail38266f.ts.net.]+65arpa}
2026-08-04T10:17:44.876915-04:00 BSidesNYC0x06 tailscaled[3403]: dns: OScfg: {Nameservers:[100.100.100.100 fd7a:115c:a1e0::53] SearchDomains:[tail38266f.ts.net.] }
2026-08-04T10:17:44.883247-04:00 BSidesNYC0x06 tailscaled[3403]: wgengine: set DNS config again after major link change
2026-08-04T10:17:44.883485-04:00 BSidesNYC0x06 tailscaled[3403]: router: portUpdate(port=41641, network=udp6)
2026-08-04T10:17:44.883602-04:00 BSidesNYC0x06 tailscaled[3403]: router: portUpdate(port=41641, network=udp4)
2026-08-04T10:17:44.883635-04:00 BSidesNYC0x06 tailscaled[3403]: Rebind; defIf="eth0", ips=[192.168.0.211/24 fdc4:d841:581b:d7c9:215:5dff:fe00:121a/64 fe80::215:5dff:fe00:121a/64]
2026-08-04T10:17:44.883659-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: 2 active derp conns: derp-1=cr20s,wr20s derp-27=cr20s,wr20s
2026-08-04T10:17:44.899364-04:00 BSidesNYC0x06 tailscaled[3403]: post-rebind ping of DERP region 1 okay
2026-08-04T10:17:44.907466-04:00 BSidesNYC0x06 tailscaled[3403]: post-rebind ping of DERP region 27 okay
2026-08-04T10:18:02.399600-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [sR1zf] d:8d2e7761c23dd2f7 now using 192.168.0.205:41641 mtu=1360 tx=8c8e226403af
2026-08-04T10:18:02.399677-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: new contact: peer=[sR1zf] usec=78724340 cached=false via=direct
2026-08-04T10:18:02.415269-04:00 BSidesNYC0x06 dropbear[3557]: [3557] Aug 04 10:18:02 Child connection from 100.94.78.57:64664
2026-08-04T10:18:06.947216-04:00 BSidesNYC0x06 dropbear[3557]: [3557] Aug 04 10:18:06 Password auth succeeded for 'root' from 100.94.78.57:64664
2026-08-04T10:18:24.805889-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: closing connection to derp-27 (idle), age 1m0s
2026-08-04T10:18:24.805980-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: 1 active derp conns: derp-1=cr1m0s,wr22s
2026-08-04T10:18:29.200785-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: got put of <=1KB in 0s from 100.94.78.57/0xff60e0
2026-08-04T10:18:37.856414-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [DELETE] /localapi/v0/files/
2026-08-04T10:18:42.760563-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [PUT] /localapi/v0/file-put/
2026-08-04T10:18:42.770935-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [PUT] /localapi/v0/file-put/
2026-08-04T10:18:50.752958-04:00 BSidesNYC0x06 adduser[3607]: Adding user `r00t' ...
2026-08-04T10:18:50.754703-04:00 BSidesNYC0x06 adduser[3607]: Selecting UID/GID from range 1000 to 59999 ...
2026-08-04T10:18:50.757302-04:00 BSidesNYC0x06 adduser[3607]: Adding new group `r00t' (1001) ...
2026-08-04T10:18:50.793152-04:00 BSidesNYC0x06 adduser[3607]: Adding new user `r00t' (1001) with group `r00t (1001)' ...
2026-08-04T10:18:50.872115-04:00 BSidesNYC0x06 adduser[3607]: Creating home directory `/home/r00t' ...
2026-08-04T10:18:50.874151-04:00 BSidesNYC0x06 adduser[3607]: Copying files from `/etc/skel' ...
2026-08-04T10:19:01.591035-04:00 BSidesNYC0x06 adduser[3607]: Adding new user `r00t' to supplemental / extra groups `users' ...
2026-08-04T10:19:01.593020-04:00 BSidesNYC0x06 adduser[3607]: Adding user `r00t' to group `users' ...
2026-08-04T10:19:39.768453-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: got put of <=1MB in 0s from 100.94.78.57/0xff60e0
2026-08-04T10:19:49.078552-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [DELETE] /localapi/v0/files/
2026-08-04T10:20:19.781889-04:00 BSidesNYC0x06 tailscaled[3403]: localapi: [PUT] /localapi/v0/drive/shares
2026-08-04T10:20:19.802083-04:00 BSidesNYC0x06 tailscaled[3403]: starting taildrive file server with sudo as user "root"
2026-08-04T10:21:24.045764-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [d6VDo] d:d7d03c1a30a6d4ad now using 192.168.0.216:41641 mtu=1360 tx=5c0e8d79e4cf
2026-08-04T10:21:24.045863-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: new contact: peer=[d6VDo] usec=280370473 cached=false via=direct
2026-08-04T10:21:56.113713-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: taildrive: share: GET from [d6VDo] to [DvwJh]: status-code=200 ext=".naknak" content-type="text/plain; charset=utf-8" tx=1800 rx=0
2026-08-04T10:24:56.022011-04:00 BSidesNYC0x06 tailscaled[3403]: control: NetInfo: NetInfo{varies=true ipv6=false ipv6os=true udp=true icmpv4=false derp=#1 portmap=active-UMC link="" firewallmode="ipt-default"}
2026-08-04T10:28:14.147890-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [d6VDo] d:d7d03c1a30a6d4ad now using 185.199.108.153:41644 mtu=1360 tx=65bd24350c81
2026-08-04T10:28:14.147975-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [d6VDo] d:d7d03c1a30a6d4ad now using 192.168.0.1:41641 mtu=1360 tx=8c57a0e189e8
2026-08-04T10:28:14.247775-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: endpoints changed: 185.199.108.153:41642 (portmap), 185.199.108.153:41641 (stun), 185.199.108.153:1876 (stun), 192.168.0.211:41641 (local)
2026-08-04T10:28:14.425350-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [d6VDo] d:d7d03c1a30a6d4ad now using 185.199.108.153:41644 mtu=1360 tx=cc2c9f5d82fb
2026-08-04T10:28:14.425407-04:00 BSidesNYC0x06 tailscaled[3403]: magicsock: disco: node [d6VDo] d:d7d03c1a30a6d4ad now using 192.168.0.216:41641 mtu=1360 tx=35a257796b9b
2026-08-04T10:28:14.482291-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: taildrive: share: PUT from [d6VDo] to [DvwJh]: status-code=201 ext=".svg" content-type="text/plain; charset=utf-8" tx=10 rx=0
2026-08-04T10:28:14.735186-04:00 BSidesNYC0x06 tailscaled[3403]: peerapi: taildrive: share: PUT from [d6VDo] to [DvwJh]: status-code=201 ext=".svg" content-type="text/plain; charset=utf-8" tx=10 rx=3300000
2026-08-04T10:28:39.500906-04:00 BSidesNYC0x06 kernel: hv_utils: VSS: failed to communicate to the daemon: -22
2026-08-04T10:28:40.304743-04:00 BSidesNYC0x06 kernel: hv_utils: TimeSync IC version 4.0
2026-08-04T10:36:02.422532-04:00 BSidesNYC0x06 systemd[1]: getty@tty1.service: Deactivated successfully.
2026-08-04T10:36:02.426672-04:00 BSidesNYC0x06 systemd[1]: getty@tty1.service: Scheduled restart job, restart counter is at 1.
2026-08-04T10:36:02.428188-04:00 BSidesNYC0x06 systemd[1]: Started getty@tty1.service - Getty on tty1.
