[ { "id": "06819c64-1c2e-4244-8d27-8af746526dd0", "name": "faded-supple-capuchin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 60158, "username": "es", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 263, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:21:53.904943+00:00", "ended_at": "2026-08-27T11:21:54.796116+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2165 }, { "id": "638a7570-1692-4edc-9668-ad21a75e64c7", "name": "wiry-blunt-vulture", "protocol": "ssh", "channel_kind": null, "src_ip": "51.255.195.46", "src_port": 35752, "username": "es", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:21:27.119087+00:00", "ended_at": "2026-08-27T11:21:28.275008+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e0c1b6fa-ea0d-48b4-8cd6-e684e7002525", "name": "dutiful-regal-dolphin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 57822, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 259, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:59:42.751826+00:00", "ended_at": "2026-08-27T02:59:46.704953+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "f1babaf3-93c6-4be8-aac3-96b6fd5e3976", "name": "stoic-supple-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 50428, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 235, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:10:30.851009+00:00", "ended_at": "2026-08-27T02:10:32.971804+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "d6dc7eaf-8724-400b-93b7-2dff3b4ed7ca", "name": "vernal-primal-bushbaby", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 54378, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T01:53:46.463456+00:00", "ended_at": "2026-08-27T01:53:51.715037+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b67d5c11-c52b-4481-b0fd-76037ac617a6", "name": "silent-blithe-chickadee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 58022, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 1409, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T01:53:40.997371+00:00", "ended_at": "2026-08-27T01:53:51.713678+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1661 }, { "id": "53ff8ccc-cf47-4170-a33c-af3e7ec1aa6f", "name": "upland-hushed-sloth", "protocol": "ssh", "channel_kind": "exec", "src_ip": "118.194.228.101", "src_port": 52344, "username": "es", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 515, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T01:01:44.923784+00:00", "ended_at": "2026-08-27T01:01:46.412093+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2205 }, { "id": "30865403-9f85-43f1-85c3-e91a7b1d4cb1", "name": "languid-arctic-polecat", "protocol": "ssh", "channel_kind": null, "src_ip": "118.194.228.101", "src_port": 38198, "username": "es", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T01:01:24.129138+00:00", "ended_at": "2026-08-27T01:01:25.330560+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "37809a6e-45ad-4baa-9baf-ddde6df2d9ab", "name": "dutiful-wiry-manatee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 35992, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 385, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T13:32:00.985642+00:00", "ended_at": "2026-08-26T13:32:07.531556+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "3db0cc0f-57a8-47f3-aef1-1f2922a13940", "name": "lawful-balmy-kakapo", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 43392, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 670, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:40:32.305663+00:00", "ended_at": "2026-08-26T12:40:35.997207+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "98dcabee-f037-40e6-b888-ea545cca4e11", "name": "zealous-sullen-squirrel", "protocol": "ssh", "channel_kind": null, "src_ip": "77.239.124.249", "src_port": 59370, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-26T12:11:48.320882+00:00", "ended_at": "2026-08-26T12:11:55.162460+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3baea7bb-c080-4cba-8a92-7085c9677ef9", "name": "inland-vaulted-jackal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 40548, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 452, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:11:41.604664+00:00", "ended_at": "2026-08-26T12:11:55.163811+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1655 }, { "id": "7ae115b1-5193-4aea-86a0-286afacebd45", "name": "rustic-crimson-sparrow", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 54940, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 209, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T06:37:53.160775+00:00", "ended_at": "2026-08-26T06:37:57.716433+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "7783ba47-afd5-40b7-9af0-a3be64060ab8", "name": "shifting-quaint-wren", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 47388, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 194, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T06:20:06.081276+00:00", "ended_at": "2026-08-26T06:20:09.483118+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "f5af030e-15d7-42d5-9389-6146af73813a", "name": "proud-distant-sable", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 34490, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 447, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:40:26.920073+00:00", "ended_at": "2026-08-25T23:40:28.651858+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "c625840a-c589-4061-95e9-99e6be377484", "name": "grumpy-dusky-roebuck", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 47582, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:18:50.553245+00:00", "ended_at": "2026-08-25T23:18:52.316493+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "b331a737-92e9-4424-b43b-7219a9b77516", "name": "glassy-fringed-wolverine", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 53212, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:05:53.733689+00:00", "ended_at": "2026-08-25T23:05:55.971909+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "e5f03f98-c251-42f5-a6c5-59d487674eef", "name": "zealous-stoic-manatee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 48020, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 449, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:03:31.851803+00:00", "ended_at": "2026-08-25T23:03:33.894085+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "7154ed7d-f070-43c4-b020-0fb4e4a3ee2a", "name": "sincere-drifting-cougar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 35402, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 451, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:36:49.343509+00:00", "ended_at": "2026-08-25T22:36:51.683664+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "572bac11-41c9-48a4-a254-f4ddcdac9923", "name": "amber-balmy-osprey", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 38500, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 254, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T02:27:06.810255+00:00", "ended_at": "2026-08-25T02:27:11.899362+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "3b1146ed-5e7e-4717-a75d-5aae1bd19362", "name": "stoic-gleaming-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 34758, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 209, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T01:13:02.095633+00:00", "ended_at": "2026-08-25T01:13:05.588301+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "b2913d48-2f64-4e0d-a9b2-35544c468181", "name": "meadow-cunning-lapwing", "protocol": "ssh", "channel_kind": null, "src_ip": "45.153.34.165", "src_port": 36936, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T00:54:06.622229+00:00", "ended_at": "2026-08-25T00:54:08.605725+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "6d253dae-98a6-40bf-ad7c-97310522ba56", "name": "sleepy-cosmic-manatee", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 42386, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 223, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T00:54:03.006506+00:00", "ended_at": "2026-08-25T00:54:08.604342+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1661 }, { "id": "1dec94c8-5051-4a9f-ba7f-14b4ba724029", "name": "downy-thawing-mink", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 60844, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 216, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T10:17:04.325043+00:00", "ended_at": "2026-08-24T10:17:07.420007+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "941c0b5b-d5ca-4381-8799-27f2ded16090", "name": "cosmic-murky-goshawk", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 60030, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 199, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T09:36:19.432433+00:00", "ended_at": "2026-08-24T09:36:23.426321+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "e0d4f101-385d-465e-b998-20b30bcb10f6", "name": "forlorn-blithe-cheetah", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.11", "src_port": 44310, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-24T09:02:37.111762+00:00", "ended_at": "2026-08-24T09:02:39.508396+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "939f443a-a10c-4f4c-85fa-fdaa9982b4a8", "name": "civil-fleeting-gull", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 46594, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 237, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T09:02:31.902918+00:00", "ended_at": "2026-08-24T09:02:39.510097+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1659 }, { "id": "cbe0b3c0-4fa1-44e5-a78f-16f50bd0fb8b", "name": "cobalt-curious-parakeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.42.147", "src_port": 37478, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 204, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-21T13:37:47.164430+00:00", "ended_at": "2026-08-21T13:37:52.389328+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1658 }, { "id": "f075a9a5-fc12-4a76-85c9-3d1c2e260ca6", "name": "indigo-dappled-lorikeet", "protocol": "ssh", "channel_kind": null, "src_ip": "45.156.87.93", "src_port": 33616, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T18:31:16.354630+00:00", "ended_at": "2026-08-20T18:31:17.610667+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "71f1fc3d-f957-43cb-8f31-d27dd5b1d3fa", "name": "merry-nimble-falcon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.156.87.93", "src_port": 55446, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 189, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T18:31:11.861333+00:00", "ended_at": "2026-08-20T18:31:17.611718+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1651 }, { "id": "916ac054-b34f-4938-9563-ff0b5d307257", "name": "wiry-sullen-swallow", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.66", "src_port": 39640, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T10:57:23.123362+00:00", "ended_at": "2026-08-20T10:57:24.846190+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8577d2c2-f9d2-4756-aed0-69ec97eb4c3f", "name": "glacial-fleeting-salmon", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.66", "src_port": 34772, "username": "es", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 237, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T10:57:22.693723+00:00", "ended_at": "2026-08-20T10:57:24.846556+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1626 } ]