[ { "id": "9045f81a-9116-4ae4-a163-1edf5f52e5a7", "name": "foggy-crimson-wombat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "51.255.195.46", "src_port": 47924, "username": "elasticsearch", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 264, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:27:39.747860+00:00", "ended_at": "2026-08-27T11:27:40.968013+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2229 }, { "id": "58bf3661-251f-4afc-8f03-23eeb6749c02", "name": "earnest-amiable-shearwater", "protocol": "ssh", "channel_kind": null, "src_ip": "51.255.195.46", "src_port": 43844, "username": "elasticsearch", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:27:17.612478+00:00", "ended_at": "2026-08-27T11:27:19.027888+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9d5aaa33-ddf9-4d9d-8d1d-40d7d7213724", "name": "wandering-clever-tern", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 49340, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 244, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:58:08.349630+00:00", "ended_at": "2026-08-27T02:58:13.447511+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "2a34994b-281f-4c23-bd9c-0867a57ab12c", "name": "marbled-freckled-marmot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 37060, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 273, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:47:16.363425+00:00", "ended_at": "2026-08-27T02:47:22.164637+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "de41c9c5-54ca-4c0c-be17-1e06758522ef", "name": "amiable-glassy-vervet", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 33516, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T02:39:08.474466+00:00", "ended_at": "2026-08-27T02:39:10.953062+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "49b0cf2e-5bf6-40cd-a146-56936e925e3f", "name": "shaded-ivory-skink", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 54906, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 233, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:39:04.888838+00:00", "ended_at": "2026-08-27T02:39:10.954173+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1666 }, { "id": "fe121eba-714e-4a34-8a1d-f65aa914ac2b", "name": "blithe-sleepy-pochard", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 39938, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 371, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T13:29:16.915689+00:00", "ended_at": "2026-08-26T13:29:21.667151+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "d1d946e7-fe9a-41eb-bed6-be8268600949", "name": "somber-vigilant-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 46540, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 330, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:40:03.244668+00:00", "ended_at": "2026-08-26T12:40:06.291455+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "1cce6a5d-dd14-4963-bdd6-cf37af612d8a", "name": "whispering-snowy-chough", "protocol": "ssh", "channel_kind": null, "src_ip": "77.239.124.249", "src_port": 42916, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-26T12:02:43.783681+00:00", "ended_at": "2026-08-26T12:02:51.870614+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "86fccb70-8cc3-4b0d-aa7a-997d8b2ce89f", "name": "marine-buoyant-chinchilla", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 49570, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 599, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:02:40.338552+00:00", "ended_at": "2026-08-26T12:02:51.869609+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1671 }, { "id": "a4be4f3e-64b6-40c1-83b4-68a493eab519", "name": "dewy-glassy-bobcat", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 47970, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 178, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T05:59:10.914341+00:00", "ended_at": "2026-08-26T05:59:14.843625+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "5c472553-b457-4dc5-9e4a-1680c1d3304b", "name": "vaulted-honest-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 59218, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 240, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T05:46:40.336332+00:00", "ended_at": "2026-08-26T05:46:44.686890+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "d2c6c23f-fac6-4789-bb26-25a6f53a803c", "name": "smooth-feathered-petrel", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.200", "src_port": 48904, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-26T05:38:38.207749+00:00", "ended_at": "2026-08-26T05:38:40.361106+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c07cce18-d8b2-4942-b5be-c2476fc58d1b", "name": "daring-mottled-goldcrest", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 59926, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 223, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T05:38:33.502322+00:00", "ended_at": "2026-08-26T05:38:40.362146+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1671 }, { "id": "a1da6eb3-eae9-489a-9c19-2490bac80337", "name": "rugged-granite-eagle", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 51674, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 451, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:33:23.706174+00:00", "ended_at": "2026-08-25T23:33:25.040941+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "ab03db24-11bb-4a82-9013-6aeb02fc90ea", "name": "murky-regal-finch", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 48516, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 448, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:12:19.301366+00:00", "ended_at": "2026-08-25T23:12:20.591327+00:00", "ended_reason": "exec complete", "commands": 10, "transcript_bytes": 1353 }, { "id": "4a6d5750-734b-442a-b022-8884a0e5b774", "name": "merry-muted-caribou", "protocol": "ssh", "channel_kind": null, "src_ip": "104.43.56.65", "src_port": 33668, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T23:11:48.462272+00:00", "ended_at": "2026-08-25T23:12:20.592599+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "b734462e-a2c1-426f-b63f-dee0ed913e9f", "name": "airy-bronzed-skylark", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 39032, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 235, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T01:44:00.105336+00:00", "ended_at": "2026-08-25T01:44:03.798112+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "6b11bdd9-2b9f-486f-8a32-b41287f8f727", "name": "brisk-shaded-jerboa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 43202, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 215, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T00:49:55.914167+00:00", "ended_at": "2026-08-25T00:50:01.906652+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "71bbe9d8-ddc4-4ba1-8606-3c39818a2cf0", "name": "dusky-frosty-goshawk", "protocol": "ssh", "channel_kind": null, "src_ip": "45.153.34.165", "src_port": 33702, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T00:44:08.917920+00:00", "ended_at": "2026-08-25T00:44:11.014257+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8eb7b968-5d13-412a-994f-3c3c9448e021", "name": "dewy-curious-marmot", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 39392, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 231, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T00:44:08.021497+00:00", "ended_at": "2026-08-25T00:44:11.012884+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1666 }, { "id": "af1ee7ce-95c8-402c-b262-89ee040e225e", "name": "ancient-hidden-kudu", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 33212, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 217, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T10:05:38.225696+00:00", "ended_at": "2026-08-24T10:05:41.448999+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "47567079-5f64-450b-948f-7e6859a6adde", "name": "dapper-gnarled-turnstone", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 43508, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 210, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T09:50:20.927267+00:00", "ended_at": "2026-08-24T09:50:25.388726+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "fd757eb6-b5e8-41f3-b7be-860990a19318", "name": "balmy-creaky-goldfinch", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.11", "src_port": 53814, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-24T08:52:16.343046+00:00", "ended_at": "2026-08-24T08:52:17.906608+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "62552bb6-1dd7-4353-b3cd-f3778725bc61", "name": "jaunty-brisk-cormorant", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 56662, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 274, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T08:52:10.066960+00:00", "ended_at": "2026-08-24T08:52:17.908041+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1659 }, { "id": "a77d9d14-6ebf-409c-b6a7-b92f9c0c7284", "name": "amiable-vernal-teal", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 55568, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-23T08:41:04.368714+00:00", "ended_at": "2026-08-23T08:41:05.678811+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a7199aa3-f5cd-419c-a4e0-0dd79b820130", "name": "wooded-flinty-anteater", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 36474, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 168, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-23T08:40:59.210029+00:00", "ended_at": "2026-08-23T08:41:05.680012+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1671 }, { "id": "18bff73b-f494-4ac3-9988-1b4fe59bf4dc", "name": "blithe-sunlit-stonechat", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.120", "src_port": 50492, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-22T12:13:25.310963+00:00", "ended_at": "2026-08-22T12:13:27.414569+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "9134031b-7f03-4e67-bafc-0a2c95ab244c", "name": "snowy-oaken-bowerbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.120", "src_port": 49578, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 293, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-22T12:13:20.757758+00:00", "ended_at": "2026-08-22T12:13:27.412849+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1671 }, { "id": "1b494c28-5f83-43e4-aedc-50bb992ace7a", "name": "clever-sterling-dormouse", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.42.147", "src_port": 52134, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-21T12:51:33.519410+00:00", "ended_at": "2026-08-21T12:51:36.235438+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5af9cfe1-475f-478d-aee0-e5d939f44b82", "name": "coral-ashen-bowerbird", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.42.147", "src_port": 34268, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 242, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-21T12:51:30.067684+00:00", "ended_at": "2026-08-21T12:51:36.236273+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1670 }, { "id": "4c9bf35a-1c88-4999-a698-60b245c38d4b", "name": "fringed-bronzed-tanager", "protocol": "ssh", "channel_kind": null, "src_ip": "45.156.87.93", "src_port": 51678, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T18:39:16.043900+00:00", "ended_at": "2026-08-20T18:39:17.314394+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "cdc7ce40-2849-4cd0-bbb4-4a39bb352cc4", "name": "primal-lofty-kudu", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.156.87.93", "src_port": 44582, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 181, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T18:39:10.922518+00:00", "ended_at": "2026-08-20T18:39:17.315311+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1663 }, { "id": "e87c4e00-021a-42cb-9120-97a71e57767b", "name": "shifting-gallant-rook", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.66", "src_port": 39876, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T11:06:03.497258+00:00", "ended_at": "2026-08-20T11:06:05.667942+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "96c0bb3d-c34a-4ee8-a1bd-f5b7914e75ed", "name": "nautical-misty-otter", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.66", "src_port": 42066, "username": "elasticsearch", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 185, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T11:06:03.008322+00:00", "ended_at": "2026-08-20T11:06:05.668559+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1565 } ]