{"id":"6f21839c-0816-4ffd-9ff4-e71ebbf9de78","name":"hidden-lunar-merlin","protocol":"ssh","channel_kind":"exec","src_ip":"120.33.126.224","src_port":46270,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"chmod +x ./.704318055288302351/sshd;nohup ./.704318055288302351/sshd  &","started_at":"2026-08-24T03:43:21.725414+00:00","ended_at":"2026-08-24T03:43:31.924235+00:00","ended_reason":"exec complete","commands":2,"transcript_bytes":132,"events":[{"seq":1,"at":"2026-08-24T03:43:21.722195+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/.704318055288302351/sshd (30304472 bytes)"},{"seq":2,"at":"2026-08-24T03:43:21.727713+00:00","kind":"input","latency_ms":null,"data":"chmod +x ./.704318055288302351/sshd;nohup ./.704318055288302351/sshd  &"},{"seq":3,"at":"2026-08-24T03:43:23.226084+00:00","kind":"output","latency_ms":1520,"data":""}],"credentials":[{"username":"root","password":"centos","method":"password","accepted":true,"tier":"other"}]}
{"id":"42e8dbbb-0196-4c68-8651-cce26de0a3c0","name":"crimson-lively-crane","protocol":"ssh","channel_kind":null,"src_ip":"120.33.126.224","src_port":34224,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T03:39:13.397507+00:00","ended_at":"2026-08-24T03:39:14.565210+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"debian","method":"password","accepted":false,"tier":"other"}]}
{"id":"2089f351-46cd-49ae-ab41-23104d9c168b","name":"patient-oaken-manatee","protocol":"ssh","channel_kind":null,"src_ip":"120.33.126.224","src_port":34220,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T03:39:11.140614+00:00","ended_at":"2026-08-24T03:39:12.447444+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"ubuntu","method":"password","accepted":false,"tier":"other"}]}