{"id":"0b37a85b-3a57-4c86-9c0e-618195407d38","name":"sandy-bitter-oryx","protocol":"ssh","channel_kind":null,"src_ip":"133.18.181.51","src_port":52268,"username":"deploy","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-24T12:14:25.371577+00:00","ended_at":"2026-08-24T12:14:26.372263+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"deploy","password":"xjURV1s-E!2@@wy","method":"password","accepted":false,"tier":"other"}]}
{"id":"f566b99b-a9dd-492d-8815-dca26d3d3dc1","name":"dapper-umber-dotterel","protocol":"ssh","channel_kind":"exec","src_ip":"133.18.181.51","src_port":40338,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":578,"probe_flagged":0,"exec_command":"nproc","started_at":"2026-08-20T21:40:13.409589+00:00","ended_at":"2026-08-20T21:40:13.854251+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":547,"events":[{"seq":1,"at":"2026-08-20T21:40:02.655557+00:00","kind":"input","latency_ms":null,"data":"nproc"},{"seq":2,"at":"2026-08-20T21:40:02.669366+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":3,"at":"2026-08-20T21:40:03.247952+00:00","kind":"input","latency_ms":null,"data":"cut -d' ' -f1 /proc/uptime"},{"seq":4,"at":"2026-08-20T21:40:06.783435+00:00","kind":"output","latency_ms":3529,"data":"1200.00"},{"seq":5,"at":"2026-08-20T21:40:07.640599+00:00","kind":"input","latency_ms":null,"data":"ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10"},{"seq":6,"at":"2026-08-20T21:40:08.889029+00:00","kind":"output","latency_ms":1247,"data":"    PID %CPU COMMAND\n  14231  3.7 node\n   1134  1.2 postgres\n    998  0.6 nginx\n   4278  0.2 sshd\n   9011  0.1 cron\n      1  0.0 systemd\n  31876  0.0 ps\n  31877  0.0 head"},{"seq":7,"at":"2026-08-20T21:40:09.460100+00:00","kind":"input","latency_ms":null,"data":"ps aux | grep netai | grep -v grep | wc -l"},{"seq":8,"at":"2026-08-20T21:40:10.067407+00:00","kind":"output","latency_ms":606,"data":"0"},{"seq":9,"at":"2026-08-20T21:40:10.639668+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":10,"at":"2026-08-20T21:40:12.482831+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":11,"at":"2026-08-20T21:40:13.412378+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"}],"credentials":[{"username":"ftp","password":"ftp","method":"password","accepted":true,"tier":"common"}]}
{"id":"dc8503ae-c8c9-4250-83c1-cc0f51001073","name":"coastal-golden-boar","protocol":"ssh","channel_kind":null,"src_ip":"133.18.181.51","src_port":40326,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T21:39:58.313000+00:00","ended_at":"2026-08-20T21:40:00.181099+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp","password":"A+!cE3bl$G83qYP","method":"password","accepted":false,"tier":"other"}]}