{"id":"bcc62690-6b13-4e09-9252-beb72e7c31f1","name":"early-foggy-cicada","protocol":"ssh","channel_kind":"exec","src_ip":"106.58.173.254","src_port":47404,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-25T20:09:26.888493+00:00","ended_at":"2026-08-25T20:13:27.452111+00:00","ended_reason":"connection lost","commands":1,"transcript_bytes":37,"events":[{"seq":1,"at":"2026-08-25T20:09:26.889135+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"}],"credentials":[{"username":"root","password":"Qq!123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"400e355e-3d22-4db5-acab-ca26b88fa0bd","name":"earnest-honest-meerkat","protocol":"ssh","channel_kind":"exec","src_ip":"106.58.173.254","src_port":60768,"username":"admin","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-25T20:00:20.941435+00:00","ended_at":"2026-08-25T20:04:21.473678+00:00","ended_reason":"connection lost","commands":1,"transcript_bytes":37,"events":[{"seq":1,"at":"2026-08-25T20:00:20.942579+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"}],"credentials":[{"username":"admin","password":"Admin2025","method":"password","accepted":true,"tier":"other"}]}
{"id":"d5fd9458-0f04-4003-b3fe-ac77c6474719","name":"watchful-lawful-ouzel","protocol":"ssh","channel_kind":null,"src_ip":"106.58.173.254","src_port":45894,"username":null,"client_version":"","auth_attempts":0,"automation":"unknown","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T19:51:22.041984+00:00","ended_at":"2026-08-25T19:51:22.526321+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[]}
{"id":"564965ea-d6f9-484a-b828-c7a63e9277d6","name":"gloomy-cobalt-cardinal","protocol":"ssh","channel_kind":null,"src_ip":"106.58.173.254","src_port":60912,"username":null,"client_version":"","auth_attempts":0,"automation":"unknown","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T19:33:58.441185+00:00","ended_at":"2026-08-25T19:34:58.455701+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[]}
{"id":"7b5df76a-d4dd-41d2-abaa-eea5328df9ab","name":"serene-marbled-snipe","protocol":"ssh","channel_kind":"exec","src_ip":"106.58.173.254","src_port":37676,"username":"max","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-25T19:10:12.097854+00:00","ended_at":"2026-08-25T19:14:12.106231+00:00","ended_reason":"exec complete","commands":1,"transcript_bytes":68,"events":[{"seq":1,"at":"2026-08-25T19:10:12.098549+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-25T19:10:13.192054+00:00","kind":"output","latency_ms":1091,"data":"-bash: lockr: command not found"}],"credentials":[{"username":"max","password":"maxpass","method":"password","accepted":true,"tier":"other"}]}
{"id":"b5326096-2b77-48e8-bdd6-0d7bfe11427d","name":"languid-glassy-springbok","protocol":"ssh","channel_kind":null,"src_ip":"106.58.173.254","src_port":60938,"username":"root","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T19:07:04.641698+00:00","ended_at":"2026-08-25T19:08:03.382250+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"mister","method":"password","accepted":false,"tier":"other"}]}
{"id":"76d5fc93-e2d1-4b39-9b48-0f9d714b553a","name":"hidden-prickly-llama","protocol":"ssh","channel_kind":null,"src_ip":"106.58.173.254","src_port":59406,"username":null,"client_version":"","auth_attempts":0,"automation":"unknown","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T18:46:51.354615+00:00","ended_at":"2026-08-25T18:47:51.362555+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[]}