[ { "id": "22cc1660-be2b-455a-b982-c6b5b70e2261", "name": "arctic-bashful-gull", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 52550, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 825, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T14:10:39.045870+00:00", "ended_at": "2026-08-27T14:10:39.311875+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2275 }, { "id": "03e09488-6fbd-4a58-a7e6-9d802ca8d780", "name": "gloomy-weathered-chough", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 44650, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 834, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T14:01:51.154232+00:00", "ended_at": "2026-08-27T14:01:53.311292+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2216 }, { "id": "02d94f97-51a7-477a-b442-27cb5437ccb7", "name": "mossy-electric-muntjac", "protocol": "ssh", "channel_kind": "exec", "src_ip": "201.249.166.171", "src_port": 38488, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 347, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:59:37.357704+00:00", "ended_at": "2026-08-27T13:59:39.371099+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "d7d0ad8f-0bf6-4928-9ecc-e7d9ef924844", "name": "hazel-slender-ermine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 56854, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 831, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:56:20.487122+00:00", "ended_at": "2026-08-27T13:56:22.536239+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "bd28fa80-f266-4e39-ad73-4ddea68a43ff", "name": "lively-burly-greenfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "201.249.166.171", "src_port": 50760, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 480, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:55:13.593247+00:00", "ended_at": "2026-08-27T13:55:15.678836+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "417dfc62-0fd9-43c9-a4f8-92cd41f9e472", "name": "brisk-wry-kingfisher", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 36774, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 839, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:52:51.857775+00:00", "ended_at": "2026-08-27T13:52:54.106539+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2161 }, { "id": "4e0ea59e-fb0d-4c7f-b6f3-6e1706d64a1e", "name": "plush-fickle-wombat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 40842, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 836, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:50:56.424213+00:00", "ended_at": "2026-08-27T13:50:58.096000+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "512689b9-0866-4622-8b74-f092570cdfcd", "name": "faded-nimble-turnstone", "protocol": "ssh", "channel_kind": "exec", "src_ip": "201.249.166.171", "src_port": 60362, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 339, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:49:19.683670+00:00", "ended_at": "2026-08-27T13:49:21.107205+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "4f0679fd-0de7-4821-8a97-c666f6559bf6", "name": "placid-smooth-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 48974, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 833, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:47:13.006250+00:00", "ended_at": "2026-08-27T13:47:14.698382+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2128 }, { "id": "be430fc9-3418-4120-a9a2-95dfd66d578f", "name": "glassy-languid-raven", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 53042, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 837, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:45:26.904360+00:00", "ended_at": "2026-08-27T13:45:28.490199+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "ce849b76-8909-425b-80e9-5b5c62f84f83", "name": "brisk-stormy-alpaca", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.4.145.50", "src_port": 37034, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 827, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:40:15.293996+00:00", "ended_at": "2026-08-27T13:40:16.146140+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "f00c17a5-4d18-4688-b503-11db1633996b", "name": "woven-fabled-polecat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 57484, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 327, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:10:07.280852+00:00", "ended_at": "2026-08-27T13:10:08.428732+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "eff6efd8-4e18-42b1-a81a-2b11487826dd", "name": "wry-sullen-marmot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 46524, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 734, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:08:34.534956+00:00", "ended_at": "2026-08-27T13:08:35.347484+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e2827558-c0bf-403f-887a-ceed52b5ac6e", "name": "ashen-autumn-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 52626, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 297, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:06:37.211124+00:00", "ended_at": "2026-08-27T13:06:39.140279+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "459198e0-3ad0-4842-ac57-15bd9617cee7", "name": "alpine-mindful-meerkat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 39800, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 298, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:04:33.784479+00:00", "ended_at": "2026-08-27T13:04:35.010501+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "047a388a-5b15-466e-8856-1472d37c2eed", "name": "ginger-fearless-stonechat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 60034, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 438, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:04:04.740416+00:00", "ended_at": "2026-08-27T13:04:05.848593+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "391361d1-85c4-4163-a3bc-009c9a036642", "name": "craggy-burly-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 39936, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1116, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:59:43.655151+00:00", "ended_at": "2026-08-27T12:59:44.427483+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2332 }, { "id": "fa311760-9d13-49dd-9e08-b5906e2ba25d", "name": "balmy-scarlet-koala", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59974, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 458, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:58:39.450022+00:00", "ended_at": "2026-08-27T12:58:40.512283+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b81903e5-027f-4f03-b5d6-2907a4608d6e", "name": "brazen-prairie-dipper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 34350, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 295, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:58:17.091596+00:00", "ended_at": "2026-08-27T12:58:18.000857+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "e60ce5f5-6dbd-4313-b46a-5991c59310f8", "name": "sandy-smooth-nightjar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 42206, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 742, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:56:32.739534+00:00", "ended_at": "2026-08-27T12:56:33.501179+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "c6813f20-da54-43e4-8628-5456f230fb6c", "name": "meadow-thrifty-lynx", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 44592, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 294, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:56:13.484738+00:00", "ended_at": "2026-08-27T12:56:14.446308+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "dbd209f5-dc7b-4904-92d7-6615076b6410", "name": "alpine-patient-lynx", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 53752, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:56:01.232088+00:00", "ended_at": "2026-08-27T12:56:03.197873+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "4a14eff5-6cc0-41d5-9fc0-4fa9df943ae4", "name": "gallant-coral-goose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59934, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:55:54.249532+00:00", "ended_at": "2026-08-27T12:55:55.305917+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "77fe352d-ca94-40a2-91d5-880dded9378e", "name": "oaken-curious-sable", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 43992, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 299, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:54:14.420708+00:00", "ended_at": "2026-08-27T12:54:15.991145+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "531cd024-fe1e-45ff-b7d0-72e35385721e", "name": "fierce-freckled-owl", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 49812, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 349, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:54:05.492043+00:00", "ended_at": "2026-08-27T12:54:07.607201+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "dc7fc61d-c17f-4018-ba98-b97ee9b95beb", "name": "sullen-restless-peccary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59912, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 445, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:53:15.753493+00:00", "ended_at": "2026-08-27T12:53:16.740548+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b474a105-1c8f-4b7a-a107-b6513d19cb4c", "name": "wandering-icy-narwhal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 51332, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 330, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:51:59.998119+00:00", "ended_at": "2026-08-27T12:52:01.203481+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "2be61374-7157-471c-8912-bee3a0601c04", "name": "prairie-whispering-owl", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59854, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 446, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:47:57.972467+00:00", "ended_at": "2026-08-27T12:47:59.174021+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "a91607e8-e524-40e0-9e00-a167432f342e", "name": "sullen-marine-impala", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 41434, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 347, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:47:51.603044+00:00", "ended_at": "2026-08-27T12:47:53.744422+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "5559e721-6a86-4e90-bdf4-92487a3505ca", "name": "salty-murky-fossa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 55536, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 327, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:45:53.445340+00:00", "ended_at": "2026-08-27T12:45:55.408876+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "8b312082-94b9-4a3e-a9b9-706b74821f85", "name": "dutiful-murky-petrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59826, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 442, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:45:18.685494+00:00", "ended_at": "2026-08-27T12:45:20.012052+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "39da07dd-fb38-4fce-a527-19f9da5cd42c", "name": "snowy-lawful-armadillo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 46688, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 297, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:39:56.552160+00:00", "ended_at": "2026-08-27T12:39:58.483014+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "3e59a2b6-5ca3-4b3c-a371-56c48ad903d9", "name": "crisp-honest-quoll", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 59326, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:37:49.832818+00:00", "ended_at": "2026-08-27T12:37:51.792145+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "a43d6df3-a362-41f0-ac3b-6d50b2b37097", "name": "flinty-foggy-stork", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 37116, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:33:44.889851+00:00", "ended_at": "2026-08-27T12:33:45.802782+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "76f346a1-f615-4192-8f06-bceee895d849", "name": "vigilant-eager-ferret", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 51388, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 259, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:33:36.913486+00:00", "ended_at": "2026-08-27T12:33:39.163783+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "0c76bfb4-836e-4008-83a9-7ac679dbfa15", "name": "crisp-hazel-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 59090, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 299, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:31:28.446059+00:00", "ended_at": "2026-08-27T12:31:29.412215+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e5ebfb99-0401-4147-b4b9-c5fff6839c7d", "name": "verdant-breezy-goshawk", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 53220, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 265, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:29:36.925712+00:00", "ended_at": "2026-08-27T12:29:37.877115+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "1047406f-7e04-4b83-9acb-2aca205290c8", "name": "regal-polar-gecko", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 51166, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 266, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:27:37.812022+00:00", "ended_at": "2026-08-27T12:27:39.366564+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e00e9b56-c236-4a32-a457-8a88a1fa0e97", "name": "electric-tawny-weasel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 33410, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 735, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:26:03.861784+00:00", "ended_at": "2026-08-27T12:26:05.485026+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "ef05cdd0-65b4-41d6-8783-5d75ac4d7dbb", "name": "genial-nautical-lynx", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59602, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 443, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:23:54.173175+00:00", "ended_at": "2026-08-27T12:23:55.165052+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "08df2f51-54d1-4c35-ae9f-f6a520b52ca0", "name": "valiant-glacial-porcupine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 44666, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:23:42.940114+00:00", "ended_at": "2026-08-27T12:23:44.192085+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8fcd060c-c8c5-4546-8ad4-bc9b9ab897a3", "name": "fierce-sterling-cuckoo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 52536, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 297, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:23:13.209762+00:00", "ended_at": "2026-08-27T12:23:14.733002+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "84d2a4e8-6fcc-4968-a1e4-a049d8e02664", "name": "russet-rugged-lorikeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 53984, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 330, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:21:47.348913+00:00", "ended_at": "2026-08-27T12:21:48.544087+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "5a07ff39-e5fb-4ef1-8ae6-f25237994c11", "name": "arctic-airy-vulture", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59582, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 456, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:21:15.821042+00:00", "ended_at": "2026-08-27T12:21:17.129068+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "a91ccc20-8ea6-4baf-bb5b-ebf14b1b5d42", "name": "feral-thawing-penguin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 47744, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 300, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:21:10.503023+00:00", "ended_at": "2026-08-27T12:21:12.216098+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "5b8744b2-01e2-49be-bece-36ec39409a93", "name": "brisk-blithe-bullfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 40896, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:19:44.225424+00:00", "ended_at": "2026-08-27T12:19:45.643083+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "4ce08521-74d7-484d-bd2b-50f1e132ad39", "name": "languid-dusky-flamingo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 34528, "username": "ftproot", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 261, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:15:30.385373+00:00", "ended_at": "2026-08-27T12:15:31.284296+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2307 }, { "id": "052656f7-0f3a-4553-91ff-893e15d0df4f", "name": "hushed-alpine-jaguar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 57014, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 330, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:13:37.615119+00:00", "ended_at": "2026-08-27T12:13:38.850014+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "094e7a1a-94b8-4321-8b66-12b7e420acef", "name": "wandering-jagged-nightjar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 46216, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 291, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:12:36.364067+00:00", "ended_at": "2026-08-27T12:12:37.449473+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c391edc6-1849-44c2-accc-52206383b387", "name": "calm-cobalt-armadillo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59490, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 461, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:10:25.466051+00:00", "ended_at": "2026-08-27T12:10:26.800070+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "2cebf8e2-48ac-4180-a403-6c2558213b56", "name": "dewy-ivory-bluebird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 34578, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 327, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:10:11.214918+00:00", "ended_at": "2026-08-27T12:10:12.392297+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c9f47f74-03c9-4ed8-88d9-75e2f9ccd405", "name": "polar-shaded-kea", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 41982, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 744, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:09:16.080070+00:00", "ended_at": "2026-08-27T12:09:17.503484+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "ba97293b-35e3-4029-98f9-b3d8dc862f73", "name": "mossy-whispering-bushbaby", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 39734, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 266, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:07:30.593003+00:00", "ended_at": "2026-08-27T12:07:31.628401+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "897bc932-7e0f-4cb1-bcd7-a13c7e8206ab", "name": "cobalt-jaunty-ocelot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 48700, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 290, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:06:31.484188+00:00", "ended_at": "2026-08-27T12:06:33.452428+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2293 }, { "id": "edbe3741-fa43-44ee-afff-dd246675910e", "name": "idle-mossy-gazelle", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 50798, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 300, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:04:22.495934+00:00", "ended_at": "2026-08-27T12:04:24.262453+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "7fdbcea8-d5b0-44bc-bde7-8f0f9ea61396", "name": "cosmic-subtle-wigeon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 54752, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:00:01.262277+00:00", "ended_at": "2026-08-27T12:00:02.719823+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "d53cdf74-acd9-4bbd-83fb-b23108eed00a", "name": "craggy-patient-wolverine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 55448, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 294, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:58:00.026031+00:00", "ended_at": "2026-08-27T11:58:01.921668+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "aae1788c-398f-4c09-8467-32195a70a5c0", "name": "amber-tidal-chamois", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 45858, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 732, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:57:25.006006+00:00", "ended_at": "2026-08-27T11:57:26.484519+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "4d5d54b5-edc6-428e-9c7d-75a731c96b29", "name": "wistful-patient-cassowary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 51392, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 261, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:55:38.100034+00:00", "ended_at": "2026-08-27T11:55:40.302328+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "aa97e1aa-5e37-405e-b2e6-db81e26da46f", "name": "misty-downy-greenfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59280, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 457, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:53:52.582483+00:00", "ended_at": "2026-08-27T11:53:53.880658+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "49149378-e990-4c2e-9b75-a4bd2715635e", "name": "prairie-wistful-martin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 51632, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 264, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:53:37.567910+00:00", "ended_at": "2026-08-27T11:53:39.758008+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "faf1ed23-d01e-449e-a490-07bd77bfa5a5", "name": "whispering-woven-mongoose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 47952, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 330, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:51:56.198137+00:00", "ended_at": "2026-08-27T11:51:58.401380+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "644e4b81-4b47-4b7d-8f6c-f861c58a1d6b", "name": "calm-wooded-shelduck", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 32910, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 299, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:49:46.426661+00:00", "ended_at": "2026-08-27T11:49:47.938006+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "389c32c9-156e-4ee3-8363-321d6eea2cc4", "name": "shaded-placid-eagle", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 51716, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 781, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:48:39.937153+00:00", "ended_at": "2026-08-27T11:48:41.766906+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "00030452-c690-4616-bbdc-5492e2710ee0", "name": "graceful-glacial-teal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 37640, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 347, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:48:01.797262+00:00", "ended_at": "2026-08-27T11:48:03.011742+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "cc4aff71-36c6-4253-bb14-82644f66ca46", "name": "snowy-airy-heron", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 39684, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 265, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:45:36.791237+00:00", "ended_at": "2026-08-27T11:45:38.839540+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b4cea9e1-3b11-4ff1-adaf-d947918878b5", "name": "frank-foggy-avocet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 55802, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 294, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:45:25.825292+00:00", "ended_at": "2026-08-27T11:45:27.889315+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "f0c3c9f2-c326-4b0e-aa47-ce9964411f8b", "name": "tangled-gloomy-redstart", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 51330, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 261, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:43:36.779184+00:00", "ended_at": "2026-08-27T11:43:37.774544+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6d31d880-393f-40cb-bce0-572b4babfd4d", "name": "jovial-distant-quoll", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 39682, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 291, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:43:19.708244+00:00", "ended_at": "2026-08-27T11:43:21.106677+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "1427ae0c-299a-441f-be36-4cd1f2b5d923", "name": "hazel-sandy-jerboa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59190, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 456, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:42:48.712893+00:00", "ended_at": "2026-08-27T11:42:49.880090+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2291 }, { "id": "f82edd59-1d77-4e21-aabc-38e643c9955c", "name": "steady-emerald-bobcat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 42768, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 328, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:41:54.297613+00:00", "ended_at": "2026-08-27T11:41:55.633851+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "9eac5760-2272-4284-9c94-36fd1e49ffbb", "name": "umber-twilight-goshawk", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 44376, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 265, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:41:40.284750+00:00", "ended_at": "2026-08-27T11:41:41.525679+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "3b68326b-5aa3-401b-bd27-1a060294ab3f", "name": "jovial-obsidian-kakapo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 49492, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 274, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:39:40.711783+00:00", "ended_at": "2026-08-27T11:39:41.785704+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8cfa3a5a-651c-4953-aec2-2d764a29de42", "name": "drifting-amiable-tanager", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 41464, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 329, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:38:02.282253+00:00", "ended_at": "2026-08-27T11:38:04.558531+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2139 }, { "id": "0ee2dc75-00d8-44cb-bb80-f67c2bde8732", "name": "shaded-thawing-panther", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 52936, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 304, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:35:12.681924+00:00", "ended_at": "2026-08-27T11:35:14.122034+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2128 }, { "id": "f4008271-0046-4efb-9787-d756955e2972", "name": "boreal-twilight-wagtail", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 38424, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 758, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:33:58.399131+00:00", "ended_at": "2026-08-27T11:33:59.737573+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "6227696f-f72d-4455-b05d-6bf07c9df165", "name": "gloomy-lanky-grouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 49668, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 264, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:33:34.784949+00:00", "ended_at": "2026-08-27T11:33:36.983931+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2280 }, { "id": "1000f9a7-5a10-4144-8b34-43e7dbc7b374", "name": "emerald-regal-penguin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 57586, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 295, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:33:13.248082+00:00", "ended_at": "2026-08-27T11:33:14.551311+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "08c1f23a-db2c-4621-aca2-db71ff9f4baa", "name": "fleeting-foggy-curlew", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59086, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 463, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:31:49.000113+00:00", "ended_at": "2026-08-27T11:31:50.368150+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "439ccd49-b4b1-4e21-8cc7-4c818ee8528b", "name": "loyal-vernal-pochard", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 59900, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 770, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:31:08.661148+00:00", "ended_at": "2026-08-27T11:31:10.206764+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2234 }, { "id": "05ba90af-81c7-4248-812c-218af65de5d7", "name": "rambling-kindly-ferret", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.218.67.81", "src_port": 54726, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 300, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:31:08.652883+00:00", "ended_at": "2026-08-27T11:31:09.337804+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2106 }, { "id": "75e0d1c1-2119-4298-b11c-7305bd833462", "name": "barren-western-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.148.64", "src_port": 55158, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 350, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:29:53.805813+00:00", "ended_at": "2026-08-27T11:29:54.454812+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "21e6d30b-88fb-4bb2-b82f-051f6e4f2907", "name": "meadow-humble-barbet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59058, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 458, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:28:52.029580+00:00", "ended_at": "2026-08-27T11:28:53.124626+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2238 }, { "id": "1e946322-b3b0-4a41-8174-8fdf7e3823c4", "name": "nautical-fleeting-kingfisher", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 38880, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 261, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:25:47.741804+00:00", "ended_at": "2026-08-27T11:25:48.902807+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2238 }, { "id": "91abbb7b-49ed-451c-8cfe-7e9478c5b09f", "name": "bronzed-lawful-otter", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 40558, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:25:23.670426+00:00", "ended_at": "2026-08-27T11:25:24.758400+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2216 }, { "id": "24d7c804-9fde-44f8-8e50-745fa44a1dfe", "name": "buoyant-frank-dingo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 58984, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 457, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:20:44.739478+00:00", "ended_at": "2026-08-27T11:20:45.964341+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "d0642adb-af0b-4529-9eda-cb5c44c3472a", "name": "thorny-gritty-chough", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 58958, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 446, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:18:08.352740+00:00", "ended_at": "2026-08-27T11:18:09.823471+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "08395037-5832-4e3f-ac30-55c5752178df", "name": "glacial-arctic-dunlin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 58916, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 454, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:15:26.463226+00:00", "ended_at": "2026-08-27T11:15:27.965331+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "ae0985ff-60a2-4fe7-9505-b9d26e2b9f6a", "name": "orderly-lanky-panther", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 43652, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 755, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:14:14.600211+00:00", "ended_at": "2026-08-27T11:14:15.820123+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "4ce1b0fb-5f53-4d10-8e3e-dbd643796021", "name": "spirited-dewy-hamster", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 58878, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 460, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:12:44.677709+00:00", "ended_at": "2026-08-27T11:12:45.956673+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "2b2de2d6-4bc6-4bb3-a551-2b3ef1f221f4", "name": "serene-woven-meerkat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 59536, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:11:27.267098+00:00", "ended_at": "2026-08-27T11:11:28.802420+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "952a6526-a6a7-456f-9045-e3ed0686f432", "name": "sterling-blithe-marten", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 48948, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:08:37.479205+00:00", "ended_at": "2026-08-27T11:08:38.769725+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2148 }, { "id": "0bd93430-fa3f-493c-8f5e-ffa7719fcc05", "name": "sunlit-orderly-tanager", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 58830, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:07:12.995333+00:00", "ended_at": "2026-08-27T11:07:13.977959+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2148 }, { "id": "46d56f95-b821-4afb-8d34-210d96db9b95", "name": "wandering-bitter-gibbon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 55534, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 265, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:03:57.440172+00:00", "ended_at": "2026-08-27T11:03:58.593009+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "5f489023-1027-4c61-b7d2-92cb12f9752c", "name": "subtle-peaty-lemur", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 53066, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 743, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:59:04.382355+00:00", "ended_at": "2026-08-27T10:59:05.668772+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "0511a491-8962-4b6e-9d52-4b74bded357f", "name": "deft-woven-sloth", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 36854, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 263, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:57:40.362900+00:00", "ended_at": "2026-08-27T10:57:41.025107+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2093 }, { "id": "a98b8c64-f7c7-437b-8233-3196f219467d", "name": "sterling-lucid-jay", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 46284, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 755, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:53:52.986704+00:00", "ended_at": "2026-08-27T10:53:53.797790+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "e7628936-8342-404b-a8f3-6d9306284970", "name": "seaward-crystal-vulture", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.213.238.91", "src_port": 37396, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 799, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:45:58.236494+00:00", "ended_at": "2026-08-27T10:45:58.984026+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "af896936-a490-4587-a7f3-ab81ff6b066d", "name": "smooth-brazen-martin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 48650, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 349, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T08:24:30.157713+00:00", "ended_at": "2026-08-27T08:24:32.057443+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e709c5e7-de06-47f6-b4f4-902423420575", "name": "dusky-ruddy-flamingo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 59532, "username": "root2", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 356, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T08:02:04.456470+00:00", "ended_at": "2026-08-27T08:02:06.170696+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2305 }, { "id": "0786c559-9e56-498d-ae22-98af685d2aac", "name": "brave-fabled-ptarmigan", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 39980, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 349, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T08:00:00.115200+00:00", "ended_at": "2026-08-27T08:00:01.100021+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "526ccc32-3278-43c2-8f81-18ffc9142ec7", "name": "watchful-subtle-badger", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 46544, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 325, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:51:40.258908+00:00", "ended_at": "2026-08-27T07:51:42.100928+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "94ff5a48-3683-4428-9c98-5452bc5b7406", "name": "valiant-plush-turnstone", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 48844, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 368, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:30:31.282669+00:00", "ended_at": "2026-08-27T07:30:32.695110+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "33a416c2-d44e-49ee-b200-ed7af2034aa4", "name": "lofty-prickly-ocelot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 57532, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 334, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:28:19.250693+00:00", "ended_at": "2026-08-27T07:28:21.427591+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "9d5b2901-3556-4c9b-806e-07f5bc37792c", "name": "lonesome-vaulted-mongoose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 55388, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 334, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:22:10.073480+00:00", "ended_at": "2026-08-27T07:22:11.907203+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2289 }, { "id": "8477a6bd-07cb-4fd4-979f-12cccb1b9c57", "name": "gnarled-cosmic-goose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 35846, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 325, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:20:03.763769+00:00", "ended_at": "2026-08-27T07:20:05.167051+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "abd3c6b5-7436-4da3-979d-4c48f8db5de7", "name": "subtle-steady-coyote", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 42436, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 334, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:09:47.536725+00:00", "ended_at": "2026-08-27T07:09:49.079769+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2238 }, { "id": "432ebf80-50b7-4ad3-8d3e-d2a0d938c8d6", "name": "ashen-lofty-ptarmigan", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 40314, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 334, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T07:03:36.617750+00:00", "ended_at": "2026-08-27T07:03:37.835051+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "98796246-8261-44f3-a812-1a7c50633a0e", "name": "crystal-crimson-parakeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 57732, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 350, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:59:18.510870+00:00", "ended_at": "2026-08-27T06:59:20.656529+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "cd337afe-137f-4ac9-bc9a-20e8dcbd7860", "name": "rustic-zealous-wren", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 38200, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 335, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:57:11.711848+00:00", "ended_at": "2026-08-27T06:57:13.878106+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "b40208fd-5f2f-42cf-992b-9a2614c05fa3", "name": "weathered-blithe-finch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 55604, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 335, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:52:58.776446+00:00", "ended_at": "2026-08-27T06:52:59.765840+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "8d9eac5c-44da-46cf-a5e9-5ae46d66d5c3", "name": "graceful-dappled-quail", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 36070, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 351, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:50:59.036810+00:00", "ended_at": "2026-08-27T06:51:00.435845+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2139 }, { "id": "c80a064c-9494-40b3-abd5-4f340e56be99", "name": "orderly-rapid-chickadee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 33954, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 323, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:44:42.100296+00:00", "ended_at": "2026-08-27T06:44:42.758496+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2104 }, { "id": "72dafc1e-5c2d-46a1-8017-878ce5120fd5", "name": "mellow-eager-adder", "protocol": "ssh", "channel_kind": "exec", "src_ip": "46.253.45.10", "src_port": 42658, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 325, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T06:40:44.085073+00:00", "ended_at": "2026-08-27T06:40:44.701749+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "6ac60bea-1c54-4953-bff1-ffb36751b9ad", "name": "sterling-quiet-kakapo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 37062, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 314, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:53:51.433201+00:00", "ended_at": "2026-08-27T05:53:52.777417+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e7767d99-2f3a-4355-b785-faacccfdda2b", "name": "quartz-primal-wren", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 55226, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 313, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:47:51.436453+00:00", "ended_at": "2026-08-27T05:47:53.469714+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "58ff4cae-b44a-4118-8862-2327b3d79ae9", "name": "honest-vigilant-peccary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 43386, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 323, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:43:53.133955+00:00", "ended_at": "2026-08-27T05:43:54.758512+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "f3ccc5e2-0539-4200-8222-3abf799f8e95", "name": "jolly-daring-dipper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 58808, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 313, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:41:55.054504+00:00", "ended_at": "2026-08-27T05:41:57.305487+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "a41147b0-202e-43e5-9f3e-205428a8b2b4", "name": "lunar-sandy-condor", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 42688, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 326, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:39:55.667521+00:00", "ended_at": "2026-08-27T05:39:57.381533+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2300 }, { "id": "5051a227-a361-4f9d-87af-aec86904a535", "name": "gnarled-glassy-gerbil", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 38680, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 332, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:33:51.635172+00:00", "ended_at": "2026-08-27T05:33:53.597740+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2300 }, { "id": "81381a86-19b8-4448-9172-d584b743fa7b", "name": "bronzed-russet-penguin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 37166, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 316, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:29:57.271815+00:00", "ended_at": "2026-08-27T05:29:58.450742+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b0a180a8-18a9-40e2-a335-e1a032c0f286", "name": "seaward-candid-cassowary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 53644, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 313, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:25:48.520057+00:00", "ended_at": "2026-08-27T05:25:50.639940+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "e5574279-3724-4e92-ba39-eab1e8dc9035", "name": "valiant-tawny-tinamou", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 48054, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 322, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:21:36.906836+00:00", "ended_at": "2026-08-27T05:21:38.907844+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "f157b3ed-5a6b-47d8-a155-d1f9a5950881", "name": "knotted-umber-shelduck", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 51482, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 323, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:19:33.158493+00:00", "ended_at": "2026-08-27T05:19:34.654119+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c1b85829-221e-438c-b29b-5130ef5bb391", "name": "brave-fabled-gull", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 37004, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 307, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:17:34.629781+00:00", "ended_at": "2026-08-27T05:17:36.277194+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "42c210ed-e913-4c0c-97db-e37a7652d4ca", "name": "marine-deft-hoopoe", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 36426, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 322, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:15:29.696246+00:00", "ended_at": "2026-08-27T05:15:31.302382+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "54797db9-35cd-4ca4-9cb6-71d62cdaf86f", "name": "airy-tangled-shelduck", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 42096, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 332, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:11:33.479653+00:00", "ended_at": "2026-08-27T05:11:34.974885+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "f2b037a4-f809-48ec-ab8c-f4dae8862aae", "name": "primal-earnest-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 33842, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 326, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T05:07:34.182813+00:00", "ended_at": "2026-08-27T05:07:35.239789+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "99818851-7ea4-4d62-913b-65273d776767", "name": "barren-airy-dolphin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 42160, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 325, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:47:24.670832+00:00", "ended_at": "2026-08-27T04:47:26.373253+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2258 }, { "id": "8d1d44ba-d548-40c2-9bff-c2694f2ca2bd", "name": "dapper-windswept-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 43532, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 311, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:45:24.577959+00:00", "ended_at": "2026-08-27T04:45:25.818090+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "ae3bef40-401d-4101-a77c-049085b2d196", "name": "emerald-shifting-agouti", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 48990, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 314, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:41:26.191133+00:00", "ended_at": "2026-08-27T04:41:27.762207+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2227 }, { "id": "9e90a36e-8ad2-413c-9459-9fd848fb95bf", "name": "fearless-sleepy-bunting", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 53292, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 320, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:31:21.052647+00:00", "ended_at": "2026-08-27T04:31:23.085115+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "f481d93a-a18e-4bc4-9505-49c6d36c05ab", "name": "leafy-pleasant-macaw", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 58734, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 326, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:25:16.264465+00:00", "ended_at": "2026-08-27T04:25:17.694392+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2139 }, { "id": "a1bab6d0-ccb3-46ea-bc7e-612c4bdb60c7", "name": "somber-balmy-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "2.26.86.177", "src_port": 33976, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 309, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T04:19:17.948751+00:00", "ended_at": "2026-08-27T04:19:18.567224+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2106 }, { "id": "644ae93a-a02a-41b5-8337-394ddc6f16f0", "name": "russet-courtly-jackdaw", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 49912, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 547, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T02:33:20.602582+00:00", "ended_at": "2026-08-27T02:33:21.281889+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "a0d34dad-6286-40f0-9fff-5ff2ffb87d08", "name": "zealous-lawful-chickadee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 34832, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 522, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T02:27:02.181397+00:00", "ended_at": "2026-08-27T02:27:03.575059+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "eb077dd9-d37c-4314-ba6d-ceb3d85437a3", "name": "gritty-bold-walrus", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 59286, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 551, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T02:17:40.565599+00:00", "ended_at": "2026-08-27T02:17:41.267934+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "57779227-83e8-43a5-81d7-75cd3369efbb", "name": "glacial-hearty-godwit", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 46424, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 560, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T02:03:29.032587+00:00", "ended_at": "2026-08-27T02:03:30.102092+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "3c91960f-9386-47a0-ac2e-315e750291ea", "name": "coral-salty-bowerbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 59792, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 543, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T02:00:16.565060+00:00", "ended_at": "2026-08-27T02:00:17.631058+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "5f84b496-5c89-47c9-b585-87bbb34b6e9b", "name": "rugged-idle-chamois", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 42640, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 515, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T01:57:01.767425+00:00", "ended_at": "2026-08-27T01:57:02.861508+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "66d7fd29-009f-483e-9c71-fd43eb389e87", "name": "fierce-glacial-falcon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 33574, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 567, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T01:23:09.177870+00:00", "ended_at": "2026-08-27T01:23:10.500250+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "bfcb867e-cf3f-4e83-b971-4cb292be2b4a", "name": "grassy-snowy-wallaby", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 36980, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 520, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T01:19:50.901302+00:00", "ended_at": "2026-08-27T01:19:52.508860+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "633faf4c-a0a3-4be5-b02f-5141979685ad", "name": "dapper-nimble-hyrax", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 56552, "username": "root2", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 547, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T01:04:49.081590+00:00", "ended_at": "2026-08-27T01:04:50.555496+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2270 }, { "id": "8bb1840d-1c97-4d2c-b932-11905850fd71", "name": "windswept-civil-francolin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 43432, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 555, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:58:29.699246+00:00", "ended_at": "2026-08-27T00:58:31.016165+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2247 }, { "id": "9c9204b5-b416-4d6d-b3d1-eccace0e90c5", "name": "boreal-serene-lynx", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 45992, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 544, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:55:24.223136+00:00", "ended_at": "2026-08-27T00:55:25.280584+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2238 }, { "id": "2ef49375-1827-4419-971a-07984cb2a427", "name": "quartz-crimson-whimbrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 57234, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 535, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:42:56.877146+00:00", "ended_at": "2026-08-27T00:42:57.957604+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "c9ef5156-8586-4eae-9c3d-5a91117b00e8", "name": "forlorn-quiet-impala", "protocol": "ssh", "channel_kind": "exec", "src_ip": "97.74.87.152", "src_port": 33282, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 742, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:38:36.484406+00:00", "ended_at": "2026-08-27T00:38:37.325893+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "1d3ba961-9947-47ed-8fd6-6400b59e5ee3", "name": "solar-rapid-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 56892, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 522, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:33:42.846708+00:00", "ended_at": "2026-08-27T00:33:44.173413+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2161 }, { "id": "b6208ed3-6316-446d-9834-3837e3d83399", "name": "nautical-graceful-chinchilla", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 58962, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 515, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:30:43.803559+00:00", "ended_at": "2026-08-27T00:30:45.265857+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "5edb1ccb-d4dc-4fe7-b301-528eb53018b3", "name": "frank-dappled-cougar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 50422, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 581, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:21:10.422459+00:00", "ended_at": "2026-08-27T00:21:11.831471+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "d8569d23-7d3d-4484-a143-bef4fc61640a", "name": "jaunty-northern-boar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 34414, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 548, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T00:14:46.269218+00:00", "ended_at": "2026-08-27T00:14:47.160675+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "48a02821-9c28-49b2-a275-dbf93718a57c", "name": "northern-diligent-kea", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 57256, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:54:02.157985+00:00", "ended_at": "2026-08-26T22:54:03.018766+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "22fe2092-f0d9-4d16-894b-ecbb034222d0", "name": "velvet-burly-oriole", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 59282, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:48:14.443094+00:00", "ended_at": "2026-08-26T22:48:15.808304+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "4e719400-061f-4e49-adcd-cf9a46eb27dc", "name": "candid-diligent-cougar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 41206, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:40:30.789721+00:00", "ended_at": "2026-08-26T22:40:31.645165+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "234121c6-c9e6-48f3-b120-fc8473397bec", "name": "prairie-thawing-blackbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 50274, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:36:31.926723+00:00", "ended_at": "2026-08-26T22:36:33.135610+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8889b794-3420-499b-ba77-e0fca6219a78", "name": "bitter-vernal-plover", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 51584, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:32:36.517304+00:00", "ended_at": "2026-08-26T22:32:37.388096+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "f13ddc6a-8276-4281-b3e3-e91d11f18595", "name": "fringed-canny-pheasant", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 48524, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:28:36.867877+00:00", "ended_at": "2026-08-26T22:28:38.389448+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "c8627d04-62b1-494d-82ff-b6cc011a3e3a", "name": "lawful-woven-merlin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 54148, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:18:25.699676+00:00", "ended_at": "2026-08-26T22:18:27.811255+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "7c80ea31-a5d7-47d8-9d64-fa955b5c95c6", "name": "glassy-steady-raven", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 34022, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:14:40.341165+00:00", "ended_at": "2026-08-26T22:14:41.446011+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "90c527d1-48c6-4a7e-b55d-45fe617f00d2", "name": "twilight-salty-skua", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 52062, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:12:36.684422+00:00", "ended_at": "2026-08-26T22:12:38.672663+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "bb42f020-30f3-48f4-ba69-533aac8acef4", "name": "dapper-frosty-kestrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 37444, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:10:41.273002+00:00", "ended_at": "2026-08-26T22:10:42.385536+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6d235e27-e165-46dc-8ac2-95f6bf835fed", "name": "sterling-craggy-gibbon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 37062, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:08:43.418751+00:00", "ended_at": "2026-08-26T22:08:44.723626+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "5c3a7c5e-09ab-45fb-96f1-72a11c840af0", "name": "lively-diligent-manatee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 50540, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T22:00:42.826853+00:00", "ended_at": "2026-08-26T22:00:44.379794+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "910bee72-8600-4d52-af3a-d73a00585467", "name": "coral-lively-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 40922, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 70, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:54:51.098099+00:00", "ended_at": "2026-08-26T21:54:51.967026+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "e0a23090-474a-4bcc-b4e2-c83a6a258114", "name": "dewy-faded-nightjar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 45852, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 68, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:50:48.908832+00:00", "ended_at": "2026-08-26T21:50:50.825332+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2260 }, { "id": "19a88dac-d478-40f2-a4ab-5ecb2d32a4d4", "name": "bold-nameless-cuckoo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 56664, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 71, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:46:42.168677+00:00", "ended_at": "2026-08-26T21:46:44.366812+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2238 }, { "id": "4cd4cfa2-a3e0-4e5d-96a9-2f2538ed1b79", "name": "placid-emerald-springbok", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 39934, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:42:51.688062+00:00", "ended_at": "2026-08-26T21:42:53.178355+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2216 }, { "id": "f94fc549-d7ec-40c8-a223-8b20c6e0ed4f", "name": "lawful-merry-toucan", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 44310, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 68, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:40:48.158444+00:00", "ended_at": "2026-08-26T21:40:49.292764+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2203 }, { "id": "7db919dd-d72b-4961-897a-fa558ce6d909", "name": "courtly-dewy-okapi", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 57444, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 70, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:38:55.902990+00:00", "ended_at": "2026-08-26T21:38:57.202707+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "bb45dbdb-4045-4094-9ed3-6209e9e31690", "name": "glacial-vernal-goshawk", "protocol": "ssh", "channel_kind": "exec", "src_ip": "41.111.227.10", "src_port": 51206, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 508, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:37:13.185250+00:00", "ended_at": "2026-08-26T21:37:13.851923+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "0f22c5aa-bc0d-4de4-92dc-df46039b662f", "name": "painted-wiry-wren", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 47040, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:35:05.727119+00:00", "ended_at": "2026-08-26T21:35:07.870729+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2183 }, { "id": "5e466ecf-96c8-48a2-81bb-9aa6878ab1fe", "name": "forlorn-airy-plover", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 49734, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:31:03.393133+00:00", "ended_at": "2026-08-26T21:31:05.334337+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "8d3d7962-2361-41fb-b214-58651d26d07b", "name": "pewter-gallant-walrus", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 55372, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:29:02.848236+00:00", "ended_at": "2026-08-26T21:29:04.782689+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2150 }, { "id": "1fec95c7-044b-4fc2-be60-59b63ff187be", "name": "vernal-peaty-teal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "129.121.114.225", "src_port": 35232, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 70, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T21:25:07.667501+00:00", "ended_at": "2026-08-26T21:25:09.073224+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2128 }, { "id": "e5bbe61c-4330-4c76-b8b7-169e1a52688c", "name": "wistful-solemn-capuchin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 58454, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 540, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T18:28:31.967852+00:00", "ended_at": "2026-08-26T18:28:33.184528+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "489fe293-0c72-4ce4-ad63-285e100aebb5", "name": "primal-indigo-lemur", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 52828, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 512, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T18:25:33.989776+00:00", "ended_at": "2026-08-26T18:25:35.452780+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "33d09e0a-72d7-4661-aaad-ca12bd5e1b36", "name": "gnarled-slender-sandpiper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 55992, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 536, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T18:16:36.587288+00:00", "ended_at": "2026-08-26T18:16:38.154660+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "015510ba-cea4-469c-9467-beeb6085312d", "name": "mellow-cheerful-moose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 47128, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 542, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T18:04:40.564645+00:00", "ended_at": "2026-08-26T18:04:41.652112+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "67859af0-a50c-42d2-acee-a97ec9efad1f", "name": "bronzed-glassy-lapwing", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 34416, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 551, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T18:01:46.915015+00:00", "ended_at": "2026-08-26T18:01:48.495916+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6f5791c3-fba9-4d8c-93d1-ac54ecc14cfc", "name": "bashful-civil-jaguar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 39658, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 551, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:58:46.871208+00:00", "ended_at": "2026-08-26T17:58:47.874485+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "42c8c558-be26-41de-bb4f-a2857d57b4d0", "name": "somber-frugal-raven", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 45384, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 527, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:55:47.776042+00:00", "ended_at": "2026-08-26T17:55:48.730455+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "93ef68b0-34e4-4cb8-9604-d7f2d61343c0", "name": "bitter-amiable-goldfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 59452, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 536, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:37:47.927305+00:00", "ended_at": "2026-08-26T17:37:49.152592+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "ca44722c-8e24-4640-ac8d-99a7a80da1f9", "name": "sincere-weathered-squirrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 59808, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 549, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:28:55.684304+00:00", "ended_at": "2026-08-26T17:28:57.131528+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "4218c19a-437a-497c-96ad-c76533e859b1", "name": "lawful-sturdy-serval", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 45024, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 526, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:23:07.545343+00:00", "ended_at": "2026-08-26T17:23:08.968897+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "2092c945-ba1d-4b8d-91c9-6ad647fcdf48", "name": "faded-jolly-redshank", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 44208, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 539, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:20:13.004124+00:00", "ended_at": "2026-08-26T17:20:14.511849+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "44c50a88-9dbd-49f3-b57a-76d64fdc0a5d", "name": "genial-mighty-cormorant", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 50650, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 551, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:17:22.479193+00:00", "ended_at": "2026-08-26T17:17:23.573581+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "67ee518b-6e71-49b1-afcc-a116e782369c", "name": "brazen-wry-hoopoe", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 37428, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 527, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:14:22.643635+00:00", "ended_at": "2026-08-26T17:14:23.689337+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "29b3df17-c552-48fc-bff5-8d8f330f9603", "name": "stoic-creaky-porcupine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 43112, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 522, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T17:08:26.813864+00:00", "ended_at": "2026-08-26T17:08:28.398127+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "b64052af-e251-4e94-bc05-5ff4676c7fa5", "name": "dusky-tawny-parakeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 53834, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 534, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:56:41.435014+00:00", "ended_at": "2026-08-26T16:56:42.891316+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "399c04e2-db52-4a37-8947-ae9cba25946a", "name": "weathered-noble-tern", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 43468, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 542, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:47:42.889485+00:00", "ended_at": "2026-08-26T16:47:44.105346+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "a658bcf5-063f-4dff-8e9a-afd117f622cb", "name": "sturdy-glacial-quokka", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 54946, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 499, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:44:52.681323+00:00", "ended_at": "2026-08-26T16:44:54.097677+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2236 }, { "id": "dc749601-cd80-4f73-991b-77c916554db9", "name": "crystal-sandy-siskin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 56228, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 526, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:41:54.034654+00:00", "ended_at": "2026-08-26T16:41:55.391110+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2227 }, { "id": "0cf5ac88-aba7-4987-86b4-c7729d5c142d", "name": "sincere-lively-vole", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 40512, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 522, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:39:02.987858+00:00", "ended_at": "2026-08-26T16:39:04.412047+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2214 }, { "id": "b91537f6-9ff1-4eeb-af5b-04d617557b37", "name": "airy-honest-chough", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 40950, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 496, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:33:02.375277+00:00", "ended_at": "2026-08-26T16:33:03.404191+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "7309f578-a866-4771-bdff-e5bd2781e96b", "name": "blunt-honest-martin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 37414, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 512, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:24:06.570257+00:00", "ended_at": "2026-08-26T16:24:08.047062+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "f57ca815-b782-4e35-be98-071ce4ec1f9d", "name": "somber-mottled-snipe", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.153.204.5", "src_port": 59328, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 534, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:14:52.536092+00:00", "ended_at": "2026-08-26T16:14:53.834919+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2126 }, { "id": "781f0fa7-6ac3-47ca-8792-2ab888a6ad06", "name": "leafy-shifting-vulture", "protocol": "ssh", "channel_kind": "exec", "src_ip": "14.225.173.146", "src_port": 35112, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1424, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T16:02:51.702893+00:00", "ended_at": "2026-08-26T16:02:52.866853+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "5b25c425-c234-4dc7-bda4-d6e2658d8df6", "name": "quartz-wiry-skua", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40859, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 748, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:49:09.436344+00:00", "ended_at": "2026-08-26T15:49:10.787654+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "238c40fd-2f41-4e7b-8be5-5c55bffbf280", "name": "lofty-golden-shrike", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40856, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 751, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:46:24.778927+00:00", "ended_at": "2026-08-26T15:46:26.192802+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8f7bd20e-1159-44f4-bb63-40cbc6eeec44", "name": "vaulted-umber-chough", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40850, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 762, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:41:00.967613+00:00", "ended_at": "2026-08-26T15:41:02.413847+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6749b97d-7b2e-42a8-bdc8-99cfa995d58a", "name": "wooded-mellow-lemur", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40838, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 757, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:30:07.414904+00:00", "ended_at": "2026-08-26T15:30:08.845919+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "cde989e9-5ca8-4956-b3d5-de0e287d64bf", "name": "regal-dusty-civet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40835, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 762, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:27:28.014575+00:00", "ended_at": "2026-08-26T15:27:29.715057+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "cd14acdb-0532-4637-a57b-d4614e87e7b8", "name": "nimble-gritty-puffin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40820, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 748, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:13:47.024035+00:00", "ended_at": "2026-08-26T15:13:48.740742+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "b7e8f21d-e68e-4ba7-a684-1d1ce330c1a2", "name": "thawing-fleeting-egret", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 52494, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 300, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:11:24.442968+00:00", "ended_at": "2026-08-26T15:11:26.716417+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8a19b655-7d8b-4913-9ce0-f0eea4c236dc", "name": "velvet-spirited-camel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40817, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 754, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:11:09.396540+00:00", "ended_at": "2026-08-26T15:11:11.023513+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "0d61be63-1a1c-4452-9b14-fc7706e888d9", "name": "thorny-sincere-gull", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40811, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 784, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:05:04.993523+00:00", "ended_at": "2026-08-26T15:05:06.290459+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "9a9314ef-938f-4455-a66f-2e10dba5a5a7", "name": "candid-feathered-vole", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 53630, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 292, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:03:37.292615+00:00", "ended_at": "2026-08-26T15:03:38.797555+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "0848e902-05b2-401b-b626-d708e9461d50", "name": "tangled-prickly-cicada", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 60838, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 295, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T15:01:36.456019+00:00", "ended_at": "2026-08-26T15:01:38.513231+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6950cee9-b1b9-44ad-919f-ff2cce7095de", "name": "fabled-sincere-flamingo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40805, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 754, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:59:12.507667+00:00", "ended_at": "2026-08-26T14:59:13.746782+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c6f68bac-2808-410e-8b8f-2d45cb853f27", "name": "opal-silent-fennec", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 63282, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 287, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:55:31.523076+00:00", "ended_at": "2026-08-26T14:55:33.134250+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "a5ea950c-51c3-4e1a-91ab-c3d39f9eae95", "name": "earnest-cosmic-springbok", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 50314, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 272, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:51:34.958005+00:00", "ended_at": "2026-08-26T14:51:35.881700+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c7314bfa-f3f5-4b8f-b033-8ec79289284e", "name": "austere-sincere-brambling", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40734, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 761, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:51:09.138548+00:00", "ended_at": "2026-08-26T14:51:10.441004+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b7490650-98ab-4412-ba2f-85d20b650a71", "name": "amiable-nautical-kea", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 64768, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 291, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:49:39.026323+00:00", "ended_at": "2026-08-26T14:49:40.174581+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "b071e9c4-ac61-4511-9399-3afd4d66dcdb", "name": "proud-lively-dipper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40731, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 748, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:48:13.256128+00:00", "ended_at": "2026-08-26T14:48:14.554042+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "79c82dc6-93a6-4f32-a42f-99c5dce541c0", "name": "jaunty-seaward-impala", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 52042, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 295, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:45:40.096591+00:00", "ended_at": "2026-08-26T14:45:41.726099+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "7598bea9-4da1-47d8-b026-d1a203a68e23", "name": "sincere-tender-tanager", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40725, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 747, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:42:31.000515+00:00", "ended_at": "2026-08-26T14:42:32.380142+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "8cec4606-d4d9-4140-bc74-2b5a8e888a1a", "name": "scarlet-solar-gerbil", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 51730, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 268, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:41:33.138217+00:00", "ended_at": "2026-08-26T14:41:34.797637+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "fb4ca0ef-db05-46c4-b9fe-4cb668151541", "name": "supple-quiet-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40722, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 749, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:39:42.710893+00:00", "ended_at": "2026-08-26T14:39:44.286402+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "573b33b6-3eae-458e-b5ca-03759bf9cb6d", "name": "loyal-dusty-plover", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 62216, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 292, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:39:21.006538+00:00", "ended_at": "2026-08-26T14:39:22.744954+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "bdb39c75-9d9c-411a-a462-848f8b63369a", "name": "ashen-humble-finch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 58144, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 301, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:37:21.409105+00:00", "ended_at": "2026-08-26T14:37:22.312259+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "89f9cf55-6093-45e0-a19e-bd2df5e61d1b", "name": "golden-frugal-pangolin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 64812, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 287, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:35:22.389541+00:00", "ended_at": "2026-08-26T14:35:23.705048+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "24d89739-dec6-4187-8b9e-2e8bf306c2a3", "name": "jolly-sunlit-caracal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40716, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 746, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:34:15.066072+00:00", "ended_at": "2026-08-26T14:34:16.782068+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "bed0f065-88a9-4511-b220-7486a531d149", "name": "jolly-brisk-ouzel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 64060, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 291, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:27:19.683969+00:00", "ended_at": "2026-08-26T14:27:21.927711+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6db6a079-e5ba-43a2-9b1b-6773fc1a40c7", "name": "placid-proud-greenfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40707, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 748, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:25:56.614579+00:00", "ended_at": "2026-08-26T14:25:57.789293+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "da7a776d-37a1-4814-9fd8-c934d2057490", "name": "slender-tawny-sloth", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 60544, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 282, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:23:21.970160+00:00", "ended_at": "2026-08-26T14:23:23.893045+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "5c5877b0-9da7-4d45-97ba-2a6981f8117e", "name": "diligent-ivory-owl", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40701, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 755, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:20:30.024042+00:00", "ended_at": "2026-08-26T14:20:31.672634+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2260 }, { "id": "d2cb77e3-5717-4532-97d7-953fcf646c32", "name": "cosmic-frank-finch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40698, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 747, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:17:49.196284+00:00", "ended_at": "2026-08-26T14:17:50.752858+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "9b420018-126a-46e8-b24f-51c87043de91", "name": "autumn-amiable-serval", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 62728, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 272, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T14:01:35.432864+00:00", "ended_at": "2026-08-26T14:01:36.957850+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2227 }, { "id": "59302a61-2612-4208-880c-57bc9e169e91", "name": "windswept-airy-jerboa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 56754, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 290, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:55:48.892489+00:00", "ended_at": "2026-08-26T13:55:50.492556+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "6e24c3f8-99c5-4d18-b095-14b6b033502d", "name": "pleasant-tranquil-gerbil", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 60196, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 301, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:49:41.900181+00:00", "ended_at": "2026-08-26T13:49:43.221617+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "7174fda1-315e-4d85-be7e-621af5c57b3e", "name": "autumn-craggy-weasel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 51900, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 925, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:44:17.298460+00:00", "ended_at": "2026-08-26T13:44:18.623063+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "42543b63-fc4b-40b7-9a13-ec41d327ec93", "name": "fickle-rugged-stork", "protocol": "ssh", "channel_kind": "exec", "src_ip": "157.245.34.56", "src_port": 59310, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 297, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:43:44.740814+00:00", "ended_at": "2026-08-26T13:43:46.271835+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2128 }, { "id": "858a0932-be08-43d0-afe3-adec50fe91cb", "name": "loyal-lucid-civet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 51696, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 934, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:41:01.736509+00:00", "ended_at": "2026-08-26T13:41:03.499969+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "6ab027d5-570c-44cc-ba48-b115e3f0a633", "name": "gloomy-early-wallaby", "protocol": "ssh", "channel_kind": "exec", "src_ip": "168.167.228.123", "src_port": 40594, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 750, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:38:07.941746+00:00", "ended_at": "2026-08-26T13:38:08.705878+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2093 }, { "id": "da994aa2-008d-4b69-b05f-7ceeb86a64fa", "name": "chilly-deft-martin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "125.142.37.91", "src_port": 46416, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 632, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:21:48.264018+00:00", "ended_at": "2026-08-26T13:21:49.062135+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2093 }, { "id": "9341314a-c666-428a-ad30-b5e08049bc6c", "name": "wry-tender-civet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 50494, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1209, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:21:47.359998+00:00", "ended_at": "2026-08-26T13:21:48.920783+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "1261f400-7a1d-4efd-b2a7-d9feaf63e031", "name": "autumn-cobalt-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 50286, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 951, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:18:24.164394+00:00", "ended_at": "2026-08-26T13:18:26.224187+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "00394236-bcb6-4a9b-af1f-1c221f8e2a22", "name": "faded-muted-grebe", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 50090, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1167, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:15:06.296677+00:00", "ended_at": "2026-08-26T13:15:08.206951+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "08b1ed45-b4fb-4c63-9613-aaea3cbca3b7", "name": "murky-wandering-cassowary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 49888, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1202, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T13:11:42.028828+00:00", "ended_at": "2026-08-26T13:11:47.309219+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "c4001c4a-2129-414a-9db4-36677973a1a1", "name": "drifting-cosmic-lark", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 49088, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 934, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:59:15.601396+00:00", "ended_at": "2026-08-26T12:59:17.012599+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "11b65d9d-09a8-42c4-8f36-6094233473bc", "name": "frugal-plush-caracal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 48882, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 856, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:56:23.726104+00:00", "ended_at": "2026-08-26T12:56:24.969226+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "eb27f786-f25a-4b14-851a-9c3d83201752", "name": "russet-granite-pika", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 47094, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 844, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:31:47.892818+00:00", "ended_at": "2026-08-26T12:31:49.654955+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "0d06f611-316d-4998-9197-dca43e2f1d03", "name": "autumn-gleaming-blackbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 46894, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 879, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:28:54.695359+00:00", "ended_at": "2026-08-26T12:28:56.430434+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "90967c2e-631d-4651-b13d-c1a3a302f9ba", "name": "hushed-daring-anteater", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 46696, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 878, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:26:11.600364+00:00", "ended_at": "2026-08-26T12:26:12.993685+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "a79afc1b-5d67-4372-91b6-cf26228ad2c8", "name": "verdant-lanky-wallaby", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 46502, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 859, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:23:35.889598+00:00", "ended_at": "2026-08-26T12:23:37.501096+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "8214b350-ff89-48e2-8fc9-1322ba610469", "name": "proud-granite-hyrax", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 45894, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 841, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:15:22.489710+00:00", "ended_at": "2026-08-26T12:15:23.905239+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2282 }, { "id": "41ec9c90-cb07-4820-bc0c-b2b99517f0b6", "name": "chilly-ancient-fossa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 45700, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 857, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:12:36.692031+00:00", "ended_at": "2026-08-26T12:12:38.092738+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2271 }, { "id": "e0c20725-4736-4499-b6ce-c3d0651e2e49", "name": "seaward-rapid-agouti", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 41226, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 589, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T12:12:32.222078+00:00", "ended_at": "2026-08-26T12:12:33.043134+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "a6c25b61-030a-4071-9e90-ee0ef194f6e3", "name": "bashful-lawful-peccary", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 44498, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 860, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:56:22.503415+00:00", "ended_at": "2026-08-26T11:56:24.329787+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "72340123-0afd-4c21-94bc-705c262a2b6a", "name": "western-blunt-vervet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 44304, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 873, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:53:43.692781+00:00", "ended_at": "2026-08-26T11:53:45.296546+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "f7d9723b-5f85-4c76-b6e4-0d452896095e", "name": "wooded-amiable-kea", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 36580, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 587, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:46:38.727558+00:00", "ended_at": "2026-08-26T11:46:40.939886+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "949d19fb-cc2f-454b-ae88-9ccf8f1e9195", "name": "cheerful-clever-condor", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 43102, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 862, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:37:44.723066+00:00", "ended_at": "2026-08-26T11:37:45.896430+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2128 }, { "id": "297dd5dd-940c-4ec1-8e0e-cdc4a634979f", "name": "gleaming-vernal-hyrax", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 52474, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 943, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:37:43.080918+00:00", "ended_at": "2026-08-26T11:37:43.851050+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "ea3cf1e8-49bb-47b6-9a86-22b48b7b6619", "name": "opal-primal-thrush", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 42904, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 870, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:34:56.688747+00:00", "ended_at": "2026-08-26T11:34:58.126427+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "34f80c5d-ecc3-4c4c-8732-2facfc5f8ece", "name": "gnarled-airy-hummingbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.167.89.222", "src_port": 42708, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 844, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:32:10.883641+00:00", "ended_at": "2026-08-26T11:32:11.680381+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2106 }, { "id": "015fe738-86d0-4600-8fc1-ce1862f46dff", "name": "sullen-rugged-raven", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 46886, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 585, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:07:25.095860+00:00", "ended_at": "2026-08-26T11:07:25.894192+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2291 }, { "id": "79db8206-616c-4adf-b4c2-57332374ccf1", "name": "pristine-freckled-pangolin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 33232, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 604, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T11:02:52.624467+00:00", "ended_at": "2026-08-26T11:02:53.299019+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2280 }, { "id": "0582e41e-a6e7-44ff-a77a-c270af0429d1", "name": "diligent-bold-tanager", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 40602, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 617, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T10:54:26.556075+00:00", "ended_at": "2026-08-26T10:54:27.999283+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2271 }, { "id": "01c754e0-3b90-438c-bada-aba809ae3f87", "name": "flinty-alpine-loris", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 41778, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 589, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T10:50:02.070375+00:00", "ended_at": "2026-08-26T10:50:02.781088+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2260 }, { "id": "f3c633b0-6488-4717-a0f4-c399e02644ca", "name": "cheerful-inland-parakeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 36286, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 616, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T10:19:39.338741+00:00", "ended_at": "2026-08-26T10:19:41.087847+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2194 }, { "id": "b33232f9-4f46-4df0-a678-2c4b872f85c7", "name": "forlorn-idle-tapir", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 35348, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 587, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T10:06:36.905884+00:00", "ended_at": "2026-08-26T10:06:37.685000+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "7c1f6698-5755-41d9-a772-0cda63287b4a", "name": "creaky-diligent-stonechat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.12.137", "src_port": 59822, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 591, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T09:18:23.297909+00:00", "ended_at": "2026-08-26T09:18:24.030659+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "74526c11-02f0-421e-bc64-60a9b9ce3ee7", "name": "gilded-glacial-wombat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.143.238.100", "src_port": 53956, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 257, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T05:47:19.457008+00:00", "ended_at": "2026-08-26T05:47:19.533615+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3807 }, { "id": "c0f1f91f-14eb-443c-927e-66e77cd79df1", "name": "golden-genial-skink", "protocol": "ssh", "channel_kind": "exec", "src_ip": "165.154.224.160", "src_port": 56948, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 648, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-26T05:01:27.203810+00:00", "ended_at": "2026-08-26T05:01:27.406284+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3963 }, { "id": "02d24a53-b8a1-475b-9430-57bff8df9935", "name": "dapper-umber-bullfinch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "107.150.103.210", "src_port": 26246, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 250, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-25T21:16:25.635410+00:00", "ended_at": "2026-08-25T21:16:25.703055+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3446 }, { "id": "363f34e1-fc48-42df-a921-01e431b5c77e", "name": "wandering-coastal-squirrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "124.156.173.135", "src_port": 51870, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 673, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-25T19:55:06.836657+00:00", "ended_at": "2026-08-25T19:55:07.041931+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3981 }, { "id": "02a89e4b-0910-4990-96c9-bce5bab983df", "name": "restless-vigilant-skua", "protocol": "ssh", "channel_kind": "exec", "src_ip": "216.10.242.215", "src_port": 49222, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 618, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-25T12:51:28.687254+00:00", "ended_at": "2026-08-25T12:51:28.877929+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3437 }, { "id": "720af6ad-98e8-4b27-a642-3b871d4b908a", "name": "dapper-clever-hummingbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "43.165.190.208", "src_port": 34868, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 558, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T22:07:11.630448+00:00", "ended_at": "2026-08-24T22:07:11.802058+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 6826 }, { "id": "33711d99-bb98-4dec-8455-b964f5c6c109", "name": "ashen-languid-capuchin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "43.153.205.159", "src_port": 39638, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 782, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T22:04:42.105280+00:00", "ended_at": "2026-08-24T22:04:42.350865+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3989 }, { "id": "f6f3ca3f-8bb8-4346-9617-014935b9dd74", "name": "burly-patient-vicuna", "protocol": "ssh", "channel_kind": "exec", "src_ip": "141.95.54.130", "src_port": 59206, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 308, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T21:25:17.339639+00:00", "ended_at": "2026-08-24T21:25:17.428604+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 4003 }, { "id": "67d5f6ce-be29-48d2-a412-7fdabda56506", "name": "solemn-leafy-springbok", "protocol": "ssh", "channel_kind": "exec", "src_ip": "87.106.29.151", "src_port": 41442, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 320, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T19:09:01.160303+00:00", "ended_at": "2026-08-24T19:09:01.247837+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 4113 }, { "id": "ff4b92c2-cab9-4837-b1f0-be48191f942b", "name": "granite-wandering-skylark", "protocol": "ssh", "channel_kind": "exec", "src_ip": "5.3.154.197", "src_port": 33954, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 409, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T04:39:09.822503+00:00", "ended_at": "2026-08-24T04:39:09.946537+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3490 }, { "id": "139edc25-ff78-447f-ad87-3aa1c14591d2", "name": "alpine-verdant-linnet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "223.17.1.118", "src_port": 47578, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 692, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T03:17:41.660805+00:00", "ended_at": "2026-08-24T03:17:41.876558+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 6575 }, { "id": "4de63a5d-4df9-4aff-bcb2-ce12dde2b67a", "name": "bashful-crimson-penguin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "190.60.43.27", "src_port": 53456, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 285, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-24T00:59:17.188346+00:00", "ended_at": "2026-08-24T00:59:17.266471+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3445 }, { "id": "ab1b937d-a056-4f39-9c0c-f216b9b615b6", "name": "nameless-murky-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "163.7.3.26", "src_port": 58822, "username": "root", "client_version": "SSH-2.0-libssh_0.12.0", "auth_attempts": 1, "automation": "bot", "think_ms": 763, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T21:19:15.453482+00:00", "ended_at": "2026-08-23T21:19:15.691786+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3571 }, { "id": "35cfb8eb-0bf7-4f3c-8e82-7bc92dacb0f0", "name": "steady-cheerful-ibis", "protocol": "ssh", "channel_kind": "exec", "src_ip": "87.106.63.76", "src_port": 35932, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 273, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T19:03:55.913807+00:00", "ended_at": "2026-08-23T19:03:55.985138+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3961 }, { "id": "bdaf581a-cda9-473b-b316-93f54c67069b", "name": "foggy-cunning-pipit", "protocol": "ssh", "channel_kind": "exec", "src_ip": "41.63.62.103", "src_port": 38488, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 917, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T13:46:37.478805+00:00", "ended_at": "2026-08-23T13:46:37.768414+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3538 }, { "id": "a8a8dac7-e250-4c2b-8d5a-3dd11cce1446", "name": "salty-whispering-gecko", "protocol": "ssh", "channel_kind": "exec", "src_ip": "192.169.201.223", "src_port": 33562, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 224, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T08:15:44.521354+00:00", "ended_at": "2026-08-23T08:15:44.584189+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 4126 }, { "id": "fbe487c2-e38d-4eca-b4f1-0815e77cb3af", "name": "umber-coral-shelduck", "protocol": "ssh", "channel_kind": "exec", "src_ip": "107.180.88.176", "src_port": 32976, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 235, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T06:17:08.121725+00:00", "ended_at": "2026-08-23T06:17:08.182859+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3588 }, { "id": "70fe1f9e-b460-4fb0-8891-63a61305e666", "name": "wistful-peaty-caribou", "protocol": "ssh", "channel_kind": "exec", "src_ip": "136.232.11.10", "src_port": 43268, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 715, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T06:16:26.327703+00:00", "ended_at": "2026-08-23T06:16:26.559283+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 4025 }, { "id": "1bf9d4d1-932e-4c46-97f1-1042d928ad0f", "name": "pewter-prairie-kingfisher", "protocol": "ssh", "channel_kind": "exec", "src_ip": "136.232.11.10", "src_port": 51318, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 734, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T06:13:42.454122+00:00", "ended_at": "2026-08-23T06:13:43.667628+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2320 }, { "id": "fdb161e3-53ae-4578-8cf7-3a05774ddcbe", "name": "hushed-dappled-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "136.232.11.10", "src_port": 21548, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 719, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T06:08:49.251605+00:00", "ended_at": "2026-08-23T06:08:50.151808+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2678 }, { "id": "d0bc5787-46a5-4e4a-8fcb-9ae66d4739cf", "name": "earnest-rambling-ocelot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "20.102.98.53", "src_port": 49848, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 65, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T04:52:11.093291+00:00", "ended_at": "2026-08-23T04:52:11.099503+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3537 }, { "id": "0844521b-6fe2-405e-8725-531adb115801", "name": "thawing-jagged-condor", "protocol": "ssh", "channel_kind": "exec", "src_ip": "213.91.234.180", "src_port": 54362, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 357, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-23T01:09:13.082039+00:00", "ended_at": "2026-08-23T01:09:13.187119+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3866 }, { "id": "bb8255c1-fa10-47fb-bace-d408951594e4", "name": "ivory-gloomy-coyote", "protocol": "ssh", "channel_kind": "exec", "src_ip": "68.183.236.1", "src_port": 37372, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 772, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-22T21:59:03.408093+00:00", "ended_at": "2026-08-22T21:59:11.945062+00:00", "ended_reason": "exec complete", "commands": 26, "transcript_bytes": 3638 }, { "id": "8c537dfe-5b09-474d-a777-1a1e544b6db1", "name": "emerald-primal-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "43.166.242.149", "src_port": 41452, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 472, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-22T18:05:02.768278+00:00", "ended_at": "2026-08-22T18:07:02.813565+00:00", "ended_reason": "exec complete", "commands": 6, "transcript_bytes": 826 }, { "id": "f0f09920-b4c1-4d19-92d8-fdac78e39488", "name": "solar-cheerful-muntjac", "protocol": "ssh", "channel_kind": "exec", "src_ip": "103.134.154.195", "src_port": 46574, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 791, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-22T15:42:34.931139+00:00", "ended_at": "2026-08-22T15:42:35.179940+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3563 }, { "id": "7207bd6d-f105-44ce-ad44-2ecdc0e17b8e", "name": "supple-lunar-porcupine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "81.192.46.36", "src_port": 58294, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 373, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-22T14:19:36.840359+00:00", "ended_at": "2026-08-22T14:19:36.951750+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3814 }, { "id": "a0b73d99-0f20-4e51-aa7c-a0a50f254683", "name": "early-civil-opossum", "protocol": "ssh", "channel_kind": "exec", "src_ip": "181.164.12.188", "src_port": 47690, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 620, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-22T01:48:04.820032+00:00", "ended_at": "2026-08-22T01:48:05.007288+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3555 }, { "id": "586c8448-b441-41be-a6a4-ce51a64e72cd", "name": "crimson-frank-albatross", "protocol": "ssh", "channel_kind": "exec", "src_ip": "210.79.142.230", "src_port": 56430, "username": "root", "client_version": "SSH-2.0-libssh_0.11.1", "auth_attempts": 1, "automation": "bot", "think_ms": 740, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-21T22:44:40.988584+00:00", "ended_at": "2026-08-21T22:44:41.220167+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3495 }, { "id": "085553b7-74c2-4a2d-9c6e-99eaa2ee2e06", "name": "clever-wistful-condor", "protocol": "ssh", "channel_kind": "exec", "src_ip": "143.202.162.212", "src_port": 35234, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 271, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-21T17:00:24.227469+00:00", "ended_at": "2026-08-21T17:00:24.302398+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3554 }, { "id": "dde2d4ff-0ca4-483b-9053-7458166c5e99", "name": "lonesome-hazy-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.194.3.128", "src_port": 46786, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 696, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-21T00:21:03.057453+00:00", "ended_at": "2026-08-21T00:21:03.277755+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3479 }, { "id": "0ece996b-99fe-4c34-ac39-27e5de43953c", "name": "dutiful-noble-osprey", "protocol": "ssh", "channel_kind": "exec", "src_ip": "36.134.96.76", "src_port": 25405, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 775, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T22:57:43.606219+00:00", "ended_at": "2026-08-20T23:01:43.864121+00:00", "ended_reason": "exec complete", "commands": 16, "transcript_bytes": 2055 }, { "id": "dd3dc568-17c5-4e13-afe3-5fce7789988b", "name": "weathered-shifting-springbok", "protocol": "ssh", "channel_kind": "exec", "src_ip": "183.91.186.36", "src_port": 45114, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 901, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T20:24:34.329664+00:00", "ended_at": "2026-08-20T20:24:34.630091+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3988 }, { "id": "a09265ce-7df6-487c-b00d-1f24a248165f", "name": "canny-restless-petrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "186.248.197.77", "src_port": 45656, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 412, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:59:14.353436+00:00", "ended_at": "2026-08-20T12:59:14.478176+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3733 }, { "id": "9d97c634-71cf-4395-9707-f7b02c0c87c2", "name": "deft-frank-jackal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "139.59.28.125", "src_port": 34268, "username": "root", "client_version": "SSH-2.0-libssh_0.11.1", "auth_attempts": 1, "automation": "bot", "think_ms": 678, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:57:42.460636+00:00", "ended_at": "2026-08-20T12:57:42.669225+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3631 }, { "id": "46fb043f-7cad-43ac-afbe-b504a2611f5e", "name": "frosty-barren-cheetah", "protocol": "ssh", "channel_kind": "exec", "src_ip": "92.47.46.174", "src_port": 59806, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 687, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:49:42.507032+00:00", "ended_at": "2026-08-20T12:49:42.722243+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3732 }, { "id": "16ce8ab6-9ac3-48a6-8acf-2f1f38563712", "name": "meadow-northern-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "81.193.216.17", "src_port": 56682, "username": "root", "client_version": "SSH-2.0-libssh_0.11.1", "auth_attempts": 1, "automation": "bot", "think_ms": 408, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:49:19.537181+00:00", "ended_at": "2026-08-20T12:49:19.664175+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3907 }, { "id": "1710c81c-7e3d-4e8a-a4ae-297a449f2993", "name": "ivory-pristine-sandpiper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "194.156.249.154", "src_port": 51750, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 377, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:34:39.652762+00:00", "ended_at": "2026-08-20T12:34:42.383964+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2842 }, { "id": "480ec80d-66e2-4856-97dd-06174b2da80f", "name": "leafy-freckled-hare", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.12.221.15", "src_port": 34716, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 319, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T12:08:41.365257+00:00", "ended_at": "2026-08-20T12:08:41.455427+00:00", "ended_reason": "exec complete", "commands": 27, "transcript_bytes": 3731 } ]