[ { "id": "af3b7aec-5a42-4c47-88a7-02d439e8fa22", "name": "watchful-nimble-gannet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 49038, "username": "vpnuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 794, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:11:34.264080+00:00", "ended_at": "2026-08-27T13:11:35.054224+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2258 }, { "id": "4f82b5fb-6d68-447f-b8b7-0bc4a5fcb46e", "name": "gentle-hollow-dotterel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 50320, "username": "vpnuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:11:18.745555+00:00", "ended_at": "2026-08-27T13:11:20.107741+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ff9ccae5-b94b-4ceb-abc9-95516a4accdd", "name": "quartz-shaded-rook", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49048, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:11:15.823726+00:00", "ended_at": "2026-08-27T13:11:17.098400+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "eff6efd8-4e18-42b1-a81a-2b11487826dd", "name": "wry-sullen-marmot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 46524, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 734, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:08:34.534956+00:00", "ended_at": "2026-08-27T13:08:35.347484+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "90fc4cff-bfd2-40a6-80dd-9195a13babf8", "name": "courtly-misty-wombat", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 46516, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:08:19.035141+00:00", "ended_at": "2026-08-27T13:08:21.035011+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a09b2e8d-c74e-41a7-8a98-ba9250fe67bc", "name": "rambling-honest-whimbrel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 46534, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:08:16.402446+00:00", "ended_at": "2026-08-27T13:08:17.577003+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e6a2b5f4-0d19-4c58-87c1-8d48697be742", "name": "merry-ivory-sable", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 43500, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:05:26.428474+00:00", "ended_at": "2026-08-27T13:05:28.473233+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b1086597-06dc-4518-9751-fb206b14ee80", "name": "ashen-gilded-vole", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 43498, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:05:22.744051+00:00", "ended_at": "2026-08-27T13:05:24.730143+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "06b773c3-cdcb-4622-8e22-7ade1bcc10d8", "name": "proud-gallant-whimbrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 37892, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:05:19.157578+00:00", "ended_at": "2026-08-27T13:05:20.455268+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "1f66fbe8-6205-4ade-ad83-8d8bfbb20e70", "name": "arctic-hollow-skua", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 37442, "username": "manish", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:02:21.958827+00:00", "ended_at": "2026-08-27T13:02:23.873566+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "39e77f3b-bb0b-4233-9aa1-ec492c261078", "name": "painted-stoic-redstart", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 37430, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T13:02:18.479640+00:00", "ended_at": "2026-08-27T13:02:20.353553+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "f3379183-71c8-4aa5-80fc-22dc1ca5a40b", "name": "crystal-marbled-tapir", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 36968, "username": "manish", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T13:02:15.401802+00:00", "ended_at": "2026-08-27T13:02:16.524606+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "391361d1-85c4-4163-a3bc-009c9a036642", "name": "craggy-burly-dormouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 39936, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1116, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:59:43.655151+00:00", "ended_at": "2026-08-27T12:59:44.427483+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2332 }, { "id": "5db6ab5f-6cea-4156-989f-2ab410be75ca", "name": "crisp-honest-sandpiper", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34688, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:59:23.528297+00:00", "ended_at": "2026-08-27T12:59:25.091372+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "860a6791-a3f4-4073-a631-2a8a43e2b33d", "name": "feral-wry-turnstone", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34674, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:59:20.397620+00:00", "ended_at": "2026-08-27T12:59:21.866089+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e60ce5f5-6dbd-4313-b46a-5991c59310f8", "name": "sandy-smooth-nightjar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 42206, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 742, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:56:32.739534+00:00", "ended_at": "2026-08-27T12:56:33.501179+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2302 }, { "id": "250eebcf-aea6-4e1f-bc21-b2948783b0f7", "name": "coral-murky-wallaby", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 42222, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:56:17.904006+00:00", "ended_at": "2026-08-27T12:56:19.614163+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e0a83286-66fd-4de3-8153-d3be8a4aaa3f", "name": "nameless-obsidian-warbler", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 42212, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:56:14.415174+00:00", "ended_at": "2026-08-27T12:56:16.198727+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "7a2c05d7-d1f7-4927-b366-3ad898d3786c", "name": "subtle-burly-goldcrest", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 50730, "username": "dev", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:53:29.475090+00:00", "ended_at": "2026-08-27T12:53:30.458786+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e99b7554-cd6d-4e29-b885-01eb13750ad8", "name": "mottled-snowy-reindeer", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 50048, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:53:25.930406+00:00", "ended_at": "2026-08-27T12:53:27.848701+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "156ef38e-9668-4b05-bf53-1206e99e3023", "name": "deft-idle-godwit", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 50036, "username": "dev", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:53:23.395842+00:00", "ended_at": "2026-08-27T12:53:24.180134+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "bd409d2b-ed61-4abf-a487-c971f7a166d4", "name": "bronzed-drifting-hornbill", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 56738, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:50:48.404055+00:00", "ended_at": "2026-08-27T12:50:51.060389+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "525a320e-53b1-45f4-9b2b-bdd6b92bfca2", "name": "sleepy-candid-dunlin", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 56734, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:50:45.363239+00:00", "ended_at": "2026-08-27T12:50:46.201257+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a25beac5-9f37-499c-bc7a-3fa874c92795", "name": "tender-silent-kiwi", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 56730, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:50:42.439601+00:00", "ended_at": "2026-08-27T12:50:43.568009+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "072ecce3-fc5c-41e7-bf46-f794ce3d5c5d", "name": "gentle-calm-catbird", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 40636, "username": "user", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:48:06.599294+00:00", "ended_at": "2026-08-27T12:48:09.011219+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5fff8a62-087e-4a32-ac52-29693e593232", "name": "vivid-quartz-cardinal", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 40626, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:48:03.682643+00:00", "ended_at": "2026-08-27T12:48:05.102033+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ba15888a-0d9a-4a92-8497-175841418d63", "name": "gloomy-kindly-gull", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 40624, "username": "user", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:48:01.055435+00:00", "ended_at": "2026-08-27T12:48:01.885247+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "0a9c0917-4568-4ddd-b03b-9be891130aed", "name": "calm-frank-ibex", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 41086, "username": "cuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1447, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:45:40.558808+00:00", "ended_at": "2026-08-27T12:45:41.891143+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2250 }, { "id": "96a3a65c-c58f-4dc6-af10-dae7786f61bb", "name": "silent-granite-pangolin", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 42704, "username": "cuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:45:12.575024+00:00", "ended_at": "2026-08-27T12:45:14.389049+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9b76ebcd-253a-45bd-a4c2-9b678b0dabcb", "name": "oaken-hushed-muntjac", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 42696, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:45:09.257541+00:00", "ended_at": "2026-08-27T12:45:10.116714+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c107fcb5-0ca5-47ba-8c90-ffbc75cedf5c", "name": "crystal-jagged-dormouse", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47340, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:42:27.151888+00:00", "ended_at": "2026-08-27T12:42:27.934055+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "83a15aba-fae7-4f01-ad0e-6b02ab3b0275", "name": "golden-tangled-hyrax", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47332, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:42:24.083698+00:00", "ended_at": "2026-08-27T12:42:25.649003+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a9c6065a-7d90-421a-99fa-0bbe9f749ef8", "name": "quartz-amiable-cougar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 47322, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:42:20.515413+00:00", "ended_at": "2026-08-27T12:42:21.434017+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "0df86da6-776d-413b-9b44-d14ed647b27c", "name": "woven-solemn-agouti", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 46220, "username": "harsh", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 749, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:39:58.780008+00:00", "ended_at": "2026-08-27T12:39:59.943418+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2256 }, { "id": "e6050a61-59df-437b-834d-e5a231189575", "name": "subtle-dusky-eider", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 46228, "username": "harsh", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:39:35.997858+00:00", "ended_at": "2026-08-27T12:39:37.466747+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "92e66f16-da06-40cb-9f6a-d92fe964ba90", "name": "creaky-rustic-lapwing", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 46226, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:39:32.023865+00:00", "ended_at": "2026-08-27T12:39:33.772715+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "467028cb-c29a-47a2-afec-d16a157b2777", "name": "honest-frank-galago", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 55354, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:36:56.792472+00:00", "ended_at": "2026-08-27T12:36:58.539322+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3d86b2d0-d6a5-4d6c-af6a-5baf78e630a9", "name": "watchful-emerald-dotterel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 55346, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:36:52.010293+00:00", "ended_at": "2026-08-27T12:36:54.033463+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3d7f905c-ba6c-49fd-9c86-a32b9576a007", "name": "sandy-plush-oryx", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 49104, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:36:48.413311+00:00", "ended_at": "2026-08-27T12:36:50.277326+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "6162c3fb-7cf0-44a8-9579-9316ac5429bf", "name": "cosmic-dappled-tapir", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 49784, "username": "talha", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 727, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:34:33.053070+00:00", "ended_at": "2026-08-27T12:34:34.292996+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2248 }, { "id": "6f6ce012-35d0-4ff1-af9c-cb66d0a51ef3", "name": "silent-mindful-pheasant", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 60330, "username": "talha", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:34:10.719948+00:00", "ended_at": "2026-08-27T12:34:12.680752+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b2aceaf5-53fd-4426-a312-4eb6ef1024c8", "name": "merry-misty-eagle", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49798, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:34:07.367859+00:00", "ended_at": "2026-08-27T12:34:09.058778+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "063ba4fa-f4f3-4a10-a2ca-0fedab92e42f", "name": "dappled-rugged-dipper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 54790, "username": "server", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 757, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:31:46.854372+00:00", "ended_at": "2026-08-27T12:31:48.487515+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2259 }, { "id": "0124f9d0-8a1b-43ec-9dd4-603fcd0150f3", "name": "northern-fickle-nightjar", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 54804, "username": "server", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:31:25.421123+00:00", "ended_at": "2026-08-27T12:31:27.101355+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "d08e85c9-5f3c-4f8d-81a6-adecc04e9289", "name": "smoky-brazen-francolin", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 54794, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:31:22.621295+00:00", "ended_at": "2026-08-27T12:31:23.963749+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "195e9eb7-d36c-4b2a-96d4-beda6f9cbb6c", "name": "ivory-pewter-agouti", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 42630, "username": "user1", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1024, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:29:02.832543+00:00", "ended_at": "2026-08-27T12:29:04.521724+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2256 }, { "id": "9f3ecd1c-7a69-44d7-a173-9417aa543899", "name": "wiry-kindly-meerkat", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 41066, "username": "user1", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:28:34.705551+00:00", "ended_at": "2026-08-27T12:28:36.644016+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e78db84f-61db-418f-aa82-338a894d3258", "name": "crimson-quartz-wallaby", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 41054, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:28:30.992723+00:00", "ended_at": "2026-08-27T12:28:33.061112+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e00e9b56-c236-4a32-a457-8a88a1fa0e97", "name": "electric-tawny-weasel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 33410, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 735, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:26:03.861784+00:00", "ended_at": "2026-08-27T12:26:05.485026+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "d0ad47f4-68a4-4754-8d3d-94ab5cded373", "name": "marine-canny-jerboa", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 52288, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:25:42.587861+00:00", "ended_at": "2026-08-27T12:25:43.393795+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ed63d988-1374-465e-bf40-45f76822a113", "name": "solemn-freckled-ibis", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 52280, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:25:40.256018+00:00", "ended_at": "2026-08-27T12:25:41.047617+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "28a4ee71-6a88-4b33-8da9-041526a4ef56", "name": "hazel-cobalt-narwhal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 33152, "username": "fs", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 730, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:23:18.917772+00:00", "ended_at": "2026-08-27T12:23:20.111497+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2243 }, { "id": "6c999062-d97e-41fa-8813-2603cf53a90f", "name": "woven-genial-roebuck", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 33166, "username": "fs", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:22:56.827609+00:00", "ended_at": "2026-08-27T12:22:58.443833+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e8044f8f-39e0-4199-a63e-2bb9c81a4a3d", "name": "solemn-murky-panther", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 33162, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:22:53.160291+00:00", "ended_at": "2026-08-27T12:22:55.203391+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "d68e795d-0238-423e-96e6-2564f0322124", "name": "granite-graceful-gannet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 36960, "username": "jose", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:20:26.707624+00:00", "ended_at": "2026-08-27T12:20:28.475440+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2241 }, { "id": "462bcad2-96e7-4009-8fcf-c480a2a1195a", "name": "scarlet-umber-redshank", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53734, "username": "jose", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:20:04.634787+00:00", "ended_at": "2026-08-27T12:20:06.896499+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "20f77019-7730-417a-9ac6-4b5c555e2111", "name": "northern-reedy-albatross", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53730, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:20:00.954638+00:00", "ended_at": "2026-08-27T12:20:02.472103+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "41f9f301-0f99-43d0-b4ad-6d08299e70d8", "name": "canny-autumn-jackal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 55478, "username": "ftp_user", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 756, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:17:37.816270+00:00", "ended_at": "2026-08-27T12:17:39.130521+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2269 }, { "id": "c5ac6b47-ec4a-40bf-acd8-6f327c9194c3", "name": "thorny-weathered-squirrel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 55496, "username": "ftp_user", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:17:16.232053+00:00", "ended_at": "2026-08-27T12:17:17.574814+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9579c70b-9154-4a56-be57-9cbabf6f6b46", "name": "quaint-freckled-barbet", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 55486, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:17:13.031903+00:00", "ended_at": "2026-08-27T12:17:14.783947+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b0360082-aeed-4dc0-93ca-08aceb310c4f", "name": "tranquil-jovial-sandpiper", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 33462, "username": "dev", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 776, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:14:52.521448+00:00", "ended_at": "2026-08-27T12:14:53.775731+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2254 }, { "id": "e8fb0c0e-e245-4148-b3cc-c3699a2ce4f1", "name": "lively-eager-cormorant", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 40198, "username": "dev", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:14:30.209606+00:00", "ended_at": "2026-08-27T12:14:31.376236+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c77cb6f6-16b0-415a-97bb-8076a308b1aa", "name": "quiet-idle-albatross", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 33470, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:14:27.550298+00:00", "ended_at": "2026-08-27T12:14:28.549874+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "0084b181-c820-452e-ac60-0cbd554930b1", "name": "keen-brazen-finch", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 43572, "username": "frappe", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:11:46.280069+00:00", "ended_at": "2026-08-27T12:11:48.168866+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "be01e14c-ee77-4eeb-8503-f8cb360f031d", "name": "craggy-pewter-moose", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 43566, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:11:43.311641+00:00", "ended_at": "2026-08-27T12:11:44.815731+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e2e50162-27ac-4f2e-a9de-23030304e863", "name": "solar-jolly-elk", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 43550, "username": "frappe", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:11:40.040155+00:00", "ended_at": "2026-08-27T12:11:41.541019+00:00", "ended_reason": "exec complete", "commands": 1, "transcript_bytes": 65 }, { "id": "c9f47f74-03c9-4ed8-88d9-75e2f9ccd405", "name": "polar-shaded-kea", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 41982, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 744, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:09:16.080070+00:00", "ended_at": "2026-08-27T12:09:17.503484+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "2e182b78-77f5-4567-8a64-7299dc4e6688", "name": "fleeting-whispering-eagle", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 45768, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:08:52.774702+00:00", "ended_at": "2026-08-27T12:08:53.931073+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "1b268359-8f93-4485-a69a-2492557576f9", "name": "thorny-nameless-finch", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 45754, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:08:49.010148+00:00", "ended_at": "2026-08-27T12:08:50.747856+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8a180bf0-13c3-42d5-9630-a41f97bfeb2f", "name": "watchful-vaulted-capuchin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 35922, "username": "ymoreno", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 772, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:06:17.365157+00:00", "ended_at": "2026-08-27T12:06:18.863737+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2254 }, { "id": "56cf4207-5928-48cd-be3b-7eadc3ab7873", "name": "gloomy-balmy-mink", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 35934, "username": "ymoreno", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:05:55.528189+00:00", "ended_at": "2026-08-27T12:05:56.906313+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "fbcf4bdf-3f3d-44d7-839f-fc98406220c0", "name": "blithe-courtly-owl", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 35930, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:05:52.680950+00:00", "ended_at": "2026-08-27T12:05:54.033602+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "4f6b69ad-0f71-4209-a73b-9586ab7760c9", "name": "dappled-ancient-weasel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 54628, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 732, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:03:02.988728+00:00", "ended_at": "2026-08-27T12:03:04.565690+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2263 }, { "id": "566b4c0f-5c9b-4d59-88bb-f14dc8a43f2f", "name": "daring-deft-francolin", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 37936, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:02:41.011216+00:00", "ended_at": "2026-08-27T12:02:43.033070+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "645b2e65-e978-442a-930f-aaeabc38df9f", "name": "russet-ancient-moose", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 54644, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:02:37.521249+00:00", "ended_at": "2026-08-27T12:02:39.508135+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "53b84977-5d1f-495c-9108-74efdc695480", "name": "primal-early-bushbaby", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 41662, "username": "azureuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 734, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:00:11.645160+00:00", "ended_at": "2026-08-27T12:00:13.363660+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2248 }, { "id": "7b3c1ac6-0fbe-494a-a1d1-ce47a88af53d", "name": "jolly-autumn-dotterel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 36482, "username": "azureuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:59:48.336665+00:00", "ended_at": "2026-08-27T11:59:50.022368+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "2af69363-90b8-462c-bf3e-f82b222e2eab", "name": "brisk-seaward-civet", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 41676, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:59:44.652421+00:00", "ended_at": "2026-08-27T11:59:46.578851+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "aae1788c-398f-4c09-8467-32195a70a5c0", "name": "amber-tidal-chamois", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 45858, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 732, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:57:25.006006+00:00", "ended_at": "2026-08-27T11:57:26.484519+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "884da7d8-fc5b-4176-97b4-118a783aff2e", "name": "drifting-tidal-elk", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34570, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:57:03.217714+00:00", "ended_at": "2026-08-27T11:57:04.382131+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e84f4345-66cc-4799-9806-fd03337cf068", "name": "lunar-fringed-hummingbird", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34568, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:56:59.988458+00:00", "ended_at": "2026-08-27T11:57:01.483515+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8dde47fb-39c4-4a49-b66c-fade3d342879", "name": "blazing-barren-pipit", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 40608, "username": "admin", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 746, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:54:33.356037+00:00", "ended_at": "2026-08-27T11:54:34.786889+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2254 }, { "id": "c0c3d87b-6f4a-4f7e-b9f6-613c4e6c3b60", "name": "quiet-smooth-toucan", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49144, "username": "admin", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:54:09.219955+00:00", "ended_at": "2026-08-27T11:54:10.003593+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b8aa8feb-c780-478a-ad2f-0b46584ae571", "name": "muted-lofty-shearwater", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 40616, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:54:05.907251+00:00", "ended_at": "2026-08-27T11:54:07.721750+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3c33f36c-a630-46af-b19d-d6e7e7451b5e", "name": "coastal-quiet-avocet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 33290, "username": "remoteuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 756, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:51:34.626497+00:00", "ended_at": "2026-08-27T11:51:36.118195+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2251 }, { "id": "a8ee7cdb-720d-4ac2-9eb2-fc3cc27fc771", "name": "tender-feral-gerbil", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 56908, "username": "remoteuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:51:11.853188+00:00", "ended_at": "2026-08-27T11:51:12.753969+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "41feae16-d30a-453e-bd54-35640b459b3f", "name": "polar-pleasant-alpaca", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 56894, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:51:09.225668+00:00", "ended_at": "2026-08-27T11:51:10.320539+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "389c32c9-156e-4ee3-8363-321d6eea2cc4", "name": "shaded-placid-eagle", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 51716, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 781, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:48:39.937153+00:00", "ended_at": "2026-08-27T11:48:41.766906+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2304 }, { "id": "9cb710b9-e5a4-416f-bd72-06aa8320edb2", "name": "lively-rambling-osprey", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 36786, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:48:18.236034+00:00", "ended_at": "2026-08-27T11:48:19.018264+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c33d41ec-9a53-4642-90c0-8444c5f69921", "name": "restless-clever-dormouse", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 51718, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:48:15.883151+00:00", "ended_at": "2026-08-27T11:48:16.713675+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "79ebdf76-ed7c-4355-95b7-93cad5300fce", "name": "ruddy-solar-onager", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 40406, "username": "huser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1303, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:45:43.763868+00:00", "ended_at": "2026-08-27T11:45:45.556381+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2247 }, { "id": "ad63b314-b367-4507-a5ee-639c51c8694c", "name": "snowy-earnest-firefly", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 35996, "username": "huser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:45:09.649453+00:00", "ended_at": "2026-08-27T11:45:11.766514+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "7bca7eef-5b84-4e34-bed0-d7d62c67eb10", "name": "sleepy-smooth-goose", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 40412, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:45:06.850520+00:00", "ended_at": "2026-08-27T11:45:08.193494+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a9d9933a-f24d-47c7-b13f-224b574093e8", "name": "icy-patient-anteater", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 47686, "username": "user14", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 884, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:42:43.634788+00:00", "ended_at": "2026-08-27T11:42:45.278090+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2225 }, { "id": "1be4dca7-3c2c-426d-8593-2b0c6da56cfc", "name": "lofty-pewter-flamingo", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 43286, "username": "user14", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:42:19.987082+00:00", "ended_at": "2026-08-27T11:42:21.125002+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "0bd8baad-d0b6-4074-b70f-7d8fe8fc83a9", "name": "electric-fabled-kiwi", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47698, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:42:16.759281+00:00", "ended_at": "2026-08-27T11:42:18.363934+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ae469160-671c-4a28-ba45-450fa52a6ad1", "name": "orderly-quartz-quoll", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 56544, "username": "radius", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 1010, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:39:50.876941+00:00", "ended_at": "2026-08-27T11:39:53.188496+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2220 }, { "id": "c7e5c538-5e71-4316-88a3-6cec527521d5", "name": "silent-gleaming-muntjac", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38154, "username": "radius", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:39:22.242609+00:00", "ended_at": "2026-08-27T11:39:24.347879+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "86224a99-aacc-4095-838d-41b2726722ca", "name": "solar-lanky-sandpiper", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38138, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:39:18.959719+00:00", "ended_at": "2026-08-27T11:39:20.223338+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "cfc4bd2b-d7d2-4909-869e-dd8260b74390", "name": "cunning-bashful-vole", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 54944, "username": "zsolt", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 733, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:36:56.632904+00:00", "ended_at": "2026-08-27T11:36:57.998390+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2206 }, { "id": "0159a5b6-b8fb-4ad4-a291-95b17c2b13d5", "name": "mindful-fleeting-fieldfare", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47672, "username": "zsolt", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:36:33.754902+00:00", "ended_at": "2026-08-27T11:36:35.080416+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "2396ed89-2154-435f-8332-d1b021c1dc29", "name": "fierce-feathered-lapwing", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47656, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:36:30.122746+00:00", "ended_at": "2026-08-27T11:36:32.236252+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "f4008271-0046-4efb-9787-d756955e2972", "name": "boreal-twilight-wagtail", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 38424, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 758, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:33:58.399131+00:00", "ended_at": "2026-08-27T11:33:59.737573+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2249 }, { "id": "c98a2576-2a1c-4396-91cf-2ea36f5efc6c", "name": "hardy-blithe-dotterel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38446, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:33:36.548262+00:00", "ended_at": "2026-08-27T11:33:38.468775+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9de55cc8-b509-4977-acc0-2f5c615d4660", "name": "regal-electric-eider", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38436, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:33:33.165817+00:00", "ended_at": "2026-08-27T11:33:35.091578+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "439ccd49-b4b1-4e21-8cc7-4c818ee8528b", "name": "loyal-vernal-pochard", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 59900, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 770, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:31:08.661148+00:00", "ended_at": "2026-08-27T11:31:10.206764+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2234 }, { "id": "d60ab65b-fe38-4467-af6a-f36abc0363e5", "name": "thawing-curious-wren", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59928, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:30:45.393696+00:00", "ended_at": "2026-08-27T11:30:47.218048+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8f060a63-848e-45fc-a816-938ed6e826b4", "name": "wandering-foggy-pelican", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59916, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:30:42.432629+00:00", "ended_at": "2026-08-27T11:30:43.942572+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a705bec3-cd3b-4e7e-8f91-ab00f2b4ef8a", "name": "salty-hazy-antelope", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 47314, "username": "suhail", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 762, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:28:11.670538+00:00", "ended_at": "2026-08-27T11:28:12.932115+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2174 }, { "id": "84dec3a1-820a-412e-a3d0-69216434b11d", "name": "autumn-golden-caribou", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49828, "username": "suhail", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:27:49.206844+00:00", "ended_at": "2026-08-27T11:27:50.451577+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "f39bce6a-8a36-4d5d-952a-2244c378823a", "name": "mellow-daring-plover", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 47324, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:27:46.437579+00:00", "ended_at": "2026-08-27T11:27:47.700575+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "91abbb7b-49ed-451c-8cfe-7e9478c5b09f", "name": "bronzed-lawful-otter", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 40558, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:25:23.670426+00:00", "ended_at": "2026-08-27T11:25:24.758400+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2216 }, { "id": "d2420925-ca37-4ec8-a08d-b6e744997fad", "name": "eager-austere-vulture", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49662, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:25:01.277460+00:00", "ended_at": "2026-08-27T11:25:02.755254+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a6792ed8-d40a-454d-923b-a09f5957a47e", "name": "crisp-sullen-ouzel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 49652, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:24:58.942572+00:00", "ended_at": "2026-08-27T11:24:59.823315+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a75cc1be-52de-4db0-b1cf-2d5b0e5e628d", "name": "lucid-rustic-penguin", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 48652, "username": "sendmail", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 758, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:22:38.955943+00:00", "ended_at": "2026-08-27T11:22:40.081557+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2160 }, { "id": "e1e2f478-51e2-4eef-ba25-f2a486f5956e", "name": "downy-placid-polecat", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 48674, "username": "sendmail", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:22:16.456169+00:00", "ended_at": "2026-08-27T11:22:18.323673+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "92c16128-11b9-4d68-ae1a-c477a495d230", "name": "regal-crystal-lark", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 48666, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:22:12.895822+00:00", "ended_at": "2026-08-27T11:22:14.522578+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "65b2be7b-71af-49b5-95cc-5a8bc3517970", "name": "quaint-umber-gannet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 43774, "username": "newusername", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 769, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:19:54.975918+00:00", "ended_at": "2026-08-27T11:19:56.508392+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2152 }, { "id": "40cd5ce4-3abb-46ef-b58a-30354e07daa6", "name": "stormy-northern-bowerbird", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53064, "username": "newusername", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:19:33.121962+00:00", "ended_at": "2026-08-27T11:19:33.987006+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9ae32a02-7fd0-448b-a18a-b28db16c0e2d", "name": "quaint-frank-jaguar", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53058, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:19:29.938590+00:00", "ended_at": "2026-08-27T11:19:31.598915+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "bb6850c9-3610-49ea-a531-8970c147c7ab", "name": "foggy-alpine-lark", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 37220, "username": "sftpuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 747, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:17:14.435360+00:00", "ended_at": "2026-08-27T11:17:15.792348+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2134 }, { "id": "80588f09-5b45-433c-a7ba-5bcf10e4eeba", "name": "marbled-bitter-bison", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38824, "username": "sftpuser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:16:52.602182+00:00", "ended_at": "2026-08-27T11:16:54.497596+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b1bd9376-f15f-4114-ae96-f0bfbadd3e94", "name": "valiant-lively-sandpiper", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 38816, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:16:50.222430+00:00", "ended_at": "2026-08-27T11:16:51.109160+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ae0985ff-60a2-4fe7-9505-b9d26e2b9f6a", "name": "orderly-lanky-panther", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 43652, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 755, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:14:14.600211+00:00", "ended_at": "2026-08-27T11:14:15.820123+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2172 }, { "id": "71187617-596f-462f-ad8a-a8a91f19bb40", "name": "lanky-painted-chinchilla", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 39992, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:13:50.818086+00:00", "ended_at": "2026-08-27T11:13:53.119868+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9eaf521b-3072-4faa-b7ad-10b75ad65a03", "name": "slender-cosmic-caracal", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 39978, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:13:48.125766+00:00", "ended_at": "2026-08-27T11:13:49.133198+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "2b2de2d6-4bc6-4bb3-a551-2b3ef1f221f4", "name": "serene-woven-meerkat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 59536, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:11:27.267098+00:00", "ended_at": "2026-08-27T11:11:28.802420+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2159 }, { "id": "94ef0a1b-07e9-4edd-8e50-d9ec97a45efa", "name": "subtle-vivid-skua", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59574, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:11:05.667133+00:00", "ended_at": "2026-08-27T11:11:06.746650+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3de86b6e-799c-431b-862f-6981ba0a3488", "name": "coastal-cosmic-teal", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59566, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:11:03.311775+00:00", "ended_at": "2026-08-27T11:11:04.212056+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "952a6526-a6a7-456f-9045-e3ed0686f432", "name": "sterling-blithe-marten", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 48948, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 771, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:08:37.479205+00:00", "ended_at": "2026-08-27T11:08:38.769725+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2148 }, { "id": "61cc2cb0-cd3f-4d54-8b2d-6b20b234ad6c", "name": "hearty-brazen-moose", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 48970, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:08:15.104135+00:00", "ended_at": "2026-08-27T11:08:16.405636+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5260d862-5eab-4ae1-842e-ad0db2c60f40", "name": "jagged-craggy-pipit", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 48956, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:08:12.721238+00:00", "ended_at": "2026-08-27T11:08:13.593115+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "e55a5425-53b1-4040-9d4e-3fe62324749d", "name": "burly-sturdy-muntjac", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 54118, "username": "dockeruser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 761, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:04:17.340805+00:00", "ended_at": "2026-08-27T11:04:18.702216+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2096 }, { "id": "4081f3d5-a414-4495-ae65-f35a97250d75", "name": "granite-crisp-hyrax", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 54140, "username": "dockeruser", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:03:55.604168+00:00", "ended_at": "2026-08-27T11:03:56.560351+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "14debfee-1922-4eb6-8473-260cc0925cc2", "name": "primal-crisp-shelduck", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 54132, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:03:52.252862+00:00", "ended_at": "2026-08-27T11:03:53.516073+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "04ea648e-eb3a-4197-afa5-799e6ab971c2", "name": "obsidian-bitter-brambling", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 34330, "username": "marco", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 763, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:01:36.654589+00:00", "ended_at": "2026-08-27T11:01:38.022511+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2070 }, { "id": "67585d9f-a9fe-4a92-bcb2-d7a3e5d5d9e1", "name": "inland-lonesome-oxpecker", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34352, "username": "marco", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:01:15.395243+00:00", "ended_at": "2026-08-27T11:01:16.849017+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c336ecb6-233c-4676-b17a-83c4be1f8095", "name": "placid-jagged-hedgehog", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 34344, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:01:12.404492+00:00", "ended_at": "2026-08-27T11:01:13.855663+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5f489023-1027-4c61-b7d2-92cb12f9752c", "name": "subtle-peaty-lemur", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 53066, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 743, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:59:04.382355+00:00", "ended_at": "2026-08-27T10:59:05.668772+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2117 }, { "id": "172d2a42-e7c2-4077-938a-d3bbf7df5e83", "name": "breezy-mellow-coyote", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53078, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:58:46.483136+00:00", "ended_at": "2026-08-27T10:58:47.941713+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b87d6e60-30a9-4528-9f69-ad99952957e5", "name": "courtly-graceful-tern", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 53068, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:58:43.245101+00:00", "ended_at": "2026-08-27T10:58:44.361243+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "68496739-8a9a-467b-94a5-acefe8419b5b", "name": "breezy-calm-tapir", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 57250, "username": "ubuntu", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 770, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:56:28.265960+00:00", "ended_at": "2026-08-27T10:56:29.023573+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2059 }, { "id": "5a98b349-baf7-4562-a30b-bb60a7c86f51", "name": "prickly-lucid-pika", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59760, "username": "ubuntu", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:56:12.980796+00:00", "ended_at": "2026-08-27T10:56:14.721095+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "d8538c0c-44d1-4746-aba8-773fa57aaa3f", "name": "frosty-early-jerboa", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 59746, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:56:10.605216+00:00", "ended_at": "2026-08-27T10:56:11.462314+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a98b8c64-f7c7-437b-8233-3196f219467d", "name": "sterling-lucid-jay", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 46284, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 755, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T10:53:52.986704+00:00", "ended_at": "2026-08-27T10:53:53.797790+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2095 }, { "id": "fd7df18a-de75-48ff-a657-85afc4bf2dd7", "name": "marbled-freckled-sable", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 32834, "username": "root", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:53:38.682349+00:00", "ended_at": "2026-08-27T10:53:39.801591+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "583c4972-49f2-4b0f-9cbf-d4bcf0692c98", "name": "sullen-quiet-gecko", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 46292, "username": "345gs5662d34", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:53:36.374116+00:00", "ended_at": "2026-08-27T10:53:37.173907+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5009160c-b2a5-4ec0-9a3d-6eced0c40f32", "name": "cunning-quaint-ouzel", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 57762, "username": "git", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T10:50:15.699722+00:00", "ended_at": "2026-08-27T10:50:16.834738+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 } ]