{"id":"3aec6b7b-7668-456b-ae57-8d6500e4a571","name":"crystal-plucky-cicada","protocol":"ssh","channel_kind":"exec","src_ip":"119.203.231.121","src_port":45092,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":553,"probe_flagged":0,"exec_command":"nproc","started_at":"2026-08-24T15:02:38.764350+00:00","ended_at":"2026-08-24T15:02:39.368170+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":537,"events":[{"seq":1,"at":"2026-08-24T15:02:30.085390+00:00","kind":"input","latency_ms":null,"data":"nproc"},{"seq":2,"at":"2026-08-24T15:02:30.085793+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":3,"at":"2026-08-24T15:02:30.637194+00:00","kind":"input","latency_ms":null,"data":"cut -d' ' -f1 /proc/uptime"},{"seq":4,"at":"2026-08-24T15:02:32.868128+00:00","kind":"output","latency_ms":2231,"data":"4\n"},{"seq":5,"at":"2026-08-24T15:02:33.694079+00:00","kind":"input","latency_ms":null,"data":"ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10"},{"seq":6,"at":"2026-08-24T15:02:34.674682+00:00","kind":"output","latency_ms":979,"data":"  PID %CPU COMMAND\n 3121 12.4 node\n 1844  2.1 nginx\n 2987  0.8 postgres\n  901  0.2 systemd\n 1456  0.1 sshd\n 2773  0.0 cron\n 2810  0.0 systemd-resolve\n 2864  0.0 bash"},{"seq":7,"at":"2026-08-24T15:02:35.226111+00:00","kind":"input","latency_ms":null,"data":"ps aux | grep netai | grep -v grep | wc -l"},{"seq":8,"at":"2026-08-24T15:02:35.990078+00:00","kind":"output","latency_ms":763,"data":"0"},{"seq":9,"at":"2026-08-24T15:02:36.542869+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":10,"at":"2026-08-24T15:02:37.914068+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":11,"at":"2026-08-24T15:02:38.764889+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"}],"credentials":[{"username":"ftp","password":"ftp","method":"password","accepted":true,"tier":"common"}]}