[
 {
  "id": "e5bbe61c-4330-4c76-b8b7-169e1a52688c",
  "name": "wistful-solemn-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 58454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:28:31.967852+00:00",
  "ended_at": "2026-08-26T18:28:33.184528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "bc1ef3cf-2924-44b2-b0fb-ead132920d0c",
  "name": "polar-merry-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:28:13.574057+00:00",
  "ended_at": "2026-08-26T18:28:14.948398+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09f10d26-f366-4625-90b4-771f78e35108",
  "name": "emerald-brisk-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58468,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:28:10.829227+00:00",
  "ended_at": "2026-08-26T18:28:12.475626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "489fe293-0c72-4ce4-ad63-285e100aebb5",
  "name": "primal-indigo-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 52828,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:25:33.989776+00:00",
  "ended_at": "2026-08-26T18:25:35.452780+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bc269635-ae72-46f8-9337-a487cb8133e4",
  "name": "whispering-stoic-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 57998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:25:14.830408+00:00",
  "ended_at": "2026-08-26T18:25:16.407491+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d4d9fa5-5b5c-4ed7-a6cd-2538ffb0581c",
  "name": "hardy-feral-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52844,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:25:12.312131+00:00",
  "ended_at": "2026-08-26T18:25:13.746543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c527c33-e864-4482-b126-9d9487034a67",
  "name": "wandering-whispering-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 52410,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:22:37.007494+00:00",
  "ended_at": "2026-08-26T18:22:38.014476+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2265
 },
 {
  "id": "0d8a66e0-7a34-4b77-9b41-f443fb2f8a57",
  "name": "grumpy-buoyant-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52436,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:22:19.279653+00:00",
  "ended_at": "2026-08-26T18:22:20.094250+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a516075-b9ed-448c-af21-346f771d8090",
  "name": "boreal-windswept-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 52424,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:22:17.013903+00:00",
  "ended_at": "2026-08-26T18:22:18.229327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01030d1d-e31f-407f-81e3-04200798ba22",
  "name": "daring-humble-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56538,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:19:41.005370+00:00",
  "ended_at": "2026-08-26T18:19:42.106771+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "dcb15359-c9e0-423e-b78c-30142cac199a",
  "name": "crisp-tangled-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56544,
  "username": "frontend",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:22.732368+00:00",
  "ended_at": "2026-08-26T18:19:24.048729+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f796f2cf-3534-458c-980f-0f1062842947",
  "name": "curious-idle-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56542,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:20.723753+00:00",
  "ended_at": "2026-08-26T18:19:21.657196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33d09e0a-72d7-4661-aaad-ca12bd5e1b36",
  "name": "gnarled-slender-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 55992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:16:36.587288+00:00",
  "ended_at": "2026-08-26T18:16:38.154660+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "714074c5-548c-42df-977d-df64ce550f27",
  "name": "gnarled-prairie-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:16:18.446148+00:00",
  "ended_at": "2026-08-26T18:16:19.357700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c25956e3-4f93-4109-964f-0103e0c8e0d9",
  "name": "somber-hazel-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56008,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:16:16.589920+00:00",
  "ended_at": "2026-08-26T18:16:17.380428+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2c017946-ac04-4700-8400-03e439d05a6d",
  "name": "bold-humble-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 50998,
  "username": "support",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:13:39.636117+00:00",
  "ended_at": "2026-08-26T18:13:40.822236+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2292
 },
 {
  "id": "29630fab-0fae-4c7d-a0e1-b5a6f71dd95b",
  "name": "plush-ivory-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51008,
  "username": "support",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:13:18.689220+00:00",
  "ended_at": "2026-08-26T18:13:20.364230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "776ea109-4a88-4ae1-81e9-70dfa0e624f5",
  "name": "quiet-wooded-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51004,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:13:16.202700+00:00",
  "ended_at": "2026-08-26T18:13:17.619499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be48beab-5d11-4398-b754-4d558975a7c3",
  "name": "placid-northern-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37064,
  "username": "ian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:10:31.207276+00:00",
  "ended_at": "2026-08-26T18:10:32.850047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2242
 },
 {
  "id": "36470671-aeef-41e6-bd61-748c58f71098",
  "name": "bashful-dewy-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56718,
  "username": "ian",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:10:13.737009+00:00",
  "ended_at": "2026-08-26T18:10:14.656137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0500644f-b8b6-4dcf-bc10-1a1e50c2c6f1",
  "name": "misty-austere-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:10:11.237472+00:00",
  "ended_at": "2026-08-26T18:10:12.663230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88e82370-d6e4-49df-9fe7-07c4ee56db9c",
  "name": "lively-painted-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33744,
  "username": "andy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:07:35.477191+00:00",
  "ended_at": "2026-08-26T18:07:36.937886+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "f6ed1092-fcb3-4329-93ff-9489f46d9d19",
  "name": "mellow-knotted-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33182,
  "username": "andy",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:07:16.938588+00:00",
  "ended_at": "2026-08-26T18:07:18.452909+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4f06c8b-d8d1-40ae-bab2-e93874b4f282",
  "name": "salty-dewy-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33166,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:07:15.111233+00:00",
  "ended_at": "2026-08-26T18:07:15.892825+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "015510ba-cea4-469c-9467-beeb6085312d",
  "name": "mellow-cheerful-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 47128,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:04:40.564645+00:00",
  "ended_at": "2026-08-26T18:04:41.652112+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "511b06f5-672a-4dd2-89c4-b291ff1840c0",
  "name": "lucid-polar-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47156,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:04:21.192478+00:00",
  "ended_at": "2026-08-26T18:04:22.506236+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7b113dc6-1e1d-4675-8334-558a9e6810a3",
  "name": "pewter-lonesome-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47140,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:04:18.885455+00:00",
  "ended_at": "2026-08-26T18:04:20.097106+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67859af0-a50c-42d2-acee-a97ec9efad1f",
  "name": "bronzed-glassy-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 34416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:01:46.915015+00:00",
  "ended_at": "2026-08-26T18:01:48.495916+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "80eaffd2-7ffe-43fc-b5f0-a10260abfe0c",
  "name": "nautical-jagged-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35804,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:01:27.739730+00:00",
  "ended_at": "2026-08-26T18:01:29.320091+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8a912ea6-3c72-4e58-98e2-49990889d5d0",
  "name": "balmy-lawful-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35794,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:01:24.920886+00:00",
  "ended_at": "2026-08-26T18:01:26.694946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f5791c3-fba9-4d8c-93d1-ac54ecc14cfc",
  "name": "bashful-civil-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 39658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:58:46.871208+00:00",
  "ended_at": "2026-08-26T17:58:47.874485+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "5f1e1899-4b02-4a40-ae75-c2815cef4c03",
  "name": "curious-autumn-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:58:28.492479+00:00",
  "ended_at": "2026-08-26T17:58:30.549116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "766da21a-fd4c-4902-ad4b-f456d5f89cc4",
  "name": "wandering-ancient-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44472,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:58:25.437697+00:00",
  "ended_at": "2026-08-26T17:58:27.447316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42c8c558-be26-41de-bb4f-a2857d57b4d0",
  "name": "somber-frugal-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45384,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:55:47.776042+00:00",
  "ended_at": "2026-08-26T17:55:48.730455+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2f5119b6-2a30-4846-8d2f-c65086c7569f",
  "name": "seaward-snowy-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:55:30.459779+00:00",
  "ended_at": "2026-08-26T17:55:31.564758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6e3b40b-b8c3-4cf0-b061-ce1a17cd4359",
  "name": "barren-diligent-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45398,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:55:27.891035+00:00",
  "ended_at": "2026-08-26T17:55:29.346450+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e386465-3bb6-4d0e-94d3-53afdbec0a0f",
  "name": "bashful-coastal-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33048,
  "username": "b1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:52:45.810411+00:00",
  "ended_at": "2026-08-26T17:52:47.218282+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "a05fdcdb-b860-4034-a30a-4ac6dffa5b0b",
  "name": "northern-mellow-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37090,
  "username": "b1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:52:26.545430+00:00",
  "ended_at": "2026-08-26T17:52:28.377247+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "082595a6-9446-4579-a0ae-dfdcb9c11096",
  "name": "lively-sterling-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37088,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:52:24.732356+00:00",
  "ended_at": "2026-08-26T17:52:25.494551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "85e5618c-019d-4ab9-b5ec-763679292810",
  "name": "brave-mighty-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51704,
  "username": "administrator",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:49:45.923841+00:00",
  "ended_at": "2026-08-26T17:49:47.279948+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2272
 },
 {
  "id": "edb906a0-6164-4540-8162-1aecb785af8f",
  "name": "rambling-fearless-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41254,
  "username": "administrator",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:49:26.073654+00:00",
  "ended_at": "2026-08-26T17:49:27.881380+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b0d796d-556e-47ff-b9a2-39e50854add1",
  "name": "feathered-gallant-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41248,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:49:24.272337+00:00",
  "ended_at": "2026-08-26T17:49:25.026614+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b28b3946-f40a-4a62-aad3-426a0baa5ba0",
  "name": "ginger-blithe-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45198,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:46:44.963741+00:00",
  "ended_at": "2026-08-26T17:46:46.472443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "1f40da99-28b2-4aeb-9ec1-ac387599c442",
  "name": "gnarled-brave-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48932,
  "username": "camera",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:46:26.381371+00:00",
  "ended_at": "2026-08-26T17:46:27.364697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3fd97244-c8fa-48c8-b952-c6013b95ab3a",
  "name": "civil-hazel-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45206,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:46:23.296895+00:00",
  "ended_at": "2026-08-26T17:46:25.292235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8362a899-814a-4232-9e21-5f7d15ea2953",
  "name": "ruddy-ancient-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 58700,
  "username": "osadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:43:45.444701+00:00",
  "ended_at": "2026-08-26T17:43:46.470951+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "66d62e91-8f0e-4b22-a41c-8478c6ee8cd8",
  "name": "rambling-gnarled-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41446,
  "username": "osadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:43:27.535392+00:00",
  "ended_at": "2026-08-26T17:43:28.467684+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "411a2718-a629-4d6e-8f08-16b3a5491932",
  "name": "plush-barren-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41434,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:43:24.459429+00:00",
  "ended_at": "2026-08-26T17:43:26.480124+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c769f06-f9f6-43a3-b9d6-eb995d5ad61e",
  "name": "shifting-granite-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 36146,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:40:50.947543+00:00",
  "ended_at": "2026-08-26T17:40:52.293510+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "c0d055a1-319c-4faa-9f4d-d8d85184573e",
  "name": "windswept-hazy-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36166,
  "username": "user1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:40:32.997381+00:00",
  "ended_at": "2026-08-26T17:40:34.010607+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6b67f17-8867-4489-8ab5-659ac66b75ce",
  "name": "stoic-northern-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36152,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:40:30.320753+00:00",
  "ended_at": "2026-08-26T17:40:31.917460+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93ef68b0-34e4-4cb8-9604-d7f2d61343c0",
  "name": "bitter-amiable-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59452,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:37:47.927305+00:00",
  "ended_at": "2026-08-26T17:37:49.152592+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "1e328fc8-c40a-4c9c-aa2b-40be2586da3c",
  "name": "thrifty-emerald-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:37:30.427322+00:00",
  "ended_at": "2026-08-26T17:37:31.300904+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1cef4ea-78be-4895-83ac-7da4b2a223ec",
  "name": "distant-boreal-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59464,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:37:28.036435+00:00",
  "ended_at": "2026-08-26T17:37:29.373582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79f7ac4d-90e9-48c0-970f-f9867fa65fd3",
  "name": "western-bronzed-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35534,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 511,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:34:46.894710+00:00",
  "ended_at": "2026-08-26T17:34:48.125503+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "07f0c14a-38ff-431a-9dcd-ca020fad57b2",
  "name": "frugal-obsidian-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35540,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:34:30.363623+00:00",
  "ended_at": "2026-08-26T17:34:31.363838+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "88859f45-0442-4b95-b713-4564c3acd736",
  "name": "brazen-russet-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35536,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:34:27.497383+00:00",
  "ended_at": "2026-08-26T17:34:29.312136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c7f4841d-94b6-48a5-a1a5-b3460139507d",
  "name": "faded-hushed-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 48426,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:31:49.785155+00:00",
  "ended_at": "2026-08-26T17:31:51.183273+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "d2d5b070-d4e3-4121-b8ae-daa63f6048b5",
  "name": "freckled-granite-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48440,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:31:29.478447+00:00",
  "ended_at": "2026-08-26T17:31:30.683495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "655d4633-60af-407c-ac13-1d982885128d",
  "name": "creaky-frank-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 48436,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:31:26.584798+00:00",
  "ended_at": "2026-08-26T17:31:28.420427+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca44722c-8e24-4640-ac8d-99a7a80da1f9",
  "name": "sincere-weathered-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 549,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:28:55.684304+00:00",
  "ended_at": "2026-08-26T17:28:57.131528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "9a18d25b-6cff-4a2d-adda-43e582265258",
  "name": "amiable-clever-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:35.903048+00:00",
  "ended_at": "2026-08-26T17:28:37.228375+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c2406a9-0008-47b8-8b68-e946d7c935cb",
  "name": "rustic-barren-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59818,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:32.817757+00:00",
  "ended_at": "2026-08-26T17:28:34.862488+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04d8d87e-c675-4844-aef2-717c1814d070",
  "name": "painted-canny-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35508,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:25:58.561111+00:00",
  "ended_at": "2026-08-26T17:26:00.154051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "e2b06e11-fc29-4a78-b067-2f1e1224b553",
  "name": "mottled-cheerful-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35522,
  "username": "kevin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:25:39.857531+00:00",
  "ended_at": "2026-08-26T17:25:41.770952+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4200c956-bfe6-4b6b-9597-858941d4492a",
  "name": "reedy-icy-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35510,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:25:37.906216+00:00",
  "ended_at": "2026-08-26T17:25:38.864214+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4218c19a-437a-497c-96ad-c76533e859b1",
  "name": "lawful-sturdy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45024,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:23:07.545343+00:00",
  "ended_at": "2026-08-26T17:23:08.968897+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6e117e0-8e3d-4250-aa4e-bd8462439e47",
  "name": "hushed-hazel-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:49.953210+00:00",
  "ended_at": "2026-08-26T17:22:50.782054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f6a9aaa-8b60-419a-8996-742b664c5c54",
  "name": "autumn-arctic-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45026,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:46.878842+00:00",
  "ended_at": "2026-08-26T17:22:48.886630+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2092c945-ba1d-4b8d-91c9-6ad647fcdf48",
  "name": "faded-jolly-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 44208,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 539,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:20:13.004124+00:00",
  "ended_at": "2026-08-26T17:20:14.511849+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "474b2122-5d26-48d1-9ad7-3df3d137f9de",
  "name": "bitter-shifting-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:19:53.946914+00:00",
  "ended_at": "2026-08-26T17:19:55.682043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c4c4e20-b152-4313-b569-9c8bc71d2121",
  "name": "thrifty-eager-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44224,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:19:51.388965+00:00",
  "ended_at": "2026-08-26T17:19:52.990436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44c50a88-9dbd-49f3-b57a-76d64fdc0a5d",
  "name": "genial-mighty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 50650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:17:22.479193+00:00",
  "ended_at": "2026-08-26T17:17:23.573581+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "25a04f08-9dbb-41ee-a253-21793abe2a5d",
  "name": "orderly-brazen-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 50666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:17:03.437756+00:00",
  "ended_at": "2026-08-26T17:17:05.032588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "65122ffd-48a8-48bd-9deb-efd51c63b5ce",
  "name": "blunt-knotted-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 50664,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:17:01.320577+00:00",
  "ended_at": "2026-08-26T17:17:02.390140+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67ee518b-6e71-49b1-afcc-a116e782369c",
  "name": "brazen-wry-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37428,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:14:22.643635+00:00",
  "ended_at": "2026-08-26T17:14:23.689337+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0808be22-fcde-47a9-905e-0b632a2d5ed0",
  "name": "northern-shaded-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:14:04.554099+00:00",
  "ended_at": "2026-08-26T17:14:05.502970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7e5d5f87-8b87-496d-82e7-03e0d4d3dc15",
  "name": "downy-lanky-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 37442,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:14:02.015580+00:00",
  "ended_at": "2026-08-26T17:14:03.471600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "255d38df-02f0-4cca-898c-7b78b044f7ea",
  "name": "marine-knotted-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 38998,
  "username": "asag",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:11:25.039414+00:00",
  "ended_at": "2026-08-26T17:11:26.414109+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "7b35d1a5-be87-4373-93ba-622815c7a215",
  "name": "thrifty-pristine-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53098,
  "username": "asag",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:11:07.091803+00:00",
  "ended_at": "2026-08-26T17:11:07.766421+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "644fcaeb-3a73-4adc-8c26-8790cb96fffb",
  "name": "wandering-quaint-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53084,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:11:04.520335+00:00",
  "ended_at": "2026-08-26T17:11:06.046007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29b3df17-c552-48fc-bff5-8d8f330f9603",
  "name": "stoic-creaky-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:08:26.813864+00:00",
  "ended_at": "2026-08-26T17:08:28.398127+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "d41ca9f9-e70f-461a-9368-7cf0fd0aa5a3",
  "name": "feral-vaulted-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43124,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:08:08.345695+00:00",
  "ended_at": "2026-08-26T17:08:09.683539+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a202b5e-8120-4b87-aea6-581fddbe819f",
  "name": "plucky-gilded-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43118,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:08:06.577011+00:00",
  "ended_at": "2026-08-26T17:08:07.299966+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ca54ba6-e0a4-4626-b417-5f43c9cc5874",
  "name": "somber-gentle-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 60100,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:05:33.235416+00:00",
  "ended_at": "2026-08-26T17:05:34.581998+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "573dbdf9-2aa6-493f-9718-b4d98741999f",
  "name": "peaty-deft-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 38412,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:05:14.782450+00:00",
  "ended_at": "2026-08-26T17:05:15.643560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad50ed75-a144-4606-8caa-bd71607028e0",
  "name": "gentle-idle-dolphin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 60102,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:05:12.088159+00:00",
  "ended_at": "2026-08-26T17:05:13.738132+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f0bee0b-ab92-4117-82fc-9ef6d2db3505",
  "name": "murky-blazing-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 39672,
  "username": "metabase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:02:42.709476+00:00",
  "ended_at": "2026-08-26T17:02:44.147919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "d4d1d282-a964-4c42-88f8-0786f4f14fdb",
  "name": "dutiful-crisp-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39810,
  "username": "metabase",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:02:23.624356+00:00",
  "ended_at": "2026-08-26T17:02:24.900514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e54c558-cbfb-436b-88d0-8a79181c5e70",
  "name": "keen-rugged-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39674,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:02:20.635518+00:00",
  "ended_at": "2026-08-26T17:02:22.551277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b08d1268-1073-4121-9931-19eb832d67e7",
  "name": "freckled-thorny-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 33064,
  "username": "jupyter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:59:41.891718+00:00",
  "ended_at": "2026-08-26T16:59:43.572865+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "355b980e-5906-4227-9f8b-0b777e1558c2",
  "name": "windswept-proud-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40912,
  "username": "jupyter",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:59:24.007341+00:00",
  "ended_at": "2026-08-26T16:59:24.697855+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c42b39f-76f3-4bf8-add9-681eccc3d0ef",
  "name": "buoyant-hazel-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33078,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:59:21.400547+00:00",
  "ended_at": "2026-08-26T16:59:22.947068+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b64052af-e251-4e94-bc05-5ff4676c7fa5",
  "name": "dusky-tawny-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 53834,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:56:41.435014+00:00",
  "ended_at": "2026-08-26T16:56:42.891316+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "d6519182-f2c0-4fce-9a52-28fb90e012d4",
  "name": "civil-granite-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53860,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:56:21.048606+00:00",
  "ended_at": "2026-08-26T16:56:22.704066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9913cfb8-66af-4c98-a57c-30f2e6e68b18",
  "name": "courtly-kindly-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53850,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:56:17.974428+00:00",
  "ended_at": "2026-08-26T16:56:20.001029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24cde9e0-a18e-47da-b329-6317d940d3bf",
  "name": "stoic-hearty-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43112,
  "username": "jenny1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:53:36.175527+00:00",
  "ended_at": "2026-08-26T16:53:37.626016+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2220
 },
 {
  "id": "79de2b5d-1c4e-49ca-bea9-87af1335f7b8",
  "name": "proud-sleepy-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58732,
  "username": "jenny1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:53:17.682100+00:00",
  "ended_at": "2026-08-26T16:53:19.356813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "177b66ad-4e1a-4b73-acc1-c33de64e160e",
  "name": "graceful-tidal-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58726,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:53:14.638238+00:00",
  "ended_at": "2026-08-26T16:53:16.625029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "815c960d-2ca0-4ed4-8fa8-222a00322bf7",
  "name": "stoic-sincere-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43722,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:50:37.663189+00:00",
  "ended_at": "2026-08-26T16:50:39.241651+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "3f24c622-98ad-46bb-85b9-42d75d63aedd",
  "name": "sincere-hidden-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43748,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:50:19.182780+00:00",
  "ended_at": "2026-08-26T16:50:20.337855+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56e73ca8-6331-41a5-81b0-29f1080da30a",
  "name": "jagged-hollow-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43736,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:50:17.261770+00:00",
  "ended_at": "2026-08-26T16:50:18.131541+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "399c04e2-db52-4a37-8947-ae9cba25946a",
  "name": "weathered-noble-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:47:42.889485+00:00",
  "ended_at": "2026-08-26T16:47:44.105346+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "23b33203-9115-4232-8731-25b133eadaab",
  "name": "granite-upland-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:47:23.969690+00:00",
  "ended_at": "2026-08-26T16:47:25.627125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14d2c5e0-4cee-431f-a08b-00f00f13c674",
  "name": "sooty-reedy-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43472,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:47:21.658223+00:00",
  "ended_at": "2026-08-26T16:47:22.890316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a658bcf5-063f-4dff-8e9a-afd117f622cb",
  "name": "sturdy-glacial-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 54946,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:44:52.681323+00:00",
  "ended_at": "2026-08-26T16:44:54.097677+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2236
 },
 {
  "id": "4bbebc15-b4e6-4b19-b9ad-008fad19603a",
  "name": "quaint-blunt-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:44:34.007144+00:00",
  "ended_at": "2026-08-26T16:44:35.729672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "097eaef9-bb9a-437d-a128-a58c78fa598a",
  "name": "crisp-somber-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 54960,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:44:31.119620+00:00",
  "ended_at": "2026-08-26T16:44:32.930720+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc749601-cd80-4f73-991b-77c916554db9",
  "name": "crystal-sandy-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56228,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:41:54.034654+00:00",
  "ended_at": "2026-08-26T16:41:55.391110+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "cdcf1c98-36d6-4880-87e8-7ba3d67ebaa5",
  "name": "creaky-hearty-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59816,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:41:36.145122+00:00",
  "ended_at": "2026-08-26T16:41:37.120210+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f49d22c-029c-4756-be50-07286007744e",
  "name": "breezy-nimble-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56236,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:41:33.442868+00:00",
  "ended_at": "2026-08-26T16:41:35.095359+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cf5ac88-aba7-4987-86b4-c7729d5c142d",
  "name": "sincere-lively-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40512,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:39:02.987858+00:00",
  "ended_at": "2026-08-26T16:39:04.412047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2214
 },
 {
  "id": "1f638260-5820-4014-83e7-11f9ff04d88e",
  "name": "lawful-fierce-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:38:43.629636+00:00",
  "ended_at": "2026-08-26T16:38:45.607632+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09e12951-c33e-4d9f-aea1-dc0b799da85c",
  "name": "rugged-alpine-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40518,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:38:41.441745+00:00",
  "ended_at": "2026-08-26T16:38:42.577002+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dfe32516-dbf5-44c6-aa2a-50a49dc95018",
  "name": "graceful-smooth-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35794,
  "username": "paid",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:36:02.128642+00:00",
  "ended_at": "2026-08-26T16:36:03.176412+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "66a97333-707c-4226-abbe-facf756ed8c2",
  "name": "cunning-gleaming-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47654,
  "username": "paid",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:35:43.697397+00:00",
  "ended_at": "2026-08-26T16:35:45.264008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00e98c4e-b2c8-491d-b9f9-2b4605821877",
  "name": "fleeting-snowy-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35802,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:35:41.884023+00:00",
  "ended_at": "2026-08-26T16:35:42.638610+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b91537f6-9ff1-4eeb-af5b-04d617557b37",
  "name": "airy-honest-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40950,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:33:02.375277+00:00",
  "ended_at": "2026-08-26T16:33:03.404191+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "fb5e7a6c-f421-4d3e-be65-33e066c5b07c",
  "name": "inland-vigilant-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:32:43.559475+00:00",
  "ended_at": "2026-08-26T16:32:44.690765+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "067f93ba-5020-4c08-af5e-c61b27d3ce85",
  "name": "gritty-early-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40952,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:32:40.783989+00:00",
  "ended_at": "2026-08-26T16:32:42.510712+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75affbd1-c17d-485c-9aea-c1c42dbbde55",
  "name": "painted-graceful-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 36700,
  "username": "karen",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:29:58.222822+00:00",
  "ended_at": "2026-08-26T16:29:59.668350+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2135
 },
 {
  "id": "643631d5-b431-48b3-b27a-883a0e35a5d1",
  "name": "mighty-eager-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36720,
  "username": "karen",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:29:40.351163+00:00",
  "ended_at": "2026-08-26T16:29:41.271865+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0929f6ba-2049-48b5-8fa7-9f1495b65fe4",
  "name": "ivory-misty-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 36704,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:29:37.670666+00:00",
  "ended_at": "2026-08-26T16:29:39.305389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "655e187b-1b6c-4f6f-b8d0-b41b99e7244f",
  "name": "patient-early-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51188,
  "username": "wildfly",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 529,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:27:02.283756+00:00",
  "ended_at": "2026-08-26T16:27:03.790352+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2122
 },
 {
  "id": "89a1bd35-e268-4c97-b59d-54a814a726eb",
  "name": "valiant-inland-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51202,
  "username": "wildfly",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:26:42.998109+00:00",
  "ended_at": "2026-08-26T16:26:43.810826+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d1eeb71-18cc-4a26-98de-a23d50c15ea2",
  "name": "indigo-shifting-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51192,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:26:39.930556+00:00",
  "ended_at": "2026-08-26T16:26:41.943191+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7309f578-a866-4771-bdff-e5bd2781e96b",
  "name": "blunt-honest-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:24:06.570257+00:00",
  "ended_at": "2026-08-26T16:24:08.047062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "6d822c0c-0235-4c47-b7ed-0acd847d819a",
  "name": "dutiful-creaky-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45270,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:23:47.590579+00:00",
  "ended_at": "2026-08-26T16:23:49.508885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67fe9fbc-ffcd-4f82-a22c-b9488fe36604",
  "name": "verdant-civil-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45256,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:23:44.520529+00:00",
  "ended_at": "2026-08-26T16:23:46.479881+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59f849ca-0769-4f62-ae81-c5fda7b7d22f",
  "name": "bronzed-tender-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 44514,
  "username": "radio",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 529,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:21:13.077028+00:00",
  "ended_at": "2026-08-26T16:21:14.094126+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "7fc1f17a-5eb4-4d09-b8eb-2d2f9757f404",
  "name": "inland-silent-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59668,
  "username": "radio",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:20:54.296234+00:00",
  "ended_at": "2026-08-26T16:20:55.670189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c3896b4e-be54-4eb5-9fc4-fae099863092",
  "name": "honest-burly-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44516,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:20:51.387092+00:00",
  "ended_at": "2026-08-26T16:20:53.220556+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd8328f6-a8fc-4fe2-bc07-df1da51a5910",
  "name": "blithe-weathered-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40810,
  "username": "controlm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:18:18.633554+00:00",
  "ended_at": "2026-08-26T16:18:20.403154+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2094
 },
 {
  "id": "ce893d5b-15ce-4fa5-be71-8cd39d8b699a",
  "name": "amber-honest-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40826,
  "username": "controlm",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:18:00.295960+00:00",
  "ended_at": "2026-08-26T16:18:01.078195+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aaacb1d5-7241-49a0-802e-21ca582445f0",
  "name": "creaky-autumn-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40814,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:17:58.154172+00:00",
  "ended_at": "2026-08-26T16:17:59.178477+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f57ca815-b782-4e35-be98-071ce4ec1f9d",
  "name": "somber-mottled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59328,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:14:52.536092+00:00",
  "ended_at": "2026-08-26T16:14:53.834919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2126
 },
 {
  "id": "a8290ada-69dd-4c65-a144-c0a701966e3a",
  "name": "lawful-hardy-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59344,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:14:32.421168+00:00",
  "ended_at": "2026-08-26T16:14:34.461159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f23e1ed-b917-4595-a5ac-cab9d9d5f3a6",
  "name": "clever-calm-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59338,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:14:30.258267+00:00",
  "ended_at": "2026-08-26T16:14:31.368485+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bafd474c-e03f-424c-be68-3e985b4e0fd4",
  "name": "sullen-misty-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 51918,
  "username": "servidor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 521,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:11:48.430238+00:00",
  "ended_at": "2026-08-26T16:11:49.728042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2062
 },
 {
  "id": "486b5f0e-3d87-49b5-af34-63b9e7f88c2d",
  "name": "hazel-kindly-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47492,
  "username": "servidor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:11:34.355145+00:00",
  "ended_at": "2026-08-26T16:11:35.651025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b39a1e5-9e60-4ca8-9899-57b86533bfae",
  "name": "sleepy-forlorn-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 51920,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:11:31.204603+00:00",
  "ended_at": "2026-08-26T16:11:33.246272+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5467cdb-015c-4b4f-9341-16cdb32175c3",
  "name": "sleepy-emerald-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56616,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:08:46.379888+00:00",
  "ended_at": "2026-08-26T16:08:47.311563+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2047
 },
 {
  "id": "9ac5462a-e545-4068-966c-7799688124c5",
  "name": "downy-candid-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47434,
  "username": "arthur",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:08:35.444920+00:00",
  "ended_at": "2026-08-26T16:08:36.607136+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "930d638f-7427-46bc-862e-3211f719072b",
  "name": "seaward-smoky-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56618,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:08:33.051470+00:00",
  "ended_at": "2026-08-26T16:08:34.397582+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7ad9ac4b-316b-4ca6-9db6-dcbd2ba0263b",
  "name": "jagged-barren-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 49888,
  "username": "reza",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:06:07.069167+00:00",
  "ended_at": "2026-08-26T16:06:07.761835+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2034
 },
 {
  "id": "69247471-e4f4-46ee-976e-d60f59d0c2ac",
  "name": "frugal-languid-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49136,
  "username": "reza",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:05:55.603772+00:00",
  "ended_at": "2026-08-26T16:05:57.219972+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e540b494-6b93-4dc5-bb6d-dc76e82ca321",
  "name": "sooty-quartz-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49898,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:05:52.620713+00:00",
  "ended_at": "2026-08-26T16:05:54.555033+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9695b16-e697-4d00-9ee5-c82ad2f17c68",
  "name": "dusty-shaded-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 34944,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:01:17.477229+00:00",
  "ended_at": "2026-08-26T16:01:18.345458+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]