[
 {
  "id": "f00c17a5-4d18-4688-b503-11db1633996b",
  "name": "woven-fabled-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57484,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:10:07.280852+00:00",
  "ended_at": "2026-08-27T13:10:08.428732+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7c00e4aa-3488-4bea-8bb2-f9440acaf674",
  "name": "nameless-lonesome-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:09:50.689062+00:00",
  "ended_at": "2026-08-27T13:09:51.813302+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28ca9c99-8a9d-490c-a60e-61f70bf54920",
  "name": "rugged-solar-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57492,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:09:48.578780+00:00",
  "ended_at": "2026-08-27T13:09:49.993647+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a51727bf-109c-4e8a-a6ec-da8fe12737a8",
  "name": "creaky-brave-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42762,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:08:00.808131+00:00",
  "ended_at": "2026-08-27T13:08:02.709755+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "df41709d-64d3-4562-9836-4ca6ac287ced",
  "name": "weathered-brisk-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42784,
  "username": "ardi",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:07:45.770102+00:00",
  "ended_at": "2026-08-27T13:07:47.223233+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "496678f4-e522-4fdd-80b6-5a8aba4c82fc",
  "name": "proud-placid-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42778,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:07:44.289331+00:00",
  "ended_at": "2026-08-27T13:07:45.115360+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98f7846c-2b00-4d02-911d-880d43d131a8",
  "name": "early-salty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 43030,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:06:02.636910+00:00",
  "ended_at": "2026-08-27T13:06:04.735285+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "f22f078d-71e6-4fa6-9f72-21f02134b0ab",
  "name": "breezy-dewy-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 43052,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:44.169440+00:00",
  "ended_at": "2026-08-27T13:05:46.154659+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9885b641-afdd-4307-bf50-787bdc971bc8",
  "name": "arctic-brazen-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 43038,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:42.444682+00:00",
  "ended_at": "2026-08-27T13:05:43.476466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a3174d7-8e96-4b90-aa2a-2e5a18678ffd",
  "name": "gilded-gnarled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47522,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:05.419096+00:00",
  "ended_at": "2026-08-27T13:04:06.597421+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "faf1093c-fbe7-455c-ae5a-153e480dd1f5",
  "name": "regal-tranquil-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47534,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:38.522792+00:00",
  "ended_at": "2026-08-27T13:03:40.356568+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75512b79-b954-4daf-8ed2-8f19930adb99",
  "name": "muted-ivory-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47526,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:36.856359+00:00",
  "ended_at": "2026-08-27T13:03:37.869941+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b2ada6f7-2f54-4666-b63f-64729d310e48",
  "name": "amber-seaward-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47530,
  "username": "suraj",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:02:03.274397+00:00",
  "ended_at": "2026-08-27T13:02:04.383362+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "4e8cccf0-f1d9-4dac-8c76-75c2917cbf7d",
  "name": "golden-blithe-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40198,
  "username": "suraj",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:41.155940+00:00",
  "ended_at": "2026-08-27T13:01:42.030400+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e10a966-e349-401c-acab-556c4b3c698b",
  "name": "snowy-crimson-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47534,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:01:39.111115+00:00",
  "ended_at": "2026-08-27T13:01:40.495591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5fda80f-7664-41f9-a4b0-921f3cd98379",
  "name": "russet-mindful-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 45620,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:00:00.983466+00:00",
  "ended_at": "2026-08-27T13:00:02.535592+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "64c9ac26-c36e-4ab0-9ec3-98bbcdf0d433",
  "name": "tidal-fringed-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45646,
  "username": "admin1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:45.776744+00:00",
  "ended_at": "2026-08-27T12:59:46.386320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d91355f6-8367-41ae-9882-ce106b0ff799",
  "name": "arctic-mellow-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45630,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:43.485539+00:00",
  "ended_at": "2026-08-27T12:59:45.122735+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f5766448-702a-4f7c-9da4-fc116ddb10dc",
  "name": "deft-civil-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 56116,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:57:58.327929+00:00",
  "ended_at": "2026-08-27T12:57:59.404784+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "1f017aa2-1cad-41cc-b267-6b06f8c2d2ee",
  "name": "lanky-electric-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 56136,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:57:43.404175+00:00",
  "ended_at": "2026-08-27T12:57:44.458386+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3b27f9e-6ed6-4196-a2e2-18434252e9cc",
  "name": "golden-marbled-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 56130,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:57:42.095852+00:00",
  "ended_at": "2026-08-27T12:57:42.753286+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dbd209f5-dc7b-4904-92d7-6615076b6410",
  "name": "alpine-patient-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:01.232088+00:00",
  "ended_at": "2026-08-27T12:56:03.197873+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ba98acb4-89f9-4369-8938-ed25c5822d12",
  "name": "whispering-jagged-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:45.051749+00:00",
  "ended_at": "2026-08-27T12:55:46.051405+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d78d1c00-7325-45f7-8a04-a760eea94a2f",
  "name": "frank-chilly-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53764,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:43.378544+00:00",
  "ended_at": "2026-08-27T12:55:44.364004+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "531cd024-fe1e-45ff-b7d0-72e35385721e",
  "name": "fierce-freckled-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:54:05.492043+00:00",
  "ended_at": "2026-08-27T12:54:07.607201+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f4ae9bdf-98aa-4d50-9031-a865cd7847d6",
  "name": "wiry-crystal-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51566,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:49.222503+00:00",
  "ended_at": "2026-08-27T12:53:49.824622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2cd7726d-73f3-48fd-99cd-d1f621326136",
  "name": "drifting-downy-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49822,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:47.582639+00:00",
  "ended_at": "2026-08-27T12:53:48.574067+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b474a105-1c8f-4b7a-a107-b6513d19cb4c",
  "name": "wandering-icy-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:51:59.998119+00:00",
  "ended_at": "2026-08-27T12:52:01.203481+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a2897646-8b8c-4303-9a5d-3797ee2e4dfe",
  "name": "cheerful-curious-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51360,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:45.114700+00:00",
  "ended_at": "2026-08-27T12:51:46.134080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4417d94e-4742-48ba-bf9a-5b22b39406e6",
  "name": "seaward-crimson-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51346,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:43.015582+00:00",
  "ended_at": "2026-08-27T12:51:44.461515+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd05d352-deb2-4686-8fd3-2bedf4f19476",
  "name": "frosty-electric-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40492,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:49:57.375321+00:00",
  "ended_at": "2026-08-27T12:49:59.504062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "3c97d983-e6d4-4c13-ae82-f8fb16ae5619",
  "name": "bashful-ruddy-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37328,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:39.449497+00:00",
  "ended_at": "2026-08-27T12:49:40.533083+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d170bc1-9f8f-4028-9fa5-03ba9609dc07",
  "name": "craggy-solar-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40498,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:37.758480+00:00",
  "ended_at": "2026-08-27T12:49:38.795007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a91607e8-e524-40e0-9e00-a167432f342e",
  "name": "sullen-marine-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41434,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:47:51.603044+00:00",
  "ended_at": "2026-08-27T12:47:53.744422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e665c71c-fb6a-4d64-aeba-bcae6fdfe8d0",
  "name": "prickly-velvet-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:35.352041+00:00",
  "ended_at": "2026-08-27T12:47:36.453911+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4dabd30c-efd9-49e2-aa9f-29ed9f7feed1",
  "name": "wooded-supple-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:33.887321+00:00",
  "ended_at": "2026-08-27T12:47:34.663088+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5559e721-6a86-4e90-bdf4-92487a3505ca",
  "name": "salty-murky-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:53.445340+00:00",
  "ended_at": "2026-08-27T12:45:55.408876+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "3a8dc6c6-23f1-4d90-bd5d-43805cefd14e",
  "name": "muted-granite-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45466,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:31.117745+00:00",
  "ended_at": "2026-08-27T12:45:32.320954+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c23a44c5-a723-4247-855a-f2824f680fc6",
  "name": "mighty-gentle-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45450,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:29.367940+00:00",
  "ended_at": "2026-08-27T12:45:30.466394+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b4decfd-7187-4a21-81f0-e9b3932d8cf6",
  "name": "prairie-ancient-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57150,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:43:47.799358+00:00",
  "ended_at": "2026-08-27T12:43:49.271755+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "4a06d353-e5fa-439b-af03-44d6519588a4",
  "name": "lanky-tender-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51230,
  "username": "lighthouse",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:31.516689+00:00",
  "ended_at": "2026-08-27T12:43:32.659640+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15fe404b-3a67-4ae1-8c0b-541ce99fc67a",
  "name": "solemn-granite-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51226,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:43:29.869308+00:00",
  "ended_at": "2026-08-27T12:43:30.815127+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c574abd1-bd65-4620-886b-60c576ef5dea",
  "name": "indigo-distant-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41254,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:41:52.190247+00:00",
  "ended_at": "2026-08-27T12:41:54.311017+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "3272b6bc-0705-4e42-888d-64ba584273d2",
  "name": "shifting-cunning-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41262,
  "username": "uno50",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:36.483426+00:00",
  "ended_at": "2026-08-27T12:41:37.382280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73542e21-e36a-4256-b3f3-ab42eeec345a",
  "name": "tender-rambling-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41256,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:41:34.741630+00:00",
  "ended_at": "2026-08-27T12:41:35.830248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "561a1baf-10b5-495f-9d07-ff7f1129e21d",
  "name": "seaward-twilight-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47306,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:39:55.682275+00:00",
  "ended_at": "2026-08-27T12:39:56.861549+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "679e29a3-165e-41e6-95ad-3a99708cd9f1",
  "name": "mindful-wry-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 60160,
  "username": "xie",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:39.812494+00:00",
  "ended_at": "2026-08-27T12:39:41.463108+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10bc4503-9042-4b44-b94e-ef782982b4ae",
  "name": "calm-arctic-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47308,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:37.602602+00:00",
  "ended_at": "2026-08-27T12:39:39.161528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e59a2b6-5ca3-4b3c-a371-56c48ad903d9",
  "name": "crisp-honest-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 59326,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:49.832818+00:00",
  "ended_at": "2026-08-27T12:37:51.792145+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "65834ad2-99ae-492e-8b0f-b3fd2076385d",
  "name": "forlorn-spirited-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:34.612656+00:00",
  "ended_at": "2026-08-27T12:37:35.396316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "30cf0601-5232-4355-9365-a2a1b01f49d7",
  "name": "buoyant-sincere-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59330,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:33.208796+00:00",
  "ended_at": "2026-08-27T12:37:33.960029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d331a879-855c-450e-b3a6-ec98cec99240",
  "name": "brazen-upland-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37660,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 346,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:35:51.172555+00:00",
  "ended_at": "2026-08-27T12:35:52.995733+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "beb2eb41-e143-4bbb-8a2b-750e77bf5985",
  "name": "alpine-oaken-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37678,
  "username": "admin123",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:35.908111+00:00",
  "ended_at": "2026-08-27T12:35:37.559532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e344c064-0a2b-4585-b6cc-1de1e4ebe998",
  "name": "knotted-sturdy-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:35:34.382289+00:00",
  "ended_at": "2026-08-27T12:35:35.255734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a43d6df3-a362-41f0-ac3b-6d50b2b37097",
  "name": "flinty-foggy-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37116,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:44.889851+00:00",
  "ended_at": "2026-08-27T12:33:45.802782+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4580ea74-454f-437d-883a-77f5f7308cc3",
  "name": "gallant-sullen-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37136,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:28.294874+00:00",
  "ended_at": "2026-08-27T12:33:29.314411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b23193e-2268-4797-9866-87c0f8811dc9",
  "name": "nautical-thrifty-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37122,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:26.967275+00:00",
  "ended_at": "2026-08-27T12:33:27.641572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "99ccf506-6ffc-4033-8775-6988a850b13b",
  "name": "whispering-placid-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51354,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:43.140989+00:00",
  "ended_at": "2026-08-27T12:31:45.015186+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "c6734aa3-50aa-4019-b55a-52fb9955b1db",
  "name": "faded-distant-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51370,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:18.039550+00:00",
  "ended_at": "2026-08-27T12:31:19.732461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6e06384-26b7-4430-bd1a-3a334790bfaf",
  "name": "forlorn-quaint-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51358,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:16.355062+00:00",
  "ended_at": "2026-08-27T12:31:17.384912+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1609ea5b-d2dc-4f1e-96b4-c9b871295286",
  "name": "ruddy-humble-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 38402,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:42.393155+00:00",
  "ended_at": "2026-08-27T12:29:44.480765+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "14aa3042-67a4-4881-b2b1-8310bb7ba4d7",
  "name": "airy-humble-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38420,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:15.453202+00:00",
  "ended_at": "2026-08-27T12:29:16.861202+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6280a327-465c-4df1-b5d5-b9675d7c5f1c",
  "name": "earnest-wistful-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38414,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:13.457418+00:00",
  "ended_at": "2026-08-27T12:29:14.802822+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "046b6074-3b9c-4437-be5f-664598711280",
  "name": "foggy-snowy-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42818,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:40.954237+00:00",
  "ended_at": "2026-08-27T12:27:41.855899+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "22892b3d-d131-484e-917f-862a3ce159ef",
  "name": "graceful-vivid-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55848,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:20.268770+00:00",
  "ended_at": "2026-08-27T12:27:22.206557+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "07a8b002-e46c-4c82-8a4e-a0dd06cf8cd0",
  "name": "autumn-buoyant-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42824,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:18.578573+00:00",
  "ended_at": "2026-08-27T12:27:19.616724+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fe44b2d-599e-4b97-8931-4318d9559b8d",
  "name": "foggy-misty-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49174,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 348,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:25:42.378488+00:00",
  "ended_at": "2026-08-27T12:25:44.615648+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "759f2d2d-cae8-4e9a-9238-0cc155fa6cfa",
  "name": "subtle-thrifty-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34182,
  "username": "james",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:22.725003+00:00",
  "ended_at": "2026-08-27T12:25:24.706843+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36a620af-bbd1-4283-a08c-bb00b45d7448",
  "name": "drifting-pleasant-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34170,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:20.313844+00:00",
  "ended_at": "2026-08-27T12:25:22.192943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08df2f51-54d1-4c35-ae9f-f6a520b52ca0",
  "name": "valiant-glacial-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:42.940114+00:00",
  "ended_at": "2026-08-27T12:23:44.192085+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d0062a03-d96f-4390-8073-908cfdfc2009",
  "name": "earnest-brave-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44694,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:28.016151+00:00",
  "ended_at": "2026-08-27T12:23:29.108055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4f04d438-5bd3-4155-abe8-eb4def1c29f1",
  "name": "calm-hardy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44678,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:25.737846+00:00",
  "ended_at": "2026-08-27T12:23:27.367678+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "84d2a4e8-6fcc-4968-a1e4-a049d8e02664",
  "name": "russet-rugged-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53984,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:47.348913+00:00",
  "ended_at": "2026-08-27T12:21:48.544087+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "409f38cc-6831-4ef8-a575-98aa01aa17e5",
  "name": "rapid-frugal-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45978,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:32.977725+00:00",
  "ended_at": "2026-08-27T12:21:34.112758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00fc180b-beab-4be6-911c-df99e10a1c9f",
  "name": "feral-curious-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45970,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:30.418729+00:00",
  "ended_at": "2026-08-27T12:21:32.323012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b8744b2-01e2-49be-bece-36ec39409a93",
  "name": "brisk-blithe-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40896,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:44.225424+00:00",
  "ended_at": "2026-08-27T12:19:45.643083+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b971e5de-b870-4572-a10d-ec65612c5d25",
  "name": "placid-curious-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:29.542825+00:00",
  "ended_at": "2026-08-27T12:19:30.247531+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e476f28-5a02-45b9-8651-c3b9a7b4af7c",
  "name": "frank-valiant-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40908,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:27.963185+00:00",
  "ended_at": "2026-08-27T12:19:28.850652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "464cf29c-a5b7-42bb-a3fa-d990165de08a",
  "name": "brave-foggy-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57670,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:38.862670+00:00",
  "ended_at": "2026-08-27T12:17:40.888936+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "5955f270-2c68-451d-bb99-898a798c1521",
  "name": "drifting-lonesome-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57688,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:24.769873+00:00",
  "ended_at": "2026-08-27T12:17:25.833022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "060b4211-25b5-40f4-bcf4-d15c66ebd1c2",
  "name": "idle-airy-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57682,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:22.295832+00:00",
  "ended_at": "2026-08-27T12:17:24.113298+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "779e6bda-1ea1-48e9-a699-6b4db9dfc7e7",
  "name": "polar-rambling-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37324,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:15:38.945247+00:00",
  "ended_at": "2026-08-27T12:15:40.531770+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "632586ea-1ecd-47e6-ba8b-17196908bbcf",
  "name": "mindful-craggy-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37348,
  "username": "sklep",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:24.393971+00:00",
  "ended_at": "2026-08-27T12:15:25.858356+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "58e3a3fd-ebbd-47a5-aa35-506d68572dc3",
  "name": "courtly-downy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37338,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:15:21.928506+00:00",
  "ended_at": "2026-08-27T12:15:23.740770+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "052656f7-0f3a-4553-91ff-893e15d0df4f",
  "name": "hushed-alpine-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:13:37.615119+00:00",
  "ended_at": "2026-08-27T12:13:38.850014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "fc2385d9-513b-4393-b0b4-6ca8f596ed2c",
  "name": "crisp-gleaming-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54456,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:22.238840+00:00",
  "ended_at": "2026-08-27T12:13:23.821651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "363515e9-6ef8-4fd6-a333-97bef7d7b5b9",
  "name": "marbled-crisp-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54454,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:19.949822+00:00",
  "ended_at": "2026-08-27T12:13:21.550135+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2cebf8e2-48ac-4180-a403-6c2558213b56",
  "name": "dewy-ivory-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 34578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:11.214918+00:00",
  "ended_at": "2026-08-27T12:10:12.392297+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "cee588af-453c-4b67-a80a-765a10a9c803",
  "name": "thrifty-reedy-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:54.259468+00:00",
  "ended_at": "2026-08-27T12:09:56.046111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f1be544-6866-4c61-9dbe-0e73c904a846",
  "name": "cheerful-tender-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34594,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:51.731699+00:00",
  "ended_at": "2026-08-27T12:09:53.610094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f08357d-f587-4488-bc04-95d8113c1b3f",
  "name": "solemn-languid-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44708,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:08:12.443806+00:00",
  "ended_at": "2026-08-27T12:08:13.652211+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "ce01d268-cd51-42b1-b71f-61ca94ade1b8",
  "name": "gritty-hazy-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44712,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:56.535543+00:00",
  "ended_at": "2026-08-27T12:07:57.962648+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6b264416-e89e-40e0-9fd7-51cb7c730b64",
  "name": "blithe-vigilant-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44710,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:54.973683+00:00",
  "ended_at": "2026-08-27T12:07:55.880769+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8601141e-53d7-4fed-b4c3-ae24d34ccf98",
  "name": "jaunty-knotted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49574,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:01.699560+00:00",
  "ended_at": "2026-08-27T12:06:02.807032+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2219
 },
 {
  "id": "68daff2e-5e47-4b94-a6d2-381c057365bc",
  "name": "sterling-nautical-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49594,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:45.699456+00:00",
  "ended_at": "2026-08-27T12:05:47.566851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a64ae689-556a-4754-adb8-b73bafa1082a",
  "name": "whispering-lawful-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49578,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:43.910341+00:00",
  "ended_at": "2026-08-27T12:05:45.045585+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a1f41a3c-dbe5-46b1-8eb5-a6ad2b85ae3e",
  "name": "bashful-gallant-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57434,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:04.569186+00:00",
  "ended_at": "2026-08-27T12:04:06.052124+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2229
 },
 {
  "id": "69d96c72-9a00-40ae-9526-ef102ad8e18c",
  "name": "frank-kindly-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59852,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:49.672515+00:00",
  "ended_at": "2026-08-27T12:03:51.110404+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed3d6049-1884-4c01-b7ac-bdb3fdf9b2e4",
  "name": "misty-twilight-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:03:47.734351+00:00",
  "ended_at": "2026-08-27T12:03:49.023695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9dc33e9e-6f0d-4d60-940a-94ecf7d2212a",
  "name": "calm-slender-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 39344,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:02:01.018121+00:00",
  "ended_at": "2026-08-27T12:02:02.890480+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2217
 },
 {
  "id": "1ac0de0f-d884-4efe-8f73-d57828124d90",
  "name": "oaken-subtle-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 39362,
  "username": "debian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:44.181600+00:00",
  "ended_at": "2026-08-27T12:01:45.933458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9eb4222a-9c43-4925-8294-507bf7cec108",
  "name": "lunar-vaulted-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 39356,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:41.614716+00:00",
  "ended_at": "2026-08-27T12:01:43.494834+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fdbcea8-d5b0-44bc-bde7-8f0f9ea61396",
  "name": "cosmic-subtle-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 54752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:01.262277+00:00",
  "ended_at": "2026-08-27T12:00:02.719823+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "90d3daf2-43a3-43e2-88a2-35b7360d1a22",
  "name": "vaulted-gleaming-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54758,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:37.915882+00:00",
  "ended_at": "2026-08-27T11:59:39.007733+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d092b50c-e976-4a30-89ce-7cb84ef19492",
  "name": "wooded-autumn-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54756,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:36.069921+00:00",
  "ended_at": "2026-08-27T11:59:37.261014+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e00d555-5ed4-4392-8b86-81cdb972bf6e",
  "name": "lonesome-sleepy-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 33432,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:58:03.193437+00:00",
  "ended_at": "2026-08-27T11:58:05.147503+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2190
 },
 {
  "id": "4d83ec82-8178-4a96-b367-0d52f50e51ab",
  "name": "seaward-placid-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 33460,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:36.702068+00:00",
  "ended_at": "2026-08-27T11:57:38.387008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73cd0e1b-a8e0-4021-977e-f7a813a2384d",
  "name": "canny-wiry-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 33446,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:35.322490+00:00",
  "ended_at": "2026-08-27T11:57:36.008397+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88eaab01-6b19-4586-ab2b-498b94696841",
  "name": "glacial-lonesome-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53458,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:55:59.814215+00:00",
  "ended_at": "2026-08-27T11:56:01.897737+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2169
 },
 {
  "id": "63243633-ff5f-4182-95c2-54108ed4fed9",
  "name": "mellow-idle-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53472,
  "username": "cps",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:42.562853+00:00",
  "ended_at": "2026-08-27T11:55:43.279273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1ab0aaa3-64c3-43f0-b940-82e7cbdef75a",
  "name": "silent-northern-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53466,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:41.020328+00:00",
  "ended_at": "2026-08-27T11:55:41.910846+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b35078f3-5fb4-43f6-b112-bf371f237986",
  "name": "lawful-amber-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42784,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:59.205091+00:00",
  "ended_at": "2026-08-27T11:54:00.212862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2162
 },
 {
  "id": "ef161ab2-affa-4bce-8dd8-79016202d584",
  "name": "russet-gentle-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46244,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:33.524936+00:00",
  "ended_at": "2026-08-27T11:53:34.884327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1854bf02-0819-4251-9a77-d76e89e512b7",
  "name": "sooty-velvet-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46230,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:30.899068+00:00",
  "ended_at": "2026-08-27T11:53:32.873180+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faf1ed23-d01e-449e-a490-07bd77bfa5a5",
  "name": "whispering-woven-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:56.198137+00:00",
  "ended_at": "2026-08-27T11:51:58.401380+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "4f77e68e-6e5f-46a0-aa86-a1085e314e2d",
  "name": "opal-primal-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:37.270099+00:00",
  "ended_at": "2026-08-27T11:51:38.176813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "474be15e-09fd-44ec-8dd0-fad5202331b1",
  "name": "fringed-frank-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47966,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:35.474470+00:00",
  "ended_at": "2026-08-27T11:51:36.612542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e1f66112-87f6-47df-a41b-341a29ff54b1",
  "name": "foggy-alpine-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40216,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:49:59.749424+00:00",
  "ended_at": "2026-08-27T11:50:01.495060+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "663d9908-021d-4475-97d9-053010350332",
  "name": "sooty-lucid-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40224,
  "username": "ansible",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:44.171583+00:00",
  "ended_at": "2026-08-27T11:49:46.043108+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de3174e4-d24d-47f3-b848-c5e793a02c47",
  "name": "rustic-plucky-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 40222,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:41.994411+00:00",
  "ended_at": "2026-08-27T11:49:43.518111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00030452-c690-4616-bbdc-5492e2710ee0",
  "name": "graceful-glacial-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:01.797262+00:00",
  "ended_at": "2026-08-27T11:48:03.011742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "643fabba-0c38-40d2-8dcc-19eb4c385720",
  "name": "gritty-brisk-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37664,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:45.270774+00:00",
  "ended_at": "2026-08-27T11:47:47.243425+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd6a2939-0007-41cb-bd63-1f74977a05b8",
  "name": "wooded-eager-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37654,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:42.839805+00:00",
  "ended_at": "2026-08-27T11:47:44.615959+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cde8efb-2e28-4eef-8915-be0e7315f5c5",
  "name": "honest-thawing-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 39746,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:57.022104+00:00",
  "ended_at": "2026-08-27T11:45:58.436862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2133
 },
 {
  "id": "d625f9e6-cde4-4ed7-9c27-fa673947f09d",
  "name": "autumn-calm-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41654,
  "username": "daniel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:42.510788+00:00",
  "ended_at": "2026-08-27T11:45:43.717737+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "890f51df-ffdd-43b5-89aa-d2c10197784d",
  "name": "shifting-leafy-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41646,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:39.963778+00:00",
  "ended_at": "2026-08-27T11:45:41.857963+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35d65587-5e48-476d-b292-410e632ac2a8",
  "name": "brisk-vernal-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 52084,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:58.000327+00:00",
  "ended_at": "2026-08-27T11:43:59.549429+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2118
 },
 {
  "id": "d11858f1-3fc6-41f1-b66f-9341a91633db",
  "name": "nameless-solemn-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 52098,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:43.276350+00:00",
  "ended_at": "2026-08-27T11:43:44.285001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75dd39d6-f1e2-42f3-969b-ed7169a8edbd",
  "name": "emerald-sterling-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 52096,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:41.424147+00:00",
  "ended_at": "2026-08-27T11:43:42.362029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f82edd59-1d77-4e21-aabc-38e643c9955c",
  "name": "steady-emerald-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:54.297613+00:00",
  "ended_at": "2026-08-27T11:41:55.633851+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "c6f8436e-89fb-4634-9908-28427bbc3f72",
  "name": "quaint-cosmic-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42790,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:38.616289+00:00",
  "ended_at": "2026-08-27T11:41:39.691768+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1699b24-76cd-4ef6-8162-c818df8444ff",
  "name": "frank-feral-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42780,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:36.783589+00:00",
  "ended_at": "2026-08-27T11:41:37.959426+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cfa3a5a-651c-4953-aec2-2d764a29de42",
  "name": "drifting-amiable-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:38:02.282253+00:00",
  "ended_at": "2026-08-27T11:38:04.558531+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "30bd727b-c2f6-4a58-b232-e3b74bfed317",
  "name": "frank-prairie-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:47.599999+00:00",
  "ended_at": "2026-08-27T11:37:48.448226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6292ff9a-9eca-44b2-a577-29397a8e49ad",
  "name": "loyal-tender-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41476,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:44.962057+00:00",
  "ended_at": "2026-08-27T11:37:46.659718+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cbd5b6dc-9f75-425d-995c-e3c96f367da3",
  "name": "thorny-humble-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 58122,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:35:53.031371+00:00",
  "ended_at": "2026-08-27T11:35:54.476890+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "782746cf-f575-4776-b1d8-d75649b41f05",
  "name": "drifting-tranquil-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 58138,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:37.753414+00:00",
  "ended_at": "2026-08-27T11:35:39.710735+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b09ccb2a-3af7-4298-95fb-7b961bf83b7e",
  "name": "northern-lunar-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 58126,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:35:36.053600+00:00",
  "ended_at": "2026-08-27T11:35:37.099961+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff093cec-f590-4c1c-bd7f-e90971facd80",
  "name": "inland-tender-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55966,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:52.709062+00:00",
  "ended_at": "2026-08-27T11:33:53.939195+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "21802301-fd48-4d60-ba5c-a3abf5b01cc8",
  "name": "wandering-proud-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55984,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:42.702220+00:00",
  "ended_at": "2026-08-27T11:33:43.309468+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69a3a57b-700f-431a-b2fb-1db5513a8f1d",
  "name": "fringed-knotted-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55982,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:41.370695+00:00",
  "ended_at": "2026-08-27T11:33:42.048089+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "030de59d-01f2-4271-a646-497462f59b23",
  "name": "velvet-barren-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37188,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:59.093176+00:00",
  "ended_at": "2026-08-27T11:31:59.758305+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2055
 },
 {
  "id": "88a7f256-05e4-4b85-bda5-ef959a57e958",
  "name": "misty-granite-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46952,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:51.230817+00:00",
  "ended_at": "2026-08-27T11:31:52.307879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60d732a3-7454-40c0-aab0-f64714cc3ace",
  "name": "stoic-blazing-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37202,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:48.828844+00:00",
  "ended_at": "2026-08-27T11:31:50.543061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75e0d1c1-2119-4298-b11c-7305bd833462",
  "name": "barren-western-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55158,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:29:53.805813+00:00",
  "ended_at": "2026-08-27T11:29:54.454812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "9e1487d8-6c72-4cd5-b38b-ab3b0b56c53e",
  "name": "sullen-faded-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55164,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:45.013165+00:00",
  "ended_at": "2026-08-27T11:29:46.307131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "535ecacb-756d-45b5-a853-aaa019545408",
  "name": "peaty-rapid-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55162,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:42.447312+00:00",
  "ended_at": "2026-08-27T11:29:44.352184+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d7d245a-9145-438f-8b8a-e27f078306ed",
  "name": "distant-balmy-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 57984,
  "username": "danny",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:26:21.314547+00:00",
  "ended_at": "2026-08-27T11:26:22.563901+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]