[
 {
  "id": "6fac3614-ca78-44f5-891b-155ec588a22b",
  "name": "russet-wooded-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 46998,
  "username": "user7",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 588,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:46:55.530790+00:00",
  "ended_at": "2026-08-26T12:46:56.544114+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "3fe19526-6644-4a41-8d78-0fd11db91f55",
  "name": "russet-verdant-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 56560,
  "username": "user7",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:46:42.184733+00:00",
  "ended_at": "2026-08-26T12:46:44.008455+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf95ad02-064e-487d-b81e-ae5105df031a",
  "name": "glassy-slender-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 56548,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:46:39.156655+00:00",
  "ended_at": "2026-08-26T12:46:40.504014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a5e1788-d8a5-4ac0-8a2a-4c6e1949b2c2",
  "name": "earnest-loyal-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 55832,
  "username": "default",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 613,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:42:47.442051+00:00",
  "ended_at": "2026-08-26T12:42:48.198826+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "8ee843fe-d4c4-4d88-b648-cac340a4bfbd",
  "name": "lucid-thorny-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 53494,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:42:27.344861+00:00",
  "ended_at": "2026-08-26T12:43:27.349028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba218c84-9aad-4a7d-a0ab-281eecc3b3c2",
  "name": "dewy-murky-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 53486,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:42:25.671065+00:00",
  "ended_at": "2026-08-26T12:42:27.161864+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6148cf46-70f1-4b02-a742-d097a1ff3b7d",
  "name": "bashful-wooded-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36778,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:38:11.018203+00:00",
  "ended_at": "2026-08-26T12:39:11.022118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38fee2d6-42ec-44ca-9734-320589e78bd7",
  "name": "emerald-obsidian-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47690,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:38:03.004921+00:00",
  "ended_at": "2026-08-26T12:39:03.004686+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86d8f685-f280-4c02-bd34-a48150eea369",
  "name": "prickly-quartz-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 47678,
  "username": "us",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:38:01.598089+00:00",
  "ended_at": "2026-08-26T12:38:02.632584+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "d1bd6661-3062-403a-9221-bdc075912464",
  "name": "creaky-fringed-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47522,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:33:37.930446+00:00",
  "ended_at": "2026-08-26T12:34:37.930669+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54d00628-28f7-463d-b7c0-4680952ac20f",
  "name": "lonesome-jovial-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44388,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:29:32.750448+00:00",
  "ended_at": "2026-08-26T12:29:41.308154+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8b2a131-8c47-402a-a992-baca8bd76865",
  "name": "burly-ashen-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39372,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:29:25.308110+00:00",
  "ended_at": "2026-08-26T12:30:25.309005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14907904-df17-41fe-8e29-34189c81ddc2",
  "name": "jovial-quaint-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 39358,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:29:23.397709+00:00",
  "ended_at": "2026-08-26T12:29:24.368360+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "f3bffe3a-f925-4cb0-881b-fadd46ae51f4",
  "name": "austere-gnarled-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 60674,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 594,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:25:26.582652+00:00",
  "ended_at": "2026-08-26T12:25:27.329372+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "f0412d65-f0b0-4765-9295-ae3cca790a61",
  "name": "mottled-scarlet-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60702,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:07.634502+00:00",
  "ended_at": "2026-08-26T12:26:07.635686+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cdc27ecd-683e-46f4-9005-561cee45df53",
  "name": "ivory-rustic-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60686,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:04.776185+00:00",
  "ended_at": "2026-08-26T12:25:06.408970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "328227ba-1abd-47c2-b06f-58324d753c8f",
  "name": "forlorn-opal-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 57960,
  "username": "nexus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:20:50.086096+00:00",
  "ended_at": "2026-08-26T12:20:51.340643+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28ec4146-5502-47f7-a41c-ee96e7afad67",
  "name": "airy-gilded-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51464,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:20:41.092965+00:00",
  "ended_at": "2026-08-26T12:20:57.789180+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "804c52a7-8819-4ddd-9dae-ea087dc5159a",
  "name": "rapid-genial-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 48088,
  "username": "nexus",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:20:39.738526+00:00",
  "ended_at": "2026-08-26T12:20:40.715686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "73863ef6-1f6f-4897-af45-1c5a57f6396d",
  "name": "genial-bold-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 39626,
  "username": "andrey",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 601,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:16:47.678353+00:00",
  "ended_at": "2026-08-26T12:16:48.455967+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2245
 },
 {
  "id": "6f072f35-081c-46fb-be60-2d6a843c6c08",
  "name": "craggy-sincere-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47494,
  "username": "andrey",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:16:32.830072+00:00",
  "ended_at": "2026-08-26T12:16:34.129848+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47ad34cc-c8c0-4493-8888-a8766df6f3aa",
  "name": "lanky-hushed-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39640,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:16:28.892895+00:00",
  "ended_at": "2026-08-26T12:16:30.076308+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0c20725-4736-4499-b6ce-c3d0651e2e49",
  "name": "seaward-rapid-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:12:32.222078+00:00",
  "ended_at": "2026-08-26T12:12:33.043134+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c92bd787-1256-4ce1-9202-06b7d76d2279",
  "name": "northern-fringed-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44978,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:12:12.330843+00:00",
  "ended_at": "2026-08-26T12:13:12.332187+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da4db525-d8e6-48bc-b1f4-820859632a85",
  "name": "burly-keen-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 41240,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:12:04.329083+00:00",
  "ended_at": "2026-08-26T12:13:04.328764+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e2865dd-2cba-476d-b5b5-8898136f3b4f",
  "name": "keen-valiant-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38790,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:07:40.767396+00:00",
  "ended_at": "2026-08-26T12:08:40.768070+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2bdc4220-71aa-430a-96cb-544e7fd8cb53",
  "name": "polar-arctic-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 55948,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:29.686534+00:00",
  "ended_at": "2026-08-26T12:03:37.694031+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fa256a4-dff9-468b-b6e1-1eb2a4c41865",
  "name": "lonesome-indigo-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40796,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:27.647177+00:00",
  "ended_at": "2026-08-26T12:03:29.496024+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e427bc72-ad3d-4923-a103-13e36ac36c03",
  "name": "distant-gentle-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 40790,
  "username": "kn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:03:24.433584+00:00",
  "ended_at": "2026-08-26T12:03:25.643985+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "9bca49b1-8002-4b0f-82ea-65f7161d36b6",
  "name": "sterling-lanky-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 59348,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:58:59.810325+00:00",
  "ended_at": "2026-08-26T11:59:08.411789+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b029c3a-d150-428b-989c-bad6d8e09846",
  "name": "keen-candid-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 57168,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:54:38.543852+00:00",
  "ended_at": "2026-08-26T11:54:46.553441+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "849d6e41-f51b-4f72-a621-6dbf69e6d070",
  "name": "sandy-clever-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44812,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:50:19.221634+00:00",
  "ended_at": "2026-08-26T11:50:36.091467+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f7d9723b-5f85-4c76-b6e4-0d452896095e",
  "name": "wooded-amiable-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36580,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:46:38.727558+00:00",
  "ended_at": "2026-08-26T11:46:40.939886+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "cd7862e3-1a7c-4f9f-8427-fc22a2f0ab38",
  "name": "verdant-wistful-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 50538,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:46:11.472967+00:00",
  "ended_at": "2026-08-26T11:47:11.472327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "87d08713-1905-4e61-9a93-bf84cd8383f1",
  "name": "airy-ivory-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36596,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:46:03.468777+00:00",
  "ended_at": "2026-08-26T11:47:03.470036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5af68a09-f49c-452e-961c-a92307f8d3a6",
  "name": "scarlet-tranquil-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 43750,
  "username": "bill",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 594,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:42:02.270195+00:00",
  "ended_at": "2026-08-26T11:42:02.954243+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "ef312667-4883-4552-bf1c-8bf2bfaebc4d",
  "name": "thorny-clever-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 43772,
  "username": "bill",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:41:47.486555+00:00",
  "ended_at": "2026-08-26T11:41:48.523056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b174d873-608c-4ca8-9b1e-f41246049956",
  "name": "northern-arctic-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 43756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:41:44.412168+00:00",
  "ended_at": "2026-08-26T11:41:45.705310+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "297dd5dd-940c-4ec1-8e0e-cdc4a634979f",
  "name": "gleaming-vernal-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 52474,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 943,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:37:43.080918+00:00",
  "ended_at": "2026-08-26T11:37:43.851050+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ff668f3e-b80d-42c2-a70a-444800358796",
  "name": "twilight-cobalt-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47100,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:27.544494+00:00",
  "ended_at": "2026-08-26T11:37:28.911062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9e9a680-9441-49b6-bc46-77a63e953251",
  "name": "wistful-freckled-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47098,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:24.744911+00:00",
  "ended_at": "2026-08-26T11:37:25.828021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "097da1aa-056a-4dde-9422-34bf6a00ec27",
  "name": "barren-gentle-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 37514,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:33:00.044099+00:00",
  "ended_at": "2026-08-26T11:34:00.052304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fd738abe-884b-443c-bfd1-c3ea9b6fe0bf",
  "name": "snowy-forlorn-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41352,
  "username": "sgp",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 612,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:29:09.002582+00:00",
  "ended_at": "2026-08-26T11:29:10.410808+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "f7dfcc3b-71c0-47bd-81be-554ae7aa977c",
  "name": "gloomy-proud-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 41680,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:28:48.544597+00:00",
  "ended_at": "2026-08-26T11:28:56.551325+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "585bf984-54ae-48e9-8fe4-9b823da3c4fe",
  "name": "regal-sandy-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 37248,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:28:40.534392+00:00",
  "ended_at": "2026-08-26T11:29:40.561455+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "516fef90-b1ef-4b03-9a67-5462305b5188",
  "name": "northern-lunar-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51144,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:24:19.974410+00:00",
  "ended_at": "2026-08-26T11:25:19.976728+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8863a548-b8f2-4278-9da1-8cf37203ed60",
  "name": "tidal-dusky-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 34846,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:20:00.648512+00:00",
  "ended_at": "2026-08-26T11:20:08.656118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "905465b1-eb12-4e0b-9f8e-7e24b7e665a0",
  "name": "peaty-crystal-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 34704,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:15:38.712622+00:00",
  "ended_at": "2026-08-26T11:15:46.719813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "759c44d5-79aa-42ea-8cc4-e88cff721379",
  "name": "blithe-merry-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 48552,
  "username": "dev",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:11:56.398052+00:00",
  "ended_at": "2026-08-26T11:11:57.985697+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "95d11690-8d19-4baf-9bb2-ed5ef8f8d998",
  "name": "jolly-idle-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 52964,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:11:29.648623+00:00",
  "ended_at": "2026-08-26T11:12:29.656829+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a8c4be2-9d66-4348-adcb-f85394082072",
  "name": "spirited-nautical-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 48556,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:11:21.636239+00:00",
  "ended_at": "2026-08-26T11:12:21.638726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "015fe738-86d0-4600-8fc1-ce1862f46dff",
  "name": "sullen-rugged-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 46886,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 585,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:07:25.095860+00:00",
  "ended_at": "2026-08-26T11:07:25.894192+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2291
 },
 {
  "id": "428f5f89-0c64-49a8-8d5f-a21bba27fb95",
  "name": "courtly-sandy-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 58906,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:07:11.242724+00:00",
  "ended_at": "2026-08-26T11:07:13.134588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2ed174e-26a6-473d-99a3-650cbcb1600e",
  "name": "polar-cheerful-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40768,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:07:02.265206+00:00",
  "ended_at": "2026-08-26T11:07:08.794610+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79db8206-616c-4adf-b4c2-57332374ccf1",
  "name": "pristine-freckled-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 33232,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 604,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:02:52.624467+00:00",
  "ended_at": "2026-08-26T11:02:53.299019+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2280
 },
 {
  "id": "3e11718a-4da8-4977-80fe-20d992f7ed63",
  "name": "icy-upland-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60224,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:02:39.676937+00:00",
  "ended_at": "2026-08-26T11:02:41.218700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a751598-f314-48a6-b8a2-3a87f0ef7bed",
  "name": "blunt-hearty-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 33236,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:02:36.667302+00:00",
  "ended_at": "2026-08-26T11:02:37.951847+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2209e763-b06f-4052-9b42-0b8af50d2e1a",
  "name": "valiant-sincere-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 56898,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:58:11.898743+00:00",
  "ended_at": "2026-08-26T10:58:19.519613+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0582e41e-a6e7-44ff-a77a-c270af0429d1",
  "name": "diligent-bold-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 40602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:54:26.556075+00:00",
  "ended_at": "2026-08-26T10:54:27.999283+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2271
 },
 {
  "id": "ed00542c-293e-46df-b5a8-9a0f2f7fdd6a",
  "name": "gnarled-fringed-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40634,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:53:57.592183+00:00",
  "ended_at": "2026-08-26T10:54:57.597677+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "764e00f0-7064-4ad3-810f-1e52227f0044",
  "name": "gnarled-twilight-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 40618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:53:56.214666+00:00",
  "ended_at": "2026-08-26T10:53:57.409437+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01c754e0-3b90-438c-bada-aba809ae3f87",
  "name": "flinty-alpine-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41778,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:50:02.070375+00:00",
  "ended_at": "2026-08-26T10:50:02.781088+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "052a66c3-d538-43f5-b4eb-a47fbdb9a141",
  "name": "plucky-canny-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 41914,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:49:40.457320+00:00",
  "ended_at": "2026-08-26T10:49:48.461017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "11207255-ff4f-4dd2-b0c2-765d8104eb7e",
  "name": "twilight-smooth-owl",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 41792,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:49:33.490133+00:00",
  "ended_at": "2026-08-26T10:49:40.458999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be340f5a-e936-4685-a83a-b2a3bdd9f729",
  "name": "muted-leafy-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 44114,
  "username": "postmaster",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 606,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:45:29.561927+00:00",
  "ended_at": "2026-08-26T10:45:30.274291+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2196
 },
 {
  "id": "74d67c22-45c9-43c4-aef8-026c20ac6f8a",
  "name": "slender-calm-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44124,
  "username": "postmaster",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:45:16.225441+00:00",
  "ended_at": "2026-08-26T10:45:17.459050+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "616c17dd-6b60-495a-967f-521fcaaf2e25",
  "name": "mossy-glacial-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44118,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:45:12.989148+00:00",
  "ended_at": "2026-08-26T10:45:15.052482+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "45d0d822-d784-42d5-8a49-9cb3371e0a66",
  "name": "courtly-hazy-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 50630,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:40:51.568664+00:00",
  "ended_at": "2026-08-26T10:41:51.576750+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1dd6113f-076a-4ab2-ada1-a5ea698ab339",
  "name": "ginger-lucid-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 38334,
  "username": "tester1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:36:59.922949+00:00",
  "ended_at": "2026-08-26T10:37:01.241820+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2188
 },
 {
  "id": "1f15c5ef-c133-4f8b-ac48-32b6ec245d3d",
  "name": "thorny-emerald-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38356,
  "username": "tester1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:36:38.346555+00:00",
  "ended_at": "2026-08-26T10:36:39.156466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "340e0f3b-598f-4a38-a3e7-f8ed8954ff7c",
  "name": "blunt-smooth-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38348,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:36:34.461112+00:00",
  "ended_at": "2026-08-26T10:36:36.021788+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33f53130-2244-448b-a647-4ef6efe00ae3",
  "name": "stoic-solar-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 45730,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:32:40.368925+00:00",
  "ended_at": "2026-08-26T10:32:42.587422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2177
 },
 {
  "id": "337fe35f-4dde-4272-a95a-ab5a3adb673a",
  "name": "windswept-nimble-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 45744,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:32:19.120103+00:00",
  "ended_at": "2026-08-26T10:32:20.406871+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d610a02-69db-4d1d-9490-d8f5ef6def90",
  "name": "nautical-proud-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 45742,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:32:15.269616+00:00",
  "ended_at": "2026-08-26T10:32:16.923705+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "100a3746-1310-476c-b1b4-94bcbf105d1f",
  "name": "hushed-honest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 58910,
  "username": "arkserver",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 592,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:28:27.880116+00:00",
  "ended_at": "2026-08-26T10:28:29.479578+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "7c009492-8ad6-4852-b7e3-9707c0f3e1a9",
  "name": "meadow-cheerful-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47988,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:28:01.669265+00:00",
  "ended_at": "2026-08-26T10:28:09.676113+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed94733e-64e1-43a7-b1df-d6c037189892",
  "name": "velvet-stormy-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 58916,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:27:53.660373+00:00",
  "ended_at": "2026-08-26T10:28:53.669289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0020239e-8134-4b2a-a3ef-06753559c827",
  "name": "humble-dappled-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 51480,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 615,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:23:58.690166+00:00",
  "ended_at": "2026-08-26T10:24:00.018969+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "d9096e97-5dbf-41a5-8f62-70595ad5e015",
  "name": "languid-balmy-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51500,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:23:37.748190+00:00",
  "ended_at": "2026-08-26T10:23:39.507480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "569df95d-833b-4902-b677-d38593e476b3",
  "name": "sooty-faded-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 51494,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:23:35.098189+00:00",
  "ended_at": "2026-08-26T10:23:36.056229+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3c633b0-6488-4717-a0f4-c399e02644ca",
  "name": "cheerful-inland-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 616,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:19:39.338741+00:00",
  "ended_at": "2026-08-26T10:19:41.087847+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "a3f1c7e9-a607-4ced-8b4e-75206c4da9d9",
  "name": "sterling-seaward-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:19:20.822895+00:00",
  "ended_at": "2026-08-26T10:19:21.883890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1546bebd-939d-44fc-9710-11270f5a35e9",
  "name": "hollow-shaded-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36292,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:19:17.170633+00:00",
  "ended_at": "2026-08-26T10:19:19.120763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb8e6693-cde6-4fbb-8abb-03ae9efdf0ee",
  "name": "nameless-western-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 38584,
  "username": "eve",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:15:29.645308+00:00",
  "ended_at": "2026-08-26T10:15:31.154005+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2123
 },
 {
  "id": "2481cbd4-3001-4cd6-98e6-264e532723c9",
  "name": "chilly-upland-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 52136,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:15:01.152686+00:00",
  "ended_at": "2026-08-26T10:15:09.159222+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6883bcd1-8e79-4397-80a8-12b84f3da058",
  "name": "restless-vaulted-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 38594,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:14:53.144316+00:00",
  "ended_at": "2026-08-26T10:15:01.153558+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "621dfc2f-f9ed-4584-aa13-aa1c3a8cb412",
  "name": "thorny-lonesome-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 57234,
  "username": "contact",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 954,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:11:10.996306+00:00",
  "ended_at": "2026-08-26T10:11:12.616810+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2116
 },
 {
  "id": "497cf8b4-bbce-489a-87ac-2d7dd506ced0",
  "name": "boreal-distant-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 34388,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:10:42.685919+00:00",
  "ended_at": "2026-08-26T10:11:42.692228+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cc3a55f-3f3a-409b-ab7e-098f33cc33bb",
  "name": "fringed-vivid-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 57248,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:10:34.103396+00:00",
  "ended_at": "2026-08-26T10:11:34.106752+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b33232f9-4f46-4df0-a678-2c4b872f85c7",
  "name": "forlorn-idle-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 35348,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:06:36.905884+00:00",
  "ended_at": "2026-08-26T10:06:37.685000+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "d0f18b3a-dac2-4913-a65d-045de054620d",
  "name": "marine-earnest-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 54754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:06:24.561905+00:00",
  "ended_at": "2026-08-26T10:06:25.801967+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd8f2d45-2149-4a9b-b074-590d4da2371f",
  "name": "bitter-rapid-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 35364,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:06:14.480027+00:00",
  "ended_at": "2026-08-26T10:07:14.485356+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2ce7150-0e49-4b91-9027-0bd076c2fad5",
  "name": "ginger-glacial-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 35730,
  "username": "stepan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:02:17.929850+00:00",
  "ended_at": "2026-08-26T10:02:18.606257+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2103
 },
 {
  "id": "aede5f06-a969-4bc3-a25e-21135e6638fb",
  "name": "placid-velvet-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 52010,
  "username": "stepan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:02:02.776224+00:00",
  "ended_at": "2026-08-26T10:02:04.603903+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a605a55b-8529-40a4-b928-987073ebac99",
  "name": "creaky-cheerful-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 35738,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:01:53.766089+00:00",
  "ended_at": "2026-08-26T10:02:02.362518+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e34fd0d-1ee6-47ca-a1e7-be5608eb3a40",
  "name": "wiry-glacial-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 55466,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:57:28.517368+00:00",
  "ended_at": "2026-08-26T09:57:37.084110+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a478ab2-ed8f-4c13-9f2a-e0e09322a336",
  "name": "amber-glacial-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 57736,
  "username": "fedora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:53:36.137746+00:00",
  "ended_at": "2026-08-26T09:53:36.915615+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2092
 },
 {
  "id": "9e17b38c-e479-4124-a8d2-58c56c165c59",
  "name": "hardy-shifting-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36018,
  "username": "fedora",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:53:23.806112+00:00",
  "ended_at": "2026-08-26T09:53:24.559667+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c71e458e-5bd5-48e7-93d2-5c878b223baa",
  "name": "wandering-bashful-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 57742,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:53:14.764182+00:00",
  "ended_at": "2026-08-26T09:53:22.770155+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ca21b8b-9d41-42f8-8fab-2e4edfa8f393",
  "name": "sincere-kindly-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 37646,
  "username": "student8",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:49:12.918639+00:00",
  "ended_at": "2026-08-26T09:49:13.578868+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2081
 },
 {
  "id": "5a6dfa98-ef88-4b70-9f16-ec4da7eb6a63",
  "name": "dusky-meadow-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44540,
  "username": "student8",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:48:59.411378+00:00",
  "ended_at": "2026-08-26T09:49:01.974431+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f1a81f9-6b3c-4433-bb5c-cc1c8e140256",
  "name": "autumn-regal-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 37650,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:48:56.427940+00:00",
  "ended_at": "2026-08-26T09:48:58.239290+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8447f39b-c26d-4922-bc7e-b86f49b1d949",
  "name": "restless-genial-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 42122,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:44:29.303131+00:00",
  "ended_at": "2026-08-26T09:45:29.305076+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6919b2d7-cef4-46de-b8eb-173179143281",
  "name": "forlorn-fabled-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 56138,
  "username": "abcdefg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:40:26.712522+00:00",
  "ended_at": "2026-08-26T09:40:27.439970+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2069
 },
 {
  "id": "c0a94a03-7aa6-4495-87ab-182aa8950ff5",
  "name": "ivory-sturdy-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 32864,
  "username": "abcdefg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:40:11.800925+00:00",
  "ended_at": "2026-08-26T09:40:13.586561+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ece6236c-f987-4314-9f0e-e29d621cd9c1",
  "name": "sterling-glacial-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 32858,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:40:08.920277+00:00",
  "ended_at": "2026-08-26T09:40:10.168837+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcf7e34b-da54-4601-948e-8ee83233e8d4",
  "name": "western-ashen-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 42796,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:35:39.598720+00:00",
  "ended_at": "2026-08-26T09:36:39.600640+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f342cf91-46b6-4663-a6cd-92403fbcd750",
  "name": "amiable-silent-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 58350,
  "username": "cpg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:31:43.457741+00:00",
  "ended_at": "2026-08-26T09:31:44.119534+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "a4163088-8fc5-46a5-a3a4-9e82b6f38ae3",
  "name": "lofty-fabled-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47686,
  "username": "cpg",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:31:30.767611+00:00",
  "ended_at": "2026-08-26T09:31:32.691078+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42b4dd74-25a3-4e42-b0e6-284d67dce3d1",
  "name": "whispering-placid-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 36430,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:31:21.752805+00:00",
  "ended_at": "2026-08-26T09:31:29.762365+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5d711a7-1b3a-4572-8d51-012de8f50e4a",
  "name": "blithe-downy-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 33178,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:26:53.109025+00:00",
  "ended_at": "2026-08-26T09:27:53.113063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e3dec62-2b2e-44f7-b44f-419b11c1ce62",
  "name": "hushed-boreal-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 41128,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:22:24.485604+00:00",
  "ended_at": "2026-08-26T09:23:24.494844+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c1f6698-5755-41d9-a772-0cda63287b4a",
  "name": "creaky-diligent-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 59822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:18:23.297909+00:00",
  "ended_at": "2026-08-26T09:18:24.030659+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "4990aded-3765-44ea-8b1c-68ebe2f34a7c",
  "name": "distant-reedy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39530,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:18:09.410071+00:00",
  "ended_at": "2026-08-26T09:18:11.495916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46fd8d16-23aa-4a71-b64b-823fc23883cf",
  "name": "gritty-wooded-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39516,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:17:59.875309+00:00",
  "ended_at": "2026-08-26T09:18:59.876339+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0b3d785e-45cf-4aca-ba91-cb1eb945f318",
  "name": "ivory-graceful-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60562,
  "username": "antigo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:10:02.687123+00:00",
  "ended_at": "2026-08-26T09:10:03.460776+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]