[
 {
  "id": "57c97805-7534-4b14-b1d7-46f7c0a8c358",
  "name": "deft-plush-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 53642,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 565,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:42:38.067078+00:00",
  "ended_at": "2026-08-27T02:42:39.177391+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "a68d04a6-cace-4613-be36-8c3013d3a2ae",
  "name": "idle-tranquil-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 41018,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:42:16.725121+00:00",
  "ended_at": "2026-08-27T02:42:18.595507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "23cbd5ce-9b86-49e8-a0e0-1d3d062abbd7",
  "name": "vigilant-faded-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53648,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:42:13.730073+00:00",
  "ended_at": "2026-08-27T02:42:15.598271+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f5a4ba8-4925-4947-9c9d-397140e25ac5",
  "name": "steady-gilded-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 60868,
  "username": "zyx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 556,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:39:29.692683+00:00",
  "ended_at": "2026-08-27T02:39:31.389472+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "5076fdb8-d9ac-490c-972c-90628ebb1818",
  "name": "solemn-curious-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 45150,
  "username": "zyx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:39:14.333663+00:00",
  "ended_at": "2026-08-27T02:39:15.947069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d8b8ec0-c39f-425b-b2b2-ba9974bd6870",
  "name": "drifting-blithe-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60882,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:39:08.403705+00:00",
  "ended_at": "2026-08-27T02:39:10.301064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e95adf91-7feb-45ba-9937-2e0111842b51",
  "name": "courtly-cosmic-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49170,
  "username": "ac",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 532,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:36:22.796549+00:00",
  "ended_at": "2026-08-27T02:36:23.539081+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "3b285731-1d3b-4677-a797-1b65802ded31",
  "name": "primal-rustic-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49190,
  "username": "ac",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:36:11.999104+00:00",
  "ended_at": "2026-08-27T02:36:12.752376+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a2d93d4-1a79-49b7-a4a1-d5bdc5236fdb",
  "name": "twilight-granite-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49178,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:36:07.963961+00:00",
  "ended_at": "2026-08-27T02:36:09.130264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "644ae93a-a02a-41b5-8337-394ddc6f16f0",
  "name": "russet-courtly-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49912,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:33:20.602582+00:00",
  "ended_at": "2026-08-27T02:33:21.281889+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "304a6b3f-3665-4713-bb3c-97716ed01660",
  "name": "dewy-mossy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59824,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:33:07.889239+00:00",
  "ended_at": "2026-08-27T02:33:09.531593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aec10140-ed68-471f-9367-23e0ad6e370d",
  "name": "quiet-civil-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59820,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:33:05.124615+00:00",
  "ended_at": "2026-08-27T02:33:06.573448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2ed0ae5-3684-4459-8743-abd8b5c7cb49",
  "name": "placid-fleeting-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53928,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:29:46.085188+00:00",
  "ended_at": "2026-08-27T02:29:47.125407+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0d34dad-6286-40f0-9fff-5ff2ffb87d08",
  "name": "zealous-lawful-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34832,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:27:02.181397+00:00",
  "ended_at": "2026-08-27T02:27:03.575059+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b29f6bd0-18a8-465c-afea-53e219109e65",
  "name": "boreal-ashen-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:26:42.385386+00:00",
  "ended_at": "2026-08-27T02:26:44.046015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dcf34b81-2ec0-4c33-b9ea-2a1e6ab2d9cb",
  "name": "wandering-gallant-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34840,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:26:39.911154+00:00",
  "ended_at": "2026-08-27T02:26:41.330970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbfb45e5-1981-4a34-80ab-474bc3436298",
  "name": "watchful-honest-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57042,
  "username": "chenyu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:24:11.138293+00:00",
  "ended_at": "2026-08-27T02:24:12.590042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "a2585b96-224b-430d-84a3-e187d5b14c92",
  "name": "lonesome-lofty-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59386,
  "username": "chenyu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:23:55.088739+00:00",
  "ended_at": "2026-08-27T02:23:55.776718+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da7f7032-4d4e-4c66-b28d-1926f78aaf48",
  "name": "northern-painted-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57052,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:23:51.780690+00:00",
  "ended_at": "2026-08-27T02:23:53.111713+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10042d62-abe8-4b59-8dfc-60b474509ea1",
  "name": "mindful-sleepy-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46760,
  "username": "yousef",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 513,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:20:56.350939+00:00",
  "ended_at": "2026-08-27T02:20:57.008370+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "5f53b2c0-f98c-4707-99c2-2d90f37cf008",
  "name": "quiet-umber-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47810,
  "username": "yousef",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:20:45.678091+00:00",
  "ended_at": "2026-08-27T02:20:46.561806+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "110ee8ca-7351-40de-9425-3425cfd19f6e",
  "name": "vigilant-kindly-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46772,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:20:40.118620+00:00",
  "ended_at": "2026-08-27T02:20:42.064727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb077dd9-d37c-4314-ba6d-ceb3d85437a3",
  "name": "gritty-bold-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:17:40.565599+00:00",
  "ended_at": "2026-08-27T02:17:41.267934+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "5c59b0f0-7a91-4071-8116-99dded125797",
  "name": "windswept-supple-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:17:28.365174+00:00",
  "ended_at": "2026-08-27T02:17:30.208652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bef46de-557a-40db-a1d6-feefe7443485",
  "name": "fabled-breezy-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58298,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:17:24.284555+00:00",
  "ended_at": "2026-08-27T02:17:25.501039+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce1eac13-44cb-4b8e-b1f3-25cf749e6637",
  "name": "dapper-fierce-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46474,
  "username": "mp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:14:33.696756+00:00",
  "ended_at": "2026-08-27T02:14:35.720918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5da38553-7c76-4ce6-9b97-88bd5a0d7955",
  "name": "wry-peaty-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44464,
  "username": "temp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:11:49.963786+00:00",
  "ended_at": "2026-08-27T02:11:51.360321+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b11cf79-634d-4a72-874d-443e40d46074",
  "name": "sandy-frugal-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 55304,
  "username": "toby",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:06:10.980914+00:00",
  "ended_at": "2026-08-27T02:06:12.218336+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "319c08b1-c9d2-4a64-9385-841e41e80a6a",
  "name": "regal-salty-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55308,
  "username": "toby",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:05:52.104419+00:00",
  "ended_at": "2026-08-27T02:05:53.733957+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7132cec5-a351-4755-96a9-becdcf543cbe",
  "name": "sunlit-curious-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55306,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:05:48.867217+00:00",
  "ended_at": "2026-08-27T02:05:50.581998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "57779227-83e8-43a5-81d7-75cd3369efbb",
  "name": "glacial-hearty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46424,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 560,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:03:29.032587+00:00",
  "ended_at": "2026-08-27T02:03:30.102092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "51f1d0e6-1e0e-4b21-8174-eddca8bd0c6a",
  "name": "patient-hazy-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:08.493707+00:00",
  "ended_at": "2026-08-27T02:03:09.648497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd818a64-b71d-4bb7-85d4-1a6bb78a76f7",
  "name": "mottled-sincere-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46430,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:03.746124+00:00",
  "ended_at": "2026-08-27T02:03:05.736377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c91960f-9386-47a0-ac2e-315e750291ea",
  "name": "coral-salty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59792,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:00:16.565060+00:00",
  "ended_at": "2026-08-27T02:00:17.631058+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "31bed514-eb14-445e-affa-0d150730fd29",
  "name": "regal-ancient-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:57.823634+00:00",
  "ended_at": "2026-08-27T01:59:58.658719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4b49112-c46f-468a-b521-06f402940d58",
  "name": "spirited-grassy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59808,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:54.311756+00:00",
  "ended_at": "2026-08-27T01:59:56.331128+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f84b496-5c89-47c9-b585-87bbb34b6e9b",
  "name": "rugged-idle-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 42640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:57:01.767425+00:00",
  "ended_at": "2026-08-27T01:57:02.861508+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c9ea8523-1e01-4868-8cd8-61bbb9fd01b1",
  "name": "marine-slender-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 42668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:56:43.100549+00:00",
  "ended_at": "2026-08-27T01:56:44.761726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bcf5661-b60d-4baf-a052-5c7d8e1c4e70",
  "name": "solar-quaint-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 42654,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:56:38.149028+00:00",
  "ended_at": "2026-08-27T01:56:39.174009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3df4f059-c34b-4115-a3aa-bcd9be781bf6",
  "name": "prairie-icy-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34544,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:53:49.922814+00:00",
  "ended_at": "2026-08-27T01:53:51.302086+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "a3106420-1547-4953-b012-71c18236bf9c",
  "name": "dapper-mossy-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36492,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:30.721810+00:00",
  "ended_at": "2026-08-27T01:53:31.469011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc10381c-5207-4ad2-9a24-298c180112d3",
  "name": "pewter-twilight-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36484,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:27.841775+00:00",
  "ended_at": "2026-08-27T01:53:28.853005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "196f1d27-2c48-4975-ba0b-ddd181b0dab5",
  "name": "icy-grumpy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 32900,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:50:32.380524+00:00",
  "ended_at": "2026-08-27T01:50:33.575565+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "63098e80-2a8f-4c80-a71d-e5d6fbcfb33f",
  "name": "weathered-somber-snipe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43954,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:50:13.513392+00:00",
  "ended_at": "2026-08-27T01:50:15.011292+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "364206dc-9601-40e3-b68e-3cda35605814",
  "name": "faded-loyal-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 32904,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:50:09.123761+00:00",
  "ended_at": "2026-08-27T01:50:10.885527+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9229aa80-23b4-4320-acbf-4916bcd0e6ad",
  "name": "sooty-golden-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 54798,
  "username": "wjx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:47:29.547521+00:00",
  "ended_at": "2026-08-27T01:47:30.894678+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "8e71f289-0f05-487c-b98d-f1362f335a75",
  "name": "tidal-graceful-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47130,
  "username": "wjx",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:47:11.811520+00:00",
  "ended_at": "2026-08-27T01:47:12.686779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e91607fb-ce6f-40dc-86b9-2af3db09d6cb",
  "name": "sterling-fleeting-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 47116,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:47:06.656104+00:00",
  "ended_at": "2026-08-27T01:47:09.107587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d170d24-50a3-41f2-b2a6-f2ed8dd45d3d",
  "name": "tidal-pleasant-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36436,
  "username": "testserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:44:30.225882+00:00",
  "ended_at": "2026-08-27T01:44:31.735209+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2265
 },
 {
  "id": "8e5400b7-3b16-4246-b37f-869ecca3c48f",
  "name": "snowy-electric-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36462,
  "username": "testserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:44:11.564584+00:00",
  "ended_at": "2026-08-27T01:44:12.594908+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61e6ccaa-82a5-4b7b-95ad-47f818e03003",
  "name": "jolly-gritty-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36448,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:44:08.737740+00:00",
  "ended_at": "2026-08-27T01:44:09.884723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "688b3edf-2678-4644-a938-c3e7d46e0c0e",
  "name": "plush-ashen-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 48012,
  "username": "wushi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:41:45.157077+00:00",
  "ended_at": "2026-08-27T01:41:46.363063+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "3aec6973-1690-445d-9b29-c8fce403ebe0",
  "name": "western-gallant-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43054,
  "username": "wushi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:41:26.263071+00:00",
  "ended_at": "2026-08-27T01:41:27.199313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9d08d0f-7925-43fb-8e77-a5ed7711c1cf",
  "name": "indigo-civil-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 48016,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:41:23.252677+00:00",
  "ended_at": "2026-08-27T01:41:24.986700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf6775e3-99df-4276-b034-0548a506f67d",
  "name": "meadow-umber-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 41666,
  "username": "VPN",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 518,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:38:59.630835+00:00",
  "ended_at": "2026-08-27T01:39:00.963779+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "7d133289-583d-4f56-88b8-a66808cbd0bd",
  "name": "quartz-mottled-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33644,
  "username": "VPN",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:38:40.900184+00:00",
  "ended_at": "2026-08-27T01:38:42.050466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b6a2e86-750f-4d73-9089-59e0d4f9a775",
  "name": "sturdy-brave-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33640,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:38:35.564842+00:00",
  "ended_at": "2026-08-27T01:38:36.910186+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33dfaf6c-a578-4c80-8a86-82e9aa4f5c40",
  "name": "marbled-somber-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 39998,
  "username": "alma",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:35:49.956104+00:00",
  "ended_at": "2026-08-27T01:35:51.548596+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "33211200-3339-43cb-bb99-c8ffbb0b458f",
  "name": "quiet-graceful-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 53420,
  "username": "alma",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:35:28.450013+00:00",
  "ended_at": "2026-08-27T01:35:30.336199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4202866a-2fe2-4622-8661-e5561dcb99cd",
  "name": "salty-lunar-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40002,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:35:23.583834+00:00",
  "ended_at": "2026-08-27T01:35:24.784945+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0532f9d0-de19-4259-ac4e-e3bb61f94e62",
  "name": "blazing-curious-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49768,
  "username": "vpsuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:32:33.115570+00:00",
  "ended_at": "2026-08-27T01:32:34.542697+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "74b6dbc1-a089-4993-a2b3-27e203b177a2",
  "name": "sullen-hearty-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33964,
  "username": "vpsuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:32:14.707787+00:00",
  "ended_at": "2026-08-27T01:32:15.390014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da97a4e5-08b2-4b97-8917-209ed9b18ddc",
  "name": "nautical-keen-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44438,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:32:10.047789+00:00",
  "ended_at": "2026-08-27T01:32:11.601867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dbe62335-4e5e-4818-ab78-456f858b9be9",
  "name": "breezy-forlorn-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33206,
  "username": "igor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:29:16.307101+00:00",
  "ended_at": "2026-08-27T01:29:17.362010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "8700e4cb-0c2a-499a-a631-f40c4e9d03c9",
  "name": "burly-crystal-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44602,
  "username": "igor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:28:57.075210+00:00",
  "ended_at": "2026-08-27T01:28:57.938797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65cd65a9-67ed-400b-a470-da2d5135c6e3",
  "name": "creaky-watchful-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33222,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:28:51.781561+00:00",
  "ended_at": "2026-08-27T01:28:52.839810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "568ea593-d882-405c-b436-c263036b1151",
  "name": "nimble-thorny-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:25:50.305118+00:00",
  "ended_at": "2026-08-27T01:25:52.054802+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5ba1c01-c7f0-4a79-8441-6a03993fd895",
  "name": "genial-pewter-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40686,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:25:47.804125+00:00",
  "ended_at": "2026-08-27T01:25:49.203312+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "834879d1-8c8c-4875-98be-c908d673c871",
  "name": "gloomy-bitter-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58396,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:25:43.297679+00:00",
  "ended_at": "2026-08-27T01:25:45.488686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "66d7fd29-009f-483e-9c71-fd43eb389e87",
  "name": "fierce-glacial-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:23:09.177870+00:00",
  "ended_at": "2026-08-27T01:23:10.500250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c42b8575-fc39-4b20-91b6-87312935acb3",
  "name": "ginger-supple-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:22:47.880518+00:00",
  "ended_at": "2026-08-27T01:22:49.903226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36794fca-0e8b-4b05-b9ca-aabbe596d824",
  "name": "placid-gleaming-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33584,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:22:43.768731+00:00",
  "ended_at": "2026-08-27T01:22:44.853123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bfcb867e-cf3f-4e83-b971-4cb292be2b4a",
  "name": "grassy-snowy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36980,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 520,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:19:50.901302+00:00",
  "ended_at": "2026-08-27T01:19:52.508860+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2349bf23-1229-4bb7-891f-e00c0d75c479",
  "name": "woven-feral-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:19:31.045169+00:00",
  "ended_at": "2026-08-27T01:19:32.915949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8166fe0b-d5a7-4e41-9a1d-75b56a834221",
  "name": "vivid-windswept-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36990,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:19:28.668164+00:00",
  "ended_at": "2026-08-27T01:19:29.989493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "baf9edd4-8eab-45b6-99e9-d2bceea49c71",
  "name": "regal-ivory-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36252,
  "username": "client",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 514,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:17:07.613064+00:00",
  "ended_at": "2026-08-27T01:17:08.769650+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "d04a6b8c-f2bc-47a8-9b20-06f5c1926088",
  "name": "gnarled-dewy-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52834,
  "username": "client",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:16:46.644630+00:00",
  "ended_at": "2026-08-27T01:16:48.621084+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d17a6cf-3a5f-4af8-90f2-4381fa87165f",
  "name": "woven-emerald-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52820,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:16:43.428106+00:00",
  "ended_at": "2026-08-27T01:16:44.692389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e870c39-c9a8-4024-99f4-6357f24d91dc",
  "name": "thrifty-solemn-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 53860,
  "username": "edwin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 513,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:14:00.724812+00:00",
  "ended_at": "2026-08-27T01:14:02.097768+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "36062e27-e4a3-4c33-bc87-566bc1e8c904",
  "name": "stormy-courtly-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54396,
  "username": "edwin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:13:42.696801+00:00",
  "ended_at": "2026-08-27T01:13:43.434335+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2128fa0-4e09-4406-8d0a-31ffe69a8c6f",
  "name": "courtly-ashen-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54388,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:13:37.450242+00:00",
  "ended_at": "2026-08-27T01:13:38.665761+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7927f727-777d-425d-a918-c42e95a40e8c",
  "name": "dusty-honest-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 51866,
  "username": "docker",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:10:45.323484+00:00",
  "ended_at": "2026-08-27T01:10:46.841590+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2246
 },
 {
  "id": "f15d6b87-e607-42db-8100-2207cff5b2fb",
  "name": "lawful-craggy-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 55712,
  "username": "docker",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:10:27.044299+00:00",
  "ended_at": "2026-08-27T01:10:28.357519+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "460c4b6c-1b72-4a1b-aefc-daf547ac843c",
  "name": "polar-nimble-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 51882,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:10:21.742693+00:00",
  "ended_at": "2026-08-27T01:10:23.407564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "575f8bc6-f8c8-4f63-925f-1e744944f020",
  "name": "slender-dewy-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33074,
  "username": "ashish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 550,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:07:49.458024+00:00",
  "ended_at": "2026-08-27T01:07:50.570753+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2237
 },
 {
  "id": "dd4e38c5-7703-4d23-b8bc-b9af9bb33a01",
  "name": "smoky-plush-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33094,
  "username": "ashish",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:07:29.715384+00:00",
  "ended_at": "2026-08-27T01:07:31.341497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3019dfd4-5081-44b9-bf53-6e38ab140a00",
  "name": "arctic-fringed-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 33080,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:07:27.689228+00:00",
  "ended_at": "2026-08-27T01:07:28.666377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "633faf4c-a0a3-4be5-b02f-5141979685ad",
  "name": "dapper-nimble-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 56552,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:04:49.081590+00:00",
  "ended_at": "2026-08-27T01:04:50.555496+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2270
 },
 {
  "id": "634d7e91-4703-4103-997c-a62388a67bd7",
  "name": "curious-cosmic-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34292,
  "username": "root2",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:04:28.983368+00:00",
  "ended_at": "2026-08-27T01:04:30.616069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "55145ca7-0bf5-4eed-983b-469d72b4220e",
  "name": "kindly-thorny-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34288,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:04:25.152372+00:00",
  "ended_at": "2026-08-27T01:04:26.498607+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53ff8ccc-cf47-4170-a33c-af3e7ec1aa6f",
  "name": "upland-hushed-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 52344,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:01:44.923784+00:00",
  "ended_at": "2026-08-27T01:01:46.412093+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "30865403-9f85-43f1-85c3-e91a7b1d4cb1",
  "name": "languid-arctic-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 38198,
  "username": "es",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:01:24.129138+00:00",
  "ended_at": "2026-08-27T01:01:25.330560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69167e8e-f238-43de-b008-bbff6950fb50",
  "name": "foggy-umber-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52360,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:01:20.641544+00:00",
  "ended_at": "2026-08-27T01:01:22.395353+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8bb1840d-1c97-4d2c-b932-11905850fd71",
  "name": "windswept-civil-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 43432,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 555,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:58:29.699246+00:00",
  "ended_at": "2026-08-27T00:58:31.016165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "029098bd-0b3d-4b1a-82c0-7cc49eadaedd",
  "name": "thrifty-daring-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43460,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:58:10.574727+00:00",
  "ended_at": "2026-08-27T00:58:12.399043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a91f025-0715-42f7-863f-050704a83b64",
  "name": "earnest-smooth-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:58:06.185502+00:00",
  "ended_at": "2026-08-27T00:58:08.078874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c9204b5-b416-4d6d-b3d1-eccace0e90c5",
  "name": "boreal-serene-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 45992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:55:24.223136+00:00",
  "ended_at": "2026-08-27T00:55:25.280584+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "b378f839-feba-4f89-bf82-2d679558f6a6",
  "name": "mindful-fierce-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:55:04.786076+00:00",
  "ended_at": "2026-08-27T00:55:06.183159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8069ee5-aae6-434a-aafc-785d25248b8d",
  "name": "freckled-fickle-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46000,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:54:59.780592+00:00",
  "ended_at": "2026-08-27T00:55:01.833612+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9dc4ef9c-3031-4587-b567-997bc168067c",
  "name": "gleaming-austere-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 42424,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:52:18.999740+00:00",
  "ended_at": "2026-08-27T00:52:20.000176+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2170
 },
 {
  "id": "ba08fdbc-7517-4a23-a08f-94efa8de1f8c",
  "name": "primal-upland-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54736,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:51:59.886901+00:00",
  "ended_at": "2026-08-27T00:52:00.669408+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "002bc0cc-83cf-4677-94c6-16569195cebe",
  "name": "tawny-freckled-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:51:55.793745+00:00",
  "ended_at": "2026-08-27T00:51:56.954477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc4229b0-76f4-4588-b70a-92eee7a51923",
  "name": "sincere-verdant-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 39982,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:49:16.596636+00:00",
  "ended_at": "2026-08-27T00:49:17.603128+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2169
 },
 {
  "id": "51356eec-cdad-413c-a2de-85e49e02044f",
  "name": "lucid-polar-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 35372,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:48:58.089382+00:00",
  "ended_at": "2026-08-27T00:48:58.758378+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3452db8a-1de1-4515-9204-c5fe73e060d8",
  "name": "mossy-courtly-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39984,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:48:53.419323+00:00",
  "ended_at": "2026-08-27T00:48:54.626425+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2b864d8-6190-407a-b621-bf22434555cd",
  "name": "nameless-seaward-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57348,
  "username": "gitea",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:46:10.720378+00:00",
  "ended_at": "2026-08-27T00:46:12.209171+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2163
 },
 {
  "id": "9d15aab0-40f2-4a07-8562-4c2ebbdc078a",
  "name": "cosmic-ginger-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57372,
  "username": "gitea",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:45:52.112089+00:00",
  "ended_at": "2026-08-27T00:45:53.842993+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4292b02e-62bb-41bf-a37e-7a1d5b418d69",
  "name": "quiet-hardy-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57362,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:45:46.971067+00:00",
  "ended_at": "2026-08-27T00:45:47.771538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ef49375-1827-4419-971a-07984cb2a427",
  "name": "quartz-crimson-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57234,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:42:56.877146+00:00",
  "ended_at": "2026-08-27T00:42:57.957604+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "8aec264d-7bf5-4ea9-8648-091936fcc903",
  "name": "bashful-rambling-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57252,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:42:38.443481+00:00",
  "ended_at": "2026-08-27T00:42:39.338062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb1bc9d8-0158-480b-ad5c-8d23c2862817",
  "name": "zealous-thorny-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57240,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:42:35.216085+00:00",
  "ended_at": "2026-08-27T00:42:36.187753+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f78f223-366e-4f69-9e15-b5e4f42eaef1",
  "name": "cobalt-hazy-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 44492,
  "username": "sora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 556,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:39:54.403067+00:00",
  "ended_at": "2026-08-27T00:39:55.526725+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2126
 },
 {
  "id": "b86f9197-ab88-4c5b-9a80-32dee45d74c0",
  "name": "lunar-placid-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39414,
  "username": "sora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:39:33.762412+00:00",
  "ended_at": "2026-08-27T00:39:34.820212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d21b8b5-e977-40d2-a359-f6aa40d2e0fa",
  "name": "wooded-grassy-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 44502,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:39:29.686547+00:00",
  "ended_at": "2026-08-27T00:39:31.144482+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96e7c7e4-2a04-4fbf-a76e-0be66d30de68",
  "name": "restless-tidal-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 60220,
  "username": "michal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:36:44.572496+00:00",
  "ended_at": "2026-08-27T00:36:46.059069+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2127
 },
 {
  "id": "9b3f10f1-89e0-4271-a402-95ddce6e8558",
  "name": "hushed-jolly-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60248,
  "username": "michal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:36:23.998122+00:00",
  "ended_at": "2026-08-27T00:36:25.554403+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d12da8e-6c95-42ee-b4cc-1fef04d21d9f",
  "name": "genial-hazy-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 60234,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:36:18.820624+00:00",
  "ended_at": "2026-08-27T00:36:19.787772+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d3ba961-9947-47ed-8fd6-6400b59e5ee3",
  "name": "solar-rapid-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 56892,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:33:42.846708+00:00",
  "ended_at": "2026-08-27T00:33:44.173413+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2161
 },
 {
  "id": "ac35acf3-f282-4ce2-a6c7-e4db05170401",
  "name": "rugged-ruddy-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58612,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:33:22.682424+00:00",
  "ended_at": "2026-08-27T00:33:23.644542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b53966c-b304-410e-8466-7e083b739793",
  "name": "flinty-prairie-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58602,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:33:17.679396+00:00",
  "ended_at": "2026-08-27T00:33:18.420589+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6208ed3-6316-446d-9834-3837e3d83399",
  "name": "nautical-graceful-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58962,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:30:43.803559+00:00",
  "ended_at": "2026-08-27T00:30:45.265857+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "721da897-7b77-40f5-839e-f7de8f723396",
  "name": "early-wry-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 48606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:30:24.161304+00:00",
  "ended_at": "2026-08-27T00:30:25.803896+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4466e00f-5dc3-4bb7-856e-700902caf2c2",
  "name": "tawny-tidal-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58968,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:30:19.995323+00:00",
  "ended_at": "2026-08-27T00:30:21.574011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "522f4b42-b84d-4bf6-91b3-d747fd167d87",
  "name": "rapid-candid-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46664,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:27:42.331054+00:00",
  "ended_at": "2026-08-27T00:27:43.807106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "718f4a18-c6ec-4f05-8d52-f3eb7b154950",
  "name": "marbled-austere-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 56586,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:27:22.892741+00:00",
  "ended_at": "2026-08-27T00:27:24.656644+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "541420c4-6187-4657-b93a-2a6e010c7c08",
  "name": "faded-crystal-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 56574,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:27:18.120902+00:00",
  "ended_at": "2026-08-27T00:27:19.834524+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4fa3bbc-ecba-4a1f-b0ad-4b87b4fe1fae",
  "name": "prairie-ivory-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49256,
  "username": "ssl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:24:30.857302+00:00",
  "ended_at": "2026-08-27T00:24:32.153617+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2072
 },
 {
  "id": "db208109-6607-4fdf-b270-54de36bfd155",
  "name": "shaded-alpine-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49286,
  "username": "ssl",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:24:10.950926+00:00",
  "ended_at": "2026-08-27T00:24:12.313376+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bad6c15-f3da-45bf-8867-1a0d0d3f317d",
  "name": "pewter-quartz-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 49272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:24:06.729996+00:00",
  "ended_at": "2026-08-27T00:24:08.078903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5edb1ccb-d4dc-4fe7-b301-528eb53018b3",
  "name": "frank-dappled-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50422,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:21:10.422459+00:00",
  "ended_at": "2026-08-27T00:21:11.831471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "98cc077b-9302-47a3-8cbc-076b40de366f",
  "name": "dutiful-rustic-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 50444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:20:53.613556+00:00",
  "ended_at": "2026-08-27T00:20:55.346818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "402ad363-ca64-4773-a798-b8ce71ef2848",
  "name": "woven-smoky-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 50430,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:20:48.976951+00:00",
  "ended_at": "2026-08-27T00:20:50.440011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d07cf30b-8560-4b85-bbb5-af953dfb9455",
  "name": "early-deft-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50678,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 571,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:17:53.831192+00:00",
  "ended_at": "2026-08-27T00:17:54.534356+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "2a83dae2-1927-459e-9efd-11b120b47889",
  "name": "murky-vaulted-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52310,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:17:41.697466+00:00",
  "ended_at": "2026-08-27T00:17:43.153728+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "617a9f66-1617-4b8d-b484-f788061d7c97",
  "name": "inland-pewter-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52300,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:17:38.464256+00:00",
  "ended_at": "2026-08-27T00:17:40.527658+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8569d23-7d3d-4484-a143-bef4fc61640a",
  "name": "jaunty-northern-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:14:46.269218+00:00",
  "ended_at": "2026-08-27T00:14:47.160675+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "f67e105a-21cc-4d10-a910-daa44fe61e3b",
  "name": "jaunty-hazy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46398,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:14:34.848353+00:00",
  "ended_at": "2026-08-27T00:14:36.185944+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28a4282f-8420-404f-aa1f-eb04bc66b048",
  "name": "fringed-fearless-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46388,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:14:32.789994+00:00",
  "ended_at": "2026-08-27T00:14:33.686381+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae1c0538-2141-4d51-af76-a28215962807",
  "name": "plush-dappled-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 34614,
  "username": "cyber",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:09:03.109674+00:00",
  "ended_at": "2026-08-27T00:09:04.569697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]