[ { "id": "054c15ef-8ec3-4aaf-8643-e90bce103e41", "name": "solar-daring-pika", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 43012, "username": null, "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 0, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:25:46.396252+00:00", "ended_at": "2026-08-20T07:44:44+00:00", "ended_reason": "stale: no end frame", "commands": 0, "transcript_bytes": 0 }, { "id": "21640e09-0949-4d33-89e8-0081d4088c04", "name": "dusky-polar-finch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "120.48.90.166", "src_port": 46696, "username": "sql", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-20T07:18:01.029314+00:00", "ended_at": "2026-08-20T07:22:01.048252+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 68 }, { "id": "34ee179d-a3cc-4145-bce6-840d75fdefd0", "name": "dusky-solar-lynx", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 58916, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:14:10.843275+00:00", "ended_at": "2026-08-20T07:18:11.148835+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "4b3f18d2-680b-4bfa-8a2e-86d95534172e", "name": "nimble-amber-narwhal", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 47330, "username": "deploy", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:10:19.503006+00:00", "ended_at": "2026-08-20T07:11:17.631083+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "cefd3932-bcd5-4c34-b8b7-e098503aa0dc", "name": "rugged-brisk-egret", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 35422, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:06:34.303856+00:00", "ended_at": "2026-08-20T07:06:39.968172+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9209463f-eb58-40f6-90df-f6b23f6eb170", "name": "daring-wistful-teal", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 46472, "username": "null", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T07:02:43.616705+00:00", "ended_at": "2026-08-20T07:02:45.480164+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8c8d67da-d78d-43c9-b486-112c23234af6", "name": "idle-gilded-tapir", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 55200, "username": "ubuntu", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:55:09.051892+00:00", "ended_at": "2026-08-20T06:56:07.277437+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "eacfb5a9-0500-4287-9207-183517ffebf7", "name": "languid-stoic-pika", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 47332, "username": null, "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 0, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:51:13.652224+00:00", "ended_at": "2026-08-20T07:44:44+00:00", "ended_reason": "stale: no end frame", "commands": 0, "transcript_bytes": 0 }, { "id": "4aab3554-6518-4119-965d-cd78ec6c1e63", "name": "candid-keen-gibbon", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 46438, "username": null, "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 0, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:47:15.788045+00:00", "ended_at": "2026-08-20T07:44:44+00:00", "ended_reason": "stale: no end frame", "commands": 0, "transcript_bytes": 0 }, { "id": "cfe71e51-c07f-4792-b03d-3c6a11831988", "name": "idle-blazing-ocelot", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 56812, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:43:16.719968+00:00", "ended_at": "2026-08-20T06:45:16.731809+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "18d21be4-cbbd-4386-95ff-1722fa6e4299", "name": "velvet-arctic-panther", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 43842, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:39:17.444302+00:00", "ended_at": "2026-08-20T06:39:24.189503+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8d448e93-d97e-40e3-b7e2-f14a5633a266", "name": "stoic-languid-starling", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 51660, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:35:41.733955+00:00", "ended_at": "2026-08-20T06:35:50.878883+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c3581674-d582-4639-b59a-0a6a059f3f94", "name": "ancient-daring-manatee", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 51714, "username": null, "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 0, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:35:08.280030+00:00", "ended_at": "2026-08-20T07:44:44+00:00", "ended_reason": "stale: no end frame", "commands": 0, "transcript_bytes": 0 }, { "id": "fe6db9ac-35eb-4e9b-b9c4-bb9b49d44507", "name": "flinty-gilded-caribou", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 60292, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:31:01.891392+00:00", "ended_at": "2026-08-20T06:33:01.913888+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "82b2eaf2-4051-4079-a65b-d93a3c5056ae", "name": "wandering-electric-magpie", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 49688, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:26:54.663470+00:00", "ended_at": "2026-08-20T06:26:56.201220+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "d3fc8efe-c601-4621-9a22-99a8d4ad0861", "name": "crimson-fabled-wombat", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 54840, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:22:51.641826+00:00", "ended_at": "2026-08-20T06:24:49.029570+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "f858a5c7-bf67-4123-b691-751adfbd319e", "name": "amber-clever-wombat", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 44524, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:18:48.024092+00:00", "ended_at": "2026-08-20T06:21:38.374371+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "de35626f-0eea-4bf9-9fca-3e212a11833d", "name": "wandering-polar-sparrow", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 37986, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:14:45.087130+00:00", "ended_at": "2026-08-20T06:16:45.087811+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "75477fe4-07a8-4d64-b476-1b63cbbf7a9f", "name": "silent-lunar-gibbon", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 51648, "username": "teamspeak3", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:10:45.977924+00:00", "ended_at": "2026-08-20T06:10:46.844733+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b5669a71-cd3d-4dd9-b3fb-ca00e7f4030d", "name": "eager-keen-egret", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 42356, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:06:50.011535+00:00", "ended_at": "2026-08-20T06:08:50.022056+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "fb6aa4c8-b6de-4d64-8036-6517b5c88aa9", "name": "hollow-fabled-otter", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 40346, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T06:02:45.362752+00:00", "ended_at": "2026-08-20T06:02:55.105001+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "f9abb898-6763-46d3-b7ed-4535719ff1e7", "name": "cobalt-ancient-civet", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 56948, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:58:52.538153+00:00", "ended_at": "2026-08-20T05:58:55.190493+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5d0ffd88-e1d8-4ae7-b8a2-a7ff20342799", "name": "arctic-jolly-tapir", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 49438, "username": null, "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 0, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:54:54.516507+00:00", "ended_at": "2026-08-20T07:44:44+00:00", "ended_reason": "stale: no end frame", "commands": 0, "transcript_bytes": 0 }, { "id": "55201d6c-52e0-4e1b-9293-3ba44f0bc34b", "name": "faded-sunlit-ocelot", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 46146, "username": "git", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:51:01.222142+00:00", "ended_at": "2026-08-20T05:52:59.292227+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "560ef1e2-8994-4ab9-aa42-509634b61bda", "name": "cobalt-daring-tapir", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 38518, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:47:06.743561+00:00", "ended_at": "2026-08-20T05:47:08.480727+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8b240321-ad4d-4e2b-9fb9-e92480fd92b2", "name": "flinty-cosmic-petrel", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 36486, "username": "jimmy", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:43:12.571706+00:00", "ended_at": "2026-08-20T05:45:10.210085+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "0830edcd-9af7-4f1f-9767-d0d6de1aac84", "name": "jolly-lively-mongoose", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 56980, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:39:15.275952+00:00", "ended_at": "2026-08-20T05:41:15.271722+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3f94b57b-a140-4e9f-a641-eab3740d5a2a", "name": "candid-golden-hare", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 56196, "username": null, "client_version": "", "auth_attempts": 0, "automation": "unknown", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:35:25.612067+00:00", "ended_at": "2026-08-20T05:35:32.388361+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "aa7930de-77dc-42a4-9c3a-b888efcf2ed1", "name": "daring-proud-marten", "protocol": "ssh", "channel_kind": null, "src_ip": "120.48.90.166", "src_port": 40364, "username": "dee", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T05:31:38.907854+00:00", "ended_at": "2026-08-20T05:33:35.361066+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 } ]