[ { "id": "21b68c4f-d5f0-4e61-b96d-da25e1381904", "name": "stoic-tender-puffin", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 45166, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T02:30:04.649531+00:00", "ended_at": "2026-08-27T02:30:07.089442+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ec9a9d2c-1655-44fa-99af-6f39b52c9b03", "name": "proud-frank-grouse", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 41930, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 294, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:30:01.187174+00:00", "ended_at": "2026-08-27T02:30:07.085537+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1660 }, { "id": "9595c15a-7c4e-432e-bacc-7561c16f3fc3", "name": "feathered-dapper-vicuna", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 49686, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 421, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:34:06.479405+00:00", "ended_at": "2026-08-26T12:34:09.887830+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "40855d11-f814-44a7-ba9e-3b335f20f3c4", "name": "deft-serene-agouti", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 36360, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 185, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T06:46:40.793071+00:00", "ended_at": "2026-08-26T06:46:44.353666+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "050fb188-567a-4f79-b55e-7346a7f619a4", "name": "kindly-northern-nuthatch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 52976, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:58:24.774287+00:00", "ended_at": "2026-08-25T22:58:27.057137+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "c54430fb-6908-41af-b648-686919855684", "name": "frosty-hollow-llama", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 38644, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 450, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:42:17.792046+00:00", "ended_at": "2026-08-25T22:42:18.906971+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "806dbfb8-265c-4f64-a92b-b3a8ee24356a", "name": "painted-brazen-bittern", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 41846, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 449, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:29:30.184758+00:00", "ended_at": "2026-08-25T22:29:32.501900+00:00", "ended_reason": "exec complete", "commands": 10, "transcript_bytes": 1353 }, { "id": "1d924816-82ba-41fd-8a77-ae976d53dd4e", "name": "watchful-hollow-reindeer", "protocol": "ssh", "channel_kind": null, "src_ip": "104.43.56.65", "src_port": 50964, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T22:28:59.339729+00:00", "ended_at": "2026-08-25T22:29:32.503334+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "984dbf0e-a373-495e-ba7a-044532485aa2", "name": "fickle-creaky-sloth", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 49474, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 267, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T01:15:04.662098+00:00", "ended_at": "2026-08-25T01:15:08.047145+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "5d9aac6b-2faa-4814-9c26-dffc6ab3243a", "name": "early-somber-wheatear", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 49446, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 240, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T09:50:29.989654+00:00", "ended_at": "2026-08-24T09:50:34.317373+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "61cf4656-4ebd-4840-9ed3-71b057bd69f2", "name": "somber-meadow-peccary", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.120", "src_port": 38546, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-22T12:06:20.364615+00:00", "ended_at": "2026-08-22T12:06:22.582156+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "df69c69c-8e83-421c-af09-0fe2a1b29913", "name": "amber-creaky-meerkat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.120", "src_port": 43682, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 447, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-22T12:06:14.166245+00:00", "ended_at": "2026-08-22T12:06:22.583148+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1660 }, { "id": "14bb07d5-a2ae-49f1-84ad-e04b165ccca9", "name": "mighty-emerald-owl", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.42.147", "src_port": 45358, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 322, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-21T12:59:38.499755+00:00", "ended_at": "2026-08-21T12:59:43.623794+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 863 }, { "id": "df945838-27bd-4c1e-b616-9f83f9f5c6a4", "name": "cunning-dewy-civet", "protocol": "ssh", "channel_kind": null, "src_ip": "45.156.87.93", "src_port": 44318, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T18:35:53.701014+00:00", "ended_at": "2026-08-20T18:35:55.071340+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "7f206484-921d-419e-8914-f5635fd0d627", "name": "gloomy-woven-cicada", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.156.87.93", "src_port": 37098, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 190, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T18:35:47.935655+00:00", "ended_at": "2026-08-20T18:35:55.073022+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1651 }, { "id": "0652b39a-8a5c-43a1-b0ce-f2a672f32eb7", "name": "valiant-patient-ferret", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.66", "src_port": 51788, "username": "elastic", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 181, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T10:40:16.879116+00:00", "ended_at": "2026-08-20T10:40:17.687540+00:00", "ended_reason": "exec complete", "commands": 3, "transcript_bytes": 220 } ]