[ { "id": "4f6b69ad-0f71-4209-a73b-9586ab7760c9", "name": "dappled-ancient-weasel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "202.155.157.112", "src_port": 54628, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 732, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T12:03:02.988728+00:00", "ended_at": "2026-08-27T12:03:04.565690+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2263 }, { "id": "566b4c0f-5c9b-4d59-88bb-f14dc8a43f2f", "name": "daring-deft-francolin", "protocol": "ssh", "channel_kind": null, "src_ip": "202.155.157.112", "src_port": 37936, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T12:02:41.011216+00:00", "ended_at": "2026-08-27T12:02:43.033070+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "c6b51dd0-0841-4892-9530-919ad3905d4e", "name": "coastal-noble-fossa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "187.111.28.131", "src_port": 59022, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": 457, "probe_flagged": 0, "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh", "started_at": "2026-08-27T11:26:05.452188+00:00", "ended_at": "2026-08-27T11:26:07.004443+00:00", "ended_reason": "exec complete", "commands": 18, "transcript_bytes": 2186 }, { "id": "c2a54a67-d7a2-4769-b760-86d57b773a5d", "name": "granite-quartz-fossa", "protocol": "ssh", "channel_kind": null, "src_ip": "187.111.28.131", "src_port": 59042, "username": "gitlab", "client_version": "SSH-2.0-libssh_0.9.6", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T11:25:48.170738+00:00", "ended_at": "2026-08-27T11:25:50.103421+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "8e587c24-b3c7-404a-b252-7d19bce2495d", "name": "freckled-russet-boar", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 37972, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 311, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:48:39.383356+00:00", "ended_at": "2026-08-27T02:48:44.517846+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "bbaff6b1-d83d-4dbd-9fbd-583586396433", "name": "faded-brisk-otter", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 34702, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-27T02:17:58.284745+00:00", "ended_at": "2026-08-27T02:18:00.529029+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "d96a20de-1b23-4046-9901-e0c6141ea4ed", "name": "gleaming-canny-waxwing", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 60360, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 271, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-27T02:17:53.483167+00:00", "ended_at": "2026-08-27T02:18:00.531468+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1657 }, { "id": "c8c47fcc-1e88-4391-a142-a67c664ee3a6", "name": "salty-opal-sloth", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 34218, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 451, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:07:32.627613+00:00", "ended_at": "2026-08-26T12:07:38.481592+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "55571dc5-b433-4277-a7dd-81f696f601c4", "name": "wistful-marine-eider", "protocol": "ssh", "channel_kind": null, "src_ip": "77.239.124.249", "src_port": 32966, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-26T12:01:16.226563+00:00", "ended_at": "2026-08-26T12:01:23.841038+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "6dfba3b5-8c39-47d1-b46c-9f304d1f71b4", "name": "wistful-fickle-hornbill", "protocol": "ssh", "channel_kind": "exec", "src_ip": "77.239.124.249", "src_port": 56656, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 512, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T12:01:08.605577+00:00", "ended_at": "2026-08-26T12:01:23.839534+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1657 }, { "id": "52b6fa45-e79c-4a6f-8e8a-f912be1b24dd", "name": "civil-bronzed-caracal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 44912, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 236, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T06:42:12.194536+00:00", "ended_at": "2026-08-26T06:42:14.816262+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "8ca4bc83-a7d6-4b85-aff2-27d21435b5aa", "name": "slender-airy-penguin", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.200", "src_port": 57068, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-26T05:48:21.589570+00:00", "ended_at": "2026-08-26T05:48:23.400752+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "ee83e7d6-1480-429c-93a3-b1c0b8f1510b", "name": "gallant-stoic-bittern", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.200", "src_port": 39224, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 219, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-26T05:48:17.376154+00:00", "ended_at": "2026-08-26T05:48:23.399594+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1659 }, { "id": "581331c5-8699-48be-8131-823d10e42ed9", "name": "feathered-hushed-gannet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 57768, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 449, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T23:00:20.677297+00:00", "ended_at": "2026-08-25T23:00:22.602738+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "d7b7ca62-50a7-4f8b-aef3-7c628e90648d", "name": "pristine-peaty-skink", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 46498, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 451, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:48:11.239717+00:00", "ended_at": "2026-08-25T22:48:13.212635+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "1c475719-b626-4605-829f-0a8f977d4504", "name": "windswept-gritty-raven", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 56304, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 454, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:45:01.310036+00:00", "ended_at": "2026-08-25T22:45:03.690649+00:00", "ended_reason": "exec complete", "commands": 9, "transcript_bytes": 617 }, { "id": "f6442426-2687-47df-84b5-af52cea31b32", "name": "muted-kindly-parakeet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "104.43.56.65", "src_port": 41280, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 449, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T22:09:24.406014+00:00", "ended_at": "2026-08-25T22:09:25.651221+00:00", "ended_reason": "exec complete", "commands": 10, "transcript_bytes": 1353 }, { "id": "922c4cc9-ffe0-44fe-8ac5-1fd6718e12b8", "name": "velvet-hazy-seal", "protocol": "ssh", "channel_kind": null, "src_ip": "104.43.56.65", "src_port": 33720, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T22:08:53.615679+00:00", "ended_at": "2026-08-25T22:09:25.648943+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "a203533a-0ae1-4a0a-980f-7e74804f3c71", "name": "sunlit-plush-pelican", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 57468, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 181, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T01:55:40.511586+00:00", "ended_at": "2026-08-25T01:55:45.695483+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "a4de2640-6517-4ed7-ae4c-aeebf82d884b", "name": "dapper-jolly-galago", "protocol": "ssh", "channel_kind": null, "src_ip": "45.153.34.165", "src_port": 43944, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-25T01:05:15.101948+00:00", "ended_at": "2026-08-25T01:05:16.914381+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "69cc582a-98c9-4b5c-a88a-0edb495a0461", "name": "austere-silent-bison", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.153.34.165", "src_port": 32778, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 243, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-25T01:05:10.088419+00:00", "ended_at": "2026-08-25T01:05:16.915162+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1657 }, { "id": "57ac8854-4a93-4ee5-8e88-e01f38d26ce7", "name": "blazing-courtly-jerboa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 36410, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 240, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T09:47:38.523590+00:00", "ended_at": "2026-08-24T09:47:41.518764+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 864 }, { "id": "dffbc348-2635-46af-8556-6d9b54a291a5", "name": "jagged-smooth-fieldfare", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.11", "src_port": 35234, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-24T08:58:09.423370+00:00", "ended_at": "2026-08-24T08:58:11.406748+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "36eaa60b-97dc-4cc9-80b5-8e5515f92a33", "name": "frank-lofty-kingfisher", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.11", "src_port": 37020, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 212, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-24T08:58:05.794329+00:00", "ended_at": "2026-08-24T08:58:11.408024+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1659 }, { "id": "96bf67c3-2711-4a4e-8b4b-cffa14c9a693", "name": "sunlit-lunar-hummingbird", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.40.217", "src_port": 41938, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-23T08:38:22.287636+00:00", "ended_at": "2026-08-23T08:38:23.800405+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "5bac7db0-810c-4ab0-b5f1-64148bdbb715", "name": "gallant-pewter-turnstone", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.40.217", "src_port": 41382, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 177, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-23T08:38:16.681760+00:00", "ended_at": "2026-08-23T08:38:23.801102+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1657 }, { "id": "fb9d9e44-b0bb-4afe-a96a-a68f32ed0234", "name": "brave-subtle-gannet", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.42.147", "src_port": 48598, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 252, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-21T13:16:04.246114+00:00", "ended_at": "2026-08-21T13:16:10.200414+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 863 }, { "id": "39c8aca0-d33e-418a-a27f-f3a6b8384c85", "name": "feathered-velvet-narwhal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.42.147", "src_port": 47408, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 211, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-21T13:02:30.222880+00:00", "ended_at": "2026-08-21T13:02:34.538605+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 863 }, { "id": "03f06d88-61a8-47bb-8e85-73f3efd96ef1", "name": "supple-hardy-moose", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.156.87.93", "src_port": 40260, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 187, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T19:07:35.188818+00:00", "ended_at": "2026-08-20T19:07:39.447163+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 856 }, { "id": "05f1fbc0-79c0-4297-80a2-b435149ee593", "name": "civil-merry-seal", "protocol": "ssh", "channel_kind": "exec", "src_ip": "45.156.87.93", "src_port": 41428, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 182, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T18:56:14.005044+00:00", "ended_at": "2026-08-20T18:56:18.462360+00:00", "ended_reason": "exec complete", "commands": 12, "transcript_bytes": 856 }, { "id": "09cb0b2e-e127-4242-846e-1bcdcec3b8ab", "name": "bitter-sturdy-grebe", "protocol": "ssh", "channel_kind": null, "src_ip": "91.92.47.66", "src_port": 35298, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": null, "probe_flagged": 0, "exec_command": null, "started_at": "2026-08-20T10:34:42.483877+00:00", "ended_at": "2026-08-20T10:34:44.081077+00:00", "ended_reason": "no channel opened", "commands": 0, "transcript_bytes": 0 }, { "id": "3ad88cbd-476b-4cc6-96fa-d9613044fad1", "name": "fickle-autumn-fossa", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.66", "src_port": 42034, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 185, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T10:34:42.035794+00:00", "ended_at": "2026-08-20T10:34:44.079118+00:00", "ended_reason": "exec complete", "commands": 14, "transcript_bytes": 1626 }, { "id": "79aec75e-3db5-4895-8e60-33a3574604c5", "name": "chilly-blithe-whimbrel", "protocol": "ssh", "channel_kind": "exec", "src_ip": "91.92.47.66", "src_port": 51406, "username": "gitlab", "client_version": "SSH-2.0-Go", "auth_attempts": 1, "automation": "bot", "think_ms": 185, "probe_flagged": 0, "exec_command": "uname -s -v -n -r -m", "started_at": "2026-08-20T10:21:00.500169+00:00", "ended_at": "2026-08-20T10:21:00.938798+00:00", "ended_reason": "exec complete", "commands": 3, "transcript_bytes": 220 } ]