{"id":"3aec6b7b-7668-456b-ae57-8d6500e4a571","name":"crystal-plucky-cicada","protocol":"ssh","channel_kind":"exec","src_ip":"119.203.231.121","src_port":45092,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":553,"probe_flagged":0,"exec_command":"nproc","started_at":"2026-08-24T15:02:38.764350+00:00","ended_at":"2026-08-24T15:02:39.368170+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":537,"events":[{"seq":1,"at":"2026-08-24T15:02:30.085390+00:00","kind":"input","latency_ms":null,"data":"nproc"},{"seq":2,"at":"2026-08-24T15:02:30.085793+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":3,"at":"2026-08-24T15:02:30.637194+00:00","kind":"input","latency_ms":null,"data":"cut -d' ' -f1 /proc/uptime"},{"seq":4,"at":"2026-08-24T15:02:32.868128+00:00","kind":"output","latency_ms":2231,"data":"4\n"},{"seq":5,"at":"2026-08-24T15:02:33.694079+00:00","kind":"input","latency_ms":null,"data":"ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10"},{"seq":6,"at":"2026-08-24T15:02:34.674682+00:00","kind":"output","latency_ms":979,"data":"  PID %CPU COMMAND\n 3121 12.4 node\n 1844  2.1 nginx\n 2987  0.8 postgres\n  901  0.2 systemd\n 1456  0.1 sshd\n 2773  0.0 cron\n 2810  0.0 systemd-resolve\n 2864  0.0 bash"},{"seq":7,"at":"2026-08-24T15:02:35.226111+00:00","kind":"input","latency_ms":null,"data":"ps aux | grep netai | grep -v grep | wc -l"},{"seq":8,"at":"2026-08-24T15:02:35.990078+00:00","kind":"output","latency_ms":763,"data":"0"},{"seq":9,"at":"2026-08-24T15:02:36.542869+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":10,"at":"2026-08-24T15:02:37.914068+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":11,"at":"2026-08-24T15:02:38.764889+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"}],"credentials":[{"username":"ftp","password":"ftp","method":"password","accepted":true,"tier":"common"}]}
{"id":"5bb4c0f5-9ca5-499c-af6e-8134f754763d","name":"shaded-gallant-cicada","protocol":"ssh","channel_kind":null,"src_ip":"119.203.231.121","src_port":44996,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T15:02:26.465820+00:00","ended_at":"2026-08-24T15:02:27.817870+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp","password":"A+!cE3bl$G83qYP","method":"password","accepted":false,"tier":"other"}]}
{"id":"42aec940-e2c3-4f7f-b62e-31f4c6f7f413","name":"tidal-buoyant-badger","protocol":"ssh","channel_kind":null,"src_ip":"119.203.231.121","src_port":49070,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T11:06:05.267899+00:00","ended_at":"2026-08-20T11:06:06.739203+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp","password":"A+!cE3bl$G83qYP","method":"password","accepted":false,"tier":"other"}]}