{"id":"e564f4be-5bda-4d09-9f17-48c5b2692673","name":"sincere-snowy-raven","protocol":"ssh","channel_kind":"exec","src_ip":"64.227.168.220","src_port":50962,"username":"ftp","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":574,"probe_flagged":0,"exec_command":"nproc","started_at":"2026-08-26T11:32:59.420354+00:00","ended_at":"2026-08-26T11:32:59.985009+00:00","ended_reason":"exec complete","commands":7,"transcript_bytes":369,"events":[{"seq":1,"at":"2026-08-26T11:32:53.250393+00:00","kind":"input","latency_ms":null,"data":"nproc"},{"seq":2,"at":"2026-08-26T11:32:53.252083+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":3,"at":"2026-08-26T11:32:53.751244+00:00","kind":"input","latency_ms":null,"data":"cut -d' ' -f1 /proc/uptime"},{"seq":4,"at":"2026-08-26T11:32:54.446821+00:00","kind":"output","latency_ms":null,"data":""},{"seq":5,"at":"2026-08-26T11:32:55.189225+00:00","kind":"input","latency_ms":null,"data":"ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10"},{"seq":6,"at":"2026-08-26T11:32:55.752712+00:00","kind":"output","latency_ms":null,"data":""},{"seq":7,"at":"2026-08-26T11:32:56.327221+00:00","kind":"input","latency_ms":null,"data":"ps aux | grep netai | grep -v grep | wc -l"},{"seq":8,"at":"2026-08-26T11:32:56.829854+00:00","kind":"output","latency_ms":null,"data":""},{"seq":9,"at":"2026-08-26T11:32:57.330772+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":10,"at":"2026-08-26T11:32:58.909335+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"},{"seq":11,"at":"2026-08-26T11:32:59.422463+00:00","kind":"input","latency_ms":null,"data":"cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd / && cat > netai"}],"credentials":[{"username":"ftp","password":"A+!cE3bl$G83qYP","method":"password","accepted":true,"tier":"other"}]}
{"id":"4ffa99e1-d092-4785-bebb-230e1bc14ccb","name":"fabled-sooty-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"64.227.168.220","src_port":50978,"username":null,"client_version":"","auth_attempts":0,"automation":"unknown","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-26T11:32:51.406571+00:00","ended_at":"2026-08-26T11:32:51.628067+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[]}