[
 {
  "id": "fccd804b-f524-4e2e-be05-c2bf8ad84e24",
  "name": "quartz-jagged-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 44758,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:04:19.452360+00:00",
  "ended_at": "2026-08-27T05:04:21.036040+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fcd60b3-f3f2-4c58-acda-3c21977e0e4e",
  "name": "thorny-candid-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 43388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:04:17.454206+00:00",
  "ended_at": "2026-08-27T05:08:18.248515+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "00e8fe24-a3a7-44c9-8839-756190731de3",
  "name": "placid-fleeting-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 59676,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:55:15.326276+00:00",
  "ended_at": "2026-08-27T04:59:15.840433+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "32390375-03a6-4932-b23a-2a9799a38047",
  "name": "faded-jaunty-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 47740,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:46:07.520073+00:00",
  "ended_at": "2026-08-27T04:50:08.217838+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "9530df26-e96a-4887-9ffc-af88261193df",
  "name": "keen-shifting-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 37544,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:37:09.828101+00:00",
  "ended_at": "2026-08-27T04:38:08.541729+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "293507cc-d3d3-4064-9ea1-249f1ff38646",
  "name": "fringed-vigilant-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 36824,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:37:07.226479+00:00",
  "ended_at": "2026-08-27T04:37:08.312005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c6cffdd-a3da-444a-9992-3b9b37d9df1d",
  "name": "ancient-mighty-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 35808,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:37:05.363704+00:00",
  "ended_at": "2026-08-27T04:41:05.888520+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "598c3e8d-de08-4375-9411-893b5c927720",
  "name": "early-whispering-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 54174,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:28:17.423085+00:00",
  "ended_at": "2026-08-27T04:29:16.145011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe75ede1-d03c-413b-a6e0-7974dc8a3b9f",
  "name": "granite-thrifty-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 53122,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:28:14.218563+00:00",
  "ended_at": "2026-08-27T04:28:15.899280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a3e4464a-3357-4c16-9afe-e09abe9d19c5",
  "name": "painted-bronzed-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 52092,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:28:12.532386+00:00",
  "ended_at": "2026-08-27T04:32:13.060382+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "4401782a-2bf6-4fbb-b346-41a295add35d",
  "name": "craggy-thorny-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 41410,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:18:56.120892+00:00",
  "ended_at": "2026-08-27T04:18:57.221206+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e2a1156-24ce-4e93-b835-fa05eb1902e5",
  "name": "cosmic-stormy-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 40146,
  "username": "ax",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:18:54.437040+00:00",
  "ended_at": "2026-08-27T04:22:54.945376+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "12cee581-1293-47aa-9c3f-e6f0bffac8e9",
  "name": "pleasant-noble-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 46952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:09:28.231240+00:00",
  "ended_at": "2026-08-27T04:09:30.054563+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f734da3-9d18-470b-8ac2-f370ec450cbf",
  "name": "cobalt-smooth-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "179.102.26.14",
  "src_port": 3832,
  "username": "core",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 420,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:47:10.978402+00:00",
  "ended_at": "2026-08-27T00:47:11.698129+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2042
 },
 {
  "id": "ed37cd1e-25db-43fa-ac9c-d1a8bacdd49f",
  "name": "grassy-boreal-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.102.26.14",
  "src_port": 3819,
  "username": "core",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:47:02.004207+00:00",
  "ended_at": "2026-08-27T00:47:02.805630+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6768410c-4743-49ac-a53b-d9d23c1bdeda",
  "name": "nameless-thrifty-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.102.26.14",
  "src_port": 3833,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:46:59.469396+00:00",
  "ended_at": "2026-08-27T00:47:01.083764+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f20ca156-5938-4013-9223-6f3669e2c19f",
  "name": "kindly-vigilant-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.103.117.85",
  "src_port": 46276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T08:00:42.628859+00:00",
  "ended_at": "2026-08-26T08:00:44.518169+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10c096a6-d830-4338-a5e8-b53ab0c3bd95",
  "name": "stoic-pewter-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.103.117.85",
  "src_port": 46272,
  "username": "mk",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T08:00:38.175604+00:00",
  "ended_at": "2026-08-26T08:04:38.682102+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "c24006b0-8986-42fe-aeef-4e27b0e93b1a",
  "name": "rapid-forlorn-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.103.117.85",
  "src_port": 48826,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T07:25:54.117484+00:00",
  "ended_at": "2026-08-26T07:29:54.189080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "b9f7f7c9-8d56-403c-bf9c-c2a341a8c869",
  "name": "upland-prickly-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.103.117.85",
  "src_port": 42556,
  "username": "gecko",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T07:20:17.270782+00:00",
  "ended_at": "2026-08-26T07:20:19.132215+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "226ca8b8-8952-4e81-9e49-94cbe42a94be",
  "name": "leafy-curious-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "179.176.210.17",
  "src_port": 45675,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:14:31.390603+00:00",
  "ended_at": "2026-08-25T21:14:31.522244+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3935
 },
 {
  "id": "3f5e7320-7a8e-409d-8646-7504151cd6af",
  "name": "russet-salty-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 50586,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:14:10.421187+00:00",
  "ended_at": "2026-08-25T21:14:10.728333+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60cabf40-cf01-430c-a0aa-82d7795bc4fe",
  "name": "crisp-proud-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 46612,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:13:57.757119+00:00",
  "ended_at": "2026-08-25T21:13:59.267964+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "abacfa20-bf62-4ac0-8b30-6f5ebada9787",
  "name": "crimson-airy-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 46143,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:13:56.104837+00:00",
  "ended_at": "2026-08-25T21:13:56.833828+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da5eda16-49fc-430c-86bb-0bb66e6d8dd1",
  "name": "inland-northern-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 50911,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:02:56.809584+00:00",
  "ended_at": "2026-08-25T21:02:57.678439+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a18b4fd6-8b89-462b-b18b-9ce2b8d50b29",
  "name": "eager-fierce-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "67.52.95.38",
  "src_port": 41928,
  "username": "id",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:26:16.638058+00:00",
  "ended_at": "2026-08-24T04:26:18.615385+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c986bc7c-a71c-45d6-a6b2-7f701a5e2d8a",
  "name": "obsidian-brazen-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "182.93.50.90",
  "src_port": 51184,
  "username": "hunter",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 663,
  "probe_flagged": 1,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T19:46:32.384549+00:00",
  "ended_at": "2026-08-23T19:46:32.585281+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4587
 },
 {
  "id": "ef761de4-9b6f-4094-a2af-75f3445700cb",
  "name": "opal-glacial-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.93.50.90",
  "src_port": 58136,
  "username": "hunter",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:45:59.446084+00:00",
  "ended_at": "2026-08-23T19:45:59.881002+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c69b1fe6-3cae-4d7a-934d-cc94a4093dd4",
  "name": "gentle-forlorn-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.93.50.90",
  "src_port": 58856,
  "username": "hunter",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:45:43.696100+00:00",
  "ended_at": "2026-08-23T19:45:44.833111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac788546-db03-4117-affe-f9db14630e62",
  "name": "gentle-wiry-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.93.50.90",
  "src_port": 55814,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:45:41.553150+00:00",
  "ended_at": "2026-08-23T19:45:42.339289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba96e975-dd32-4b35-93ea-3a7b2500f68c",
  "name": "polar-obsidian-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.93.50.90",
  "src_port": 36012,
  "username": "karim",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:41:35.158251+00:00",
  "ended_at": "2026-08-23T19:41:36.149060+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "80cc7a33-af2a-48de-8008-89748802fcbc",
  "name": "thawing-woven-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.93.50.90",
  "src_port": 35766,
  "username": "ens",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:26:12.037942+00:00",
  "ended_at": "2026-08-23T19:26:14.133905+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4909784-b570-4d6e-b53d-274294e58207",
  "name": "glassy-subtle-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "58.209.82.184",
  "src_port": 45019,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 795,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:50:22.167314+00:00",
  "ended_at": "2026-08-23T00:50:22.411160+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3812
 },
 {
  "id": "b6d0970d-49e9-416b-a227-efa27d58988e",
  "name": "dusty-honest-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.209.82.184",
  "src_port": 49449,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:50:02.630850+00:00",
  "ended_at": "2026-08-23T00:50:02.970550+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "088f2d50-145e-495d-982a-d88d7dc0c2d1",
  "name": "barren-hardy-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.209.82.184",
  "src_port": 46218,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:49:44.783406+00:00",
  "ended_at": "2026-08-23T00:49:45.558968+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d26a409-0e40-498b-924e-4c13c4d73d00",
  "name": "keen-hazel-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.209.82.184",
  "src_port": 45727,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:49:41.742095+00:00",
  "ended_at": "2026-08-23T00:49:43.457212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b27aa930-f712-4925-8911-4015d18517c6",
  "name": "reedy-deft-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.209.82.184",
  "src_port": 34135,
  "username": "mark",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:48:29.004269+00:00",
  "ended_at": "2026-08-23T00:48:30.526281+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54cfbdf9-a6d7-477e-8d1c-f27ce48be8fb",
  "name": "diligent-honest-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.209.82.184",
  "src_port": 45014,
  "username": "myuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:46:07.571554+00:00",
  "ended_at": "2026-08-23T00:46:08.961742+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "586c8448-b441-41be-a6a4-ce51a64e72cd",
  "name": "crimson-frank-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "210.79.142.230",
  "src_port": 56430,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 740,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:44:40.988584+00:00",
  "ended_at": "2026-08-21T22:44:41.220167+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3495
 },
 {
  "id": "3bc97aad-58d8-4ca1-ab7b-08f12e16ae15",
  "name": "lofty-alpine-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "210.79.142.230",
  "src_port": 41264,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:44:21.858890+00:00",
  "ended_at": "2026-08-21T22:44:22.200025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5173eee2-72bb-4c1a-8212-7243ab111dbb",
  "name": "prairie-sandy-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "210.79.142.230",
  "src_port": 56452,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:44:03.542569+00:00",
  "ended_at": "2026-08-21T22:44:05.149587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fbc48d85-6991-40ae-92e5-af153375ed3e",
  "name": "cunning-hazy-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "210.79.142.230",
  "src_port": 56442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:43:59.979613+00:00",
  "ended_at": "2026-08-21T22:44:01.962379+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "68a3b979-ab7f-4aa1-aa0a-59addcb36304",
  "name": "rambling-humble-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "210.79.142.230",
  "src_port": 56622,
  "username": "public",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:40:08.711739+00:00",
  "ended_at": "2026-08-21T22:40:09.726528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7e1e1f54-49ba-4ca7-85cd-d3c48dee1338",
  "name": "pewter-opal-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "210.79.142.230",
  "src_port": 51616,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:28:51.781660+00:00",
  "ended_at": "2026-08-21T22:28:53.599620+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2c236f7-2839-4941-bb53-aa3b458360f4",
  "name": "western-plucky-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 57616,
  "username": "zhangy",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:24:46.018326+00:00",
  "ended_at": "2026-08-21T02:28:46.524192+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "8013ee7d-8e3d-4266-a959-95e31c27cc7d",
  "name": "fearless-snowy-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 56818,
  "username": "juan",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:21:25.538532+00:00",
  "ended_at": "2026-08-21T02:25:26.083672+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "c606538a-c1d8-4ce5-903c-5350839f9a6c",
  "name": "indigo-frank-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 54442,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:12:13.242521+00:00",
  "ended_at": "2026-08-21T02:16:13.759325+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "0bab218b-4396-4d61-93ef-3a5f8b5a3da7",
  "name": "gilded-vernal-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 58062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:08:47.567943+00:00",
  "ended_at": "2026-08-21T02:12:48.070201+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "81574ec3-1616-4a25-821c-6fafd0659ee4",
  "name": "barren-honest-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 51718,
  "username": "hammad",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:05:21.120455+00:00",
  "ended_at": "2026-08-21T02:09:21.640155+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "dc7d8eb0-c601-42d5-961b-901c0a5c6f34",
  "name": "gentle-languid-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 45144,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:58:28.159941+00:00",
  "ended_at": "2026-08-21T01:59:26.951486+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "297c7fce-9008-4362-a269-6a8332a37f68",
  "name": "frank-fringed-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 45128,
  "username": "dylan",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:58:26.498630+00:00",
  "ended_at": "2026-08-21T02:02:27.048301+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "4843135d-4b45-43de-a6fa-09c7f4666a5b",
  "name": "boreal-fierce-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 51026,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:49:24.665911+00:00",
  "ended_at": "2026-08-21T01:50:23.532986+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33548dd1-e720-41ab-a233-293f0741aea3",
  "name": "marine-zealous-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 51020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:49:23.102371+00:00",
  "ended_at": "2026-08-21T01:53:23.592656+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "d0275f62-63c3-4226-9bea-f34fa27046aa",
  "name": "tranquil-deft-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 57496,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:42:37.112659+00:00",
  "ended_at": "2026-08-21T01:43:35.967251+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "183acb6a-506c-47d3-9172-6a8c9660c476",
  "name": "brazen-smooth-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 57486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:42:35.517747+00:00",
  "ended_at": "2026-08-21T01:46:36.048112+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "353239fd-e706-4544-86a0-34fd8e12acb8",
  "name": "shaded-lofty-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55458,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:36:05.063034+00:00",
  "ended_at": "2026-08-21T01:36:06.566252+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98231349-0a42-4fdd-a185-c679db51f430",
  "name": "buoyant-burly-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55444,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:36:02.261863+00:00",
  "ended_at": "2026-08-21T01:36:03.692604+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "263b73b0-198f-4236-8b4d-73206eef4f45",
  "name": "mottled-sandy-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 55430,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:36:00.655826+00:00",
  "ended_at": "2026-08-21T01:40:01.203836+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "27cfb488-312b-4e2f-8d96-31ae8c422d9d",
  "name": "autumn-airy-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 39458,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:32:28.133574+00:00",
  "ended_at": "2026-08-21T01:36:28.615751+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "1629d22c-18a2-4b71-82f3-b4b23c3bbbcc",
  "name": "wooded-amber-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:31:19.954680+00:00",
  "ended_at": "2026-08-21T01:31:20.878174+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce1a3fa9-94e6-41c5-9a64-3d358e020dd2",
  "name": "lanky-bold-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 58176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:23:52.760318+00:00",
  "ended_at": "2026-08-21T01:23:53.985665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "edca2fad-c59c-4e9a-a8fd-fe79fe36bd95",
  "name": "grassy-peaty-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "181.129.41.162",
  "src_port": 40408,
  "username": "parth",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T19:52:38.357374+00:00",
  "ended_at": "2026-08-20T19:52:38.429877+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3459
 },
 {
  "id": "cfac3b67-0080-4082-995d-d8d00d9fe71e",
  "name": "sterling-dewy-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 41998,
  "username": "parth",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:52:23.497267+00:00",
  "ended_at": "2026-08-20T19:52:23.730593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56d6ec8e-c69f-4952-bb06-0b66492ee0dd",
  "name": "languid-frank-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 40978,
  "username": "parth",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:52:13.582725+00:00",
  "ended_at": "2026-08-20T19:52:15.029292+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b27b138-6615-4328-b4bd-96efb31810bc",
  "name": "tender-hazel-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 40668,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:52:11.089121+00:00",
  "ended_at": "2026-08-20T19:52:13.022042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4757fb9-04e5-423d-aad0-4f1e8a186c7c",
  "name": "obsidian-boreal-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 44851,
  "username": "dani",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:48:12.035704+00:00",
  "ended_at": "2026-08-20T19:48:13.651726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8f03d4f-ecee-426b-8565-0141e52bd125",
  "name": "vivid-nameless-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 49290,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:44:16.150373+00:00",
  "ended_at": "2026-08-20T19:44:17.912441+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "016889ff-5e30-4c31-934a-fc0f5b442753",
  "name": "emerald-mighty-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.129.41.162",
  "src_port": 45544,
  "username": "jack",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:36:22.570468+00:00",
  "ended_at": "2026-08-20T19:36:24.288519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d97c634-71cf-4395-9707-f7b02c0c87c2",
  "name": "deft-frank-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "139.59.28.125",
  "src_port": 34268,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 678,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:57:42.460636+00:00",
  "ended_at": "2026-08-20T12:57:42.669225+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3631
 },
 {
  "id": "af73f2ec-9405-476f-9aa6-2243ed1a57f5",
  "name": "pleasant-zealous-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 55556,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:23.977012+00:00",
  "ended_at": "2026-08-20T12:57:24.444276+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41faf6e2-bd18-45b2-81ec-a470d8572d18",
  "name": "shifting-nimble-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 34282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:04.152504+00:00",
  "ended_at": "2026-08-20T12:57:05.119045+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a9125d6-e9a5-4907-ae56-88e9c414c8f3",
  "name": "cunning-tender-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 34272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:01.369327+00:00",
  "ended_at": "2026-08-20T12:57:02.778791+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21eda172-ee61-4bcc-831f-ffe1f2d8831c",
  "name": "curious-mossy-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 48510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:54:33.250662+00:00",
  "ended_at": "2026-08-20T12:54:34.470073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c03a6afa-ed7c-49c0-ac82-363db36f42d9",
  "name": "glacial-honest-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 42364,
  "username": "ems",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:51:56.151877+00:00",
  "ended_at": "2026-08-20T12:51:57.404993+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "16ce8ab6-9ac3-48a6-8acf-2f1f38563712",
  "name": "meadow-northern-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "81.193.216.17",
  "src_port": 56682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 408,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:49:19.537181+00:00",
  "ended_at": "2026-08-20T12:49:19.664175+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3907
 },
 {
  "id": "8706d8f0-bbaf-4f71-80fa-84f375abd2f0",
  "name": "idle-rugged-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 34176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:49:03.844882+00:00",
  "ended_at": "2026-08-20T12:49:04.213119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "206b6ecf-38d5-48b7-9e3e-988c8178eee9",
  "name": "brave-fringed-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 45710,
  "username": "ops",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:47.453207+00:00",
  "ended_at": "2026-08-20T12:48:48.254666+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7ea7118-db2a-46c5-bd93-a95f7df5941d",
  "name": "fringed-ashen-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 57738,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:46.952600+00:00",
  "ended_at": "2026-08-20T12:48:48.064238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4687739b-bc51-4a64-8b4b-5dfc109208ca",
  "name": "flinty-crimson-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 57176,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:44.953503+00:00",
  "ended_at": "2026-08-20T12:48:45.600725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c361c344-b760-4e1b-9f8b-1cf3f9fd7963",
  "name": "sunlit-marine-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 37790,
  "username": "test1",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:45:50.864331+00:00",
  "ended_at": "2026-08-20T12:45:51.737479+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4435726d-e1e5-4a9a-848e-5105f06b4c3a",
  "name": "mighty-russet-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 47054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:42:52.179667+00:00",
  "ended_at": "2026-08-20T12:42:52.898619+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dec57667-a124-4eea-9c9f-8b44e6941fa6",
  "name": "hazel-austere-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 47884,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:39:10.585961+00:00",
  "ended_at": "2026-08-20T12:39:12.562598+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]