-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathssh_logs_new.json
More file actions
1200 lines (1200 loc) · 496 KB
/
ssh_logs_new.json
File metadata and controls
1200 lines (1200 loc) · 496 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
{"ts": "2025-04-24T10:20:09.508780Z", "uid": "SH4886434", "id.orig_h": "31.184.137.182", "id.orig_p": 58221, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3234, "resp_pkts": 34, "resp_ip_bytes": 1700, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.508825Z", "uid": "SH2386231", "id.orig_h": "129.164.50.72", "id.orig_p": 26957, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1197, "resp_pkts": 48, "resp_ip_bytes": 2208, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.508846Z", "uid": "SH3667192", "id.orig_h": "135.55.210.223", "id.orig_p": 42848, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 702, "resp_pkts": 22, "resp_ip_bytes": 1034, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.508861Z", "uid": "SH7853516", "id.orig_h": "125.123.103.182", "id.orig_p": 47789, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1168, "resp_pkts": 37, "resp_ip_bytes": 2701, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.508875Z", "uid": "SH6108492", "id.orig_h": "4.5.47.4", "id.orig_p": 30192, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 876, "resp_pkts": 23, "resp_ip_bytes": 1495, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.508888Z", "uid": "SH4295535", "id.orig_h": "78.164.1.207", "id.orig_p": 32500, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1848, "resp_pkts": 46, "resp_ip_bytes": 2254, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.508916Z", "uid": "SH8176781", "id.orig_h": "111.129.222.243", "id.orig_p": 47980, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3150, "resp_pkts": 26, "resp_ip_bytes": 1976, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.508932Z", "uid": "SH3395540", "id.orig_h": "74.165.131.224", "id.orig_p": 34955, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2350, "resp_pkts": 46, "resp_ip_bytes": 1978, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.508946Z", "uid": "SH8933119", "id.orig_h": "74.165.131.224", "id.orig_p": 20693, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2262, "resp_pkts": 36, "resp_ip_bytes": 2088, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.508959Z", "uid": "SH4808907", "id.orig_h": "132.180.149.17", "id.orig_p": 53397, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1254, "resp_pkts": 34, "resp_ip_bytes": 1972, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.508970Z", "uid": "SH8366911", "id.orig_h": "34.243.90.209", "id.orig_p": 30491, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 728, "resp_pkts": 16, "resp_ip_bytes": 848, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.508982Z", "uid": "SH5613192", "id.orig_h": "3.157.204.249", "id.orig_p": 24715, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3108, "resp_pkts": 20, "resp_ip_bytes": 1100, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.508994Z", "uid": "SH2244443", "id.orig_h": "206.121.122.80", "id.orig_p": 5985, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 500, "resp_pkts": 27, "resp_ip_bytes": 1890, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.509004Z", "uid": "SH8820205", "id.orig_h": "125.123.103.182", "id.orig_p": 26344, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 1932, "resp_pkts": 15, "resp_ip_bytes": 690, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.509015Z", "uid": "SH3621097", "id.orig_h": "164.89.50.183", "id.orig_p": 8712, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 855, "resp_pkts": 31, "resp_ip_bytes": 1922, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.509031Z", "uid": "SH5617357", "id.orig_h": "171.3.171.165", "id.orig_p": 42666, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 3081, "resp_pkts": 26, "resp_ip_bytes": 1872, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509044Z", "uid": "SH7425176", "id.orig_h": "87.143.23.119", "id.orig_p": 57913, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1368, "resp_pkts": 36, "resp_ip_bytes": 2556, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.509055Z", "uid": "SH5124698", "id.orig_h": "135.176.100.83", "id.orig_p": 20517, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 759, "resp_pkts": 24, "resp_ip_bytes": 984, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.509067Z", "uid": "SH9049131", "id.orig_h": "216.10.117.99", "id.orig_p": 19882, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 760, "resp_pkts": 27, "resp_ip_bytes": 1971, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.509077Z", "uid": "SH4991786", "id.orig_h": "173.53.0.82", "id.orig_p": 64691, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1350, "resp_pkts": 22, "resp_ip_bytes": 1430, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.509089Z", "uid": "SH8664162", "id.orig_h": "171.3.171.165", "id.orig_p": 32561, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1178, "resp_pkts": 26, "resp_ip_bytes": 1872, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509099Z", "uid": "SH5098852", "id.orig_h": "172.197.112.108", "id.orig_p": 2506, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2385, "resp_pkts": 39, "resp_ip_bytes": 2613, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.509111Z", "uid": "SH1618738", "id.orig_h": "181.91.226.98", "id.orig_p": 4656, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1888, "resp_pkts": 41, "resp_ip_bytes": 1640, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.509122Z", "uid": "SH4548723", "id.orig_h": "122.204.186.125", "id.orig_p": 14064, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 960, "resp_pkts": 26, "resp_ip_bytes": 2080, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.509134Z", "uid": "SH6860177", "id.orig_h": "132.199.128.167", "id.orig_p": 49426, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3266, "resp_pkts": 24, "resp_ip_bytes": 1584, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509145Z", "uid": "SH7734862", "id.orig_h": "191.33.181.155", "id.orig_p": 19635, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 580, "resp_pkts": 18, "resp_ip_bytes": 864, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.509156Z", "uid": "SH8243153", "id.orig_h": "74.146.111.155", "id.orig_p": 11346, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1880, "resp_pkts": 14, "resp_ip_bytes": 896, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.509167Z", "uid": "SH8621861", "id.orig_h": "191.43.248.137", "id.orig_p": 33242, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1419, "resp_pkts": 20, "resp_ip_bytes": 1000, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.509179Z", "uid": "SH6631006", "id.orig_h": "212.152.24.209", "id.orig_p": 47579, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1680, "resp_pkts": 20, "resp_ip_bytes": 1000, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509189Z", "uid": "SH5676810", "id.orig_h": "135.176.100.83", "id.orig_p": 47926, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1026, "resp_pkts": 39, "resp_ip_bytes": 1638, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.509201Z", "uid": "SH8691809", "id.orig_h": "135.176.100.83", "id.orig_p": 7387, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 756, "resp_pkts": 48, "resp_ip_bytes": 2256, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.509212Z", "uid": "SH2469313", "id.orig_h": "212.152.24.209", "id.orig_p": 19087, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3478, "resp_pkts": 41, "resp_ip_bytes": 2747, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509223Z", "uid": "SH8033223", "id.orig_h": "147.83.99.54", "id.orig_p": 52134, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1450, "resp_pkts": 39, "resp_ip_bytes": 2652, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509233Z", "uid": "SH3638045", "id.orig_h": "196.134.79.79", "id.orig_p": 51377, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1764, "resp_pkts": 41, "resp_ip_bytes": 2378, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.509245Z", "uid": "SH4483755", "id.orig_h": "125.19.151.3", "id.orig_p": 6139, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3234, "resp_pkts": 11, "resp_ip_bytes": 583, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.509256Z", "uid": "SH2560049", "id.orig_h": "135.55.210.223", "id.orig_p": 43551, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 2025, "resp_pkts": 46, "resp_ip_bytes": 3588, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.509267Z", "uid": "SH1208191", "id.orig_h": "116.149.83.216", "id.orig_p": 38647, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1260, "resp_pkts": 19, "resp_ip_bytes": 1444, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509278Z", "uid": "SH8113440", "id.orig_h": "25.47.52.197", "id.orig_p": 64914, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1062, "resp_pkts": 50, "resp_ip_bytes": 4000, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.509289Z", "uid": "SH9589715", "id.orig_h": "196.134.79.79", "id.orig_p": 16622, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1800, "resp_pkts": 12, "resp_ip_bytes": 828, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.509300Z", "uid": "SH9218923", "id.orig_h": "191.43.248.137", "id.orig_p": 18721, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3773, "resp_pkts": 24, "resp_ip_bytes": 1560, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.509311Z", "uid": "SH2985538", "id.orig_h": "132.199.128.167", "id.orig_p": 32573, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2244, "resp_pkts": 33, "resp_ip_bytes": 1617, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509322Z", "uid": "SH3485047", "id.orig_h": "23.111.149.52", "id.orig_p": 4313, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1288, "resp_pkts": 30, "resp_ip_bytes": 1740, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.509333Z", "uid": "SH8258996", "id.orig_h": "83.195.24.226", "id.orig_p": 35009, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 992, "resp_pkts": 31, "resp_ip_bytes": 1674, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.509346Z", "uid": "SH7174687", "id.orig_h": "173.53.0.82", "id.orig_p": 54607, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 400, "resp_pkts": 50, "resp_ip_bytes": 2800, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.509357Z", "uid": "SH4292568", "id.orig_h": "171.204.144.93", "id.orig_p": 49127, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 1920, "resp_pkts": 11, "resp_ip_bytes": 627, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.509367Z", "uid": "SH1332545", "id.orig_h": "136.169.203.247", "id.orig_p": 1617, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 756, "resp_pkts": 11, "resp_ip_bytes": 803, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.509378Z", "uid": "SH8444491", "id.orig_h": "147.83.99.54", "id.orig_p": 14533, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2666, "resp_pkts": 38, "resp_ip_bytes": 2204, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509389Z", "uid": "SH1256990", "id.orig_h": "216.10.117.99", "id.orig_p": 31465, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1980, "resp_pkts": 25, "resp_ip_bytes": 1850, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.509401Z", "uid": "SH9263692", "id.orig_h": "52.173.49.103", "id.orig_p": 17255, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2926, "resp_pkts": 47, "resp_ip_bytes": 3619, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.509411Z", "uid": "SH3724181", "id.orig_h": "197.168.76.169", "id.orig_p": 61883, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2989, "resp_pkts": 13, "resp_ip_bytes": 650, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.509422Z", "uid": "SH1246379", "id.orig_h": "25.47.52.197", "id.orig_p": 24189, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 924, "resp_pkts": 10, "resp_ip_bytes": 800, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.509433Z", "uid": "SH9693993", "id.orig_h": "25.47.52.197", "id.orig_p": 27163, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 847, "resp_pkts": 45, "resp_ip_bytes": 2160, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.509444Z", "uid": "SH3182607", "id.orig_h": "52.173.49.103", "id.orig_p": 21627, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2666, "resp_pkts": 35, "resp_ip_bytes": 1960, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.509455Z", "uid": "SH5104169", "id.orig_h": "125.123.103.182", "id.orig_p": 63301, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1104, "resp_pkts": 43, "resp_ip_bytes": 3440, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.509467Z", "uid": "SH9894992", "id.orig_h": "191.43.248.137", "id.orig_p": 44693, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2109, "resp_pkts": 48, "resp_ip_bytes": 3168, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.509477Z", "uid": "SH4453254", "id.orig_h": "31.184.137.182", "id.orig_p": 45442, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1184, "resp_pkts": 22, "resp_ip_bytes": 1430, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.509488Z", "uid": "SH7687829", "id.orig_h": "172.197.112.108", "id.orig_p": 12992, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1232, "resp_pkts": 28, "resp_ip_bytes": 1568, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.509498Z", "uid": "SH4449967", "id.orig_h": "159.193.183.0", "id.orig_p": 35163, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2688, "resp_pkts": 23, "resp_ip_bytes": 989, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509509Z", "uid": "SH8979498", "id.orig_h": "113.173.136.4", "id.orig_p": 56495, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2291, "resp_pkts": 10, "resp_ip_bytes": 740, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.509519Z", "uid": "SH8105697", "id.orig_h": "191.33.181.155", "id.orig_p": 58261, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3036, "resp_pkts": 11, "resp_ip_bytes": 506, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.509530Z", "uid": "SH2690650", "id.orig_h": "212.152.24.209", "id.orig_p": 57346, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 602, "resp_pkts": 25, "resp_ip_bytes": 1050, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509548Z", "uid": "SH3599559", "id.orig_h": "102.213.11.119", "id.orig_p": 33427, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 1890, "resp_pkts": 40, "resp_ip_bytes": 1960, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.509561Z", "uid": "SH7853395", "id.orig_h": "78.164.1.207", "id.orig_p": 24364, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2170, "resp_pkts": 26, "resp_ip_bytes": 1092, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509571Z", "uid": "SH9021155", "id.orig_h": "147.83.99.54", "id.orig_p": 1110, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2961, "resp_pkts": 34, "resp_ip_bytes": 1734, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509582Z", "uid": "SH9496549", "id.orig_h": "206.121.122.80", "id.orig_p": 46847, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 3042, "resp_pkts": 38, "resp_ip_bytes": 2622, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.509594Z", "uid": "SH9119587", "id.orig_h": "74.146.111.155", "id.orig_p": 14358, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1525, "resp_pkts": 12, "resp_ip_bytes": 612, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.509605Z", "uid": "SH3201451", "id.orig_h": "113.173.136.4", "id.orig_p": 41182, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1539, "resp_pkts": 37, "resp_ip_bytes": 1998, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.509701Z", "uid": "SH8826360", "id.orig_h": "132.199.128.167", "id.orig_p": 25606, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1296, "resp_pkts": 45, "resp_ip_bytes": 1890, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509714Z", "uid": "SH1043307", "id.orig_h": "159.193.183.0", "id.orig_p": 9848, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2844, "resp_pkts": 16, "resp_ip_bytes": 864, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509726Z", "uid": "SH6618398", "id.orig_h": "110.177.195.150", "id.orig_p": 3079, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1320, "resp_pkts": 23, "resp_ip_bytes": 1771, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.509737Z", "uid": "SH4369567", "id.orig_h": "116.149.83.216", "id.orig_p": 16372, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 2079, "resp_pkts": 19, "resp_ip_bytes": 988, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509748Z", "uid": "SH4780881", "id.orig_h": "171.3.171.165", "id.orig_p": 9446, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2584, "resp_pkts": 49, "resp_ip_bytes": 2450, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509759Z", "uid": "SH7791916", "id.orig_h": "212.152.24.209", "id.orig_p": 47670, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2294, "resp_pkts": 39, "resp_ip_bytes": 3120, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509770Z", "uid": "SH7687245", "id.orig_h": "129.164.50.72", "id.orig_p": 58854, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1020, "resp_pkts": 20, "resp_ip_bytes": 1460, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.509782Z", "uid": "SH1501298", "id.orig_h": "191.43.248.137", "id.orig_p": 40006, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2924, "resp_pkts": 17, "resp_ip_bytes": 1309, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.509794Z", "uid": "SH3534709", "id.orig_h": "147.83.99.54", "id.orig_p": 46573, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2450, "resp_pkts": 21, "resp_ip_bytes": 1050, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509804Z", "uid": "SH9778300", "id.orig_h": "135.55.210.223", "id.orig_p": 59885, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1360, "resp_pkts": 45, "resp_ip_bytes": 3600, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.509815Z", "uid": "SH6672074", "id.orig_h": "74.165.131.224", "id.orig_p": 47096, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2145, "resp_pkts": 48, "resp_ip_bytes": 2160, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.509826Z", "uid": "SH2093484", "id.orig_h": "135.55.210.223", "id.orig_p": 41255, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1242, "resp_pkts": 44, "resp_ip_bytes": 2200, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.509837Z", "uid": "SH1459431", "id.orig_h": "147.83.99.54", "id.orig_p": 47287, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 760, "resp_pkts": 37, "resp_ip_bytes": 1813, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509849Z", "uid": "SH6406444", "id.orig_h": "131.42.117.209", "id.orig_p": 42201, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 588, "resp_pkts": 37, "resp_ip_bytes": 2701, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509861Z", "uid": "SH4361573", "id.orig_h": "168.154.125.86", "id.orig_p": 21403, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 1848, "resp_pkts": 32, "resp_ip_bytes": 2048, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509871Z", "uid": "SH4273284", "id.orig_h": "212.152.24.209", "id.orig_p": 23091, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1040, "resp_pkts": 33, "resp_ip_bytes": 1716, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.509883Z", "uid": "SH8164321", "id.orig_h": "197.168.76.169", "id.orig_p": 8663, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1520, "resp_pkts": 50, "resp_ip_bytes": 2300, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.509895Z", "uid": "SH2999709", "id.orig_h": "135.55.210.223", "id.orig_p": 33179, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2544, "resp_pkts": 45, "resp_ip_bytes": 2880, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.509906Z", "uid": "SH1300814", "id.orig_h": "78.164.1.207", "id.orig_p": 4205, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 492, "resp_pkts": 34, "resp_ip_bytes": 2074, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.509918Z", "uid": "SH8400551", "id.orig_h": "111.129.222.243", "id.orig_p": 24583, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2475, "resp_pkts": 15, "resp_ip_bytes": 1170, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.509930Z", "uid": "SH4476280", "id.orig_h": "3.157.204.249", "id.orig_p": 2490, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1333, "resp_pkts": 25, "resp_ip_bytes": 1800, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.509942Z", "uid": "SH4603891", "id.orig_h": "83.195.24.226", "id.orig_p": 16338, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 690, "resp_pkts": 16, "resp_ip_bytes": 1136, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.509959Z", "uid": "SH2587080", "id.orig_h": "171.3.171.165", "id.orig_p": 13638, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2240, "resp_pkts": 34, "resp_ip_bytes": 1802, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.509970Z", "uid": "SH4281546", "id.orig_h": "74.165.131.224", "id.orig_p": 55270, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3588, "resp_pkts": 27, "resp_ip_bytes": 1539, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.509981Z", "uid": "SH2487321", "id.orig_h": "197.168.76.169", "id.orig_p": 20503, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1197, "resp_pkts": 47, "resp_ip_bytes": 2820, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.509992Z", "uid": "SH7525642", "id.orig_h": "159.193.183.0", "id.orig_p": 58177, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 990, "resp_pkts": 26, "resp_ip_bytes": 1846, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510003Z", "uid": "SH3304162", "id.orig_h": "114.126.110.154", "id.orig_p": 46136, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1120, "resp_pkts": 30, "resp_ip_bytes": 1680, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.510014Z", "uid": "SH9232472", "id.orig_h": "212.152.24.209", "id.orig_p": 2484, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1140, "resp_pkts": 43, "resp_ip_bytes": 1935, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.510025Z", "uid": "SH5118870", "id.orig_h": "83.195.24.226", "id.orig_p": 38357, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2430, "resp_pkts": 17, "resp_ip_bytes": 901, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.510036Z", "uid": "SH9837383", "id.orig_h": "78.164.1.207", "id.orig_p": 42921, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2800, "resp_pkts": 29, "resp_ip_bytes": 1218, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510051Z", "uid": "SH7129896", "id.orig_h": "52.173.49.103", "id.orig_p": 50900, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1155, "resp_pkts": 25, "resp_ip_bytes": 1375, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510063Z", "uid": "SH7916718", "id.orig_h": "191.47.156.160", "id.orig_p": 6202, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3290, "resp_pkts": 11, "resp_ip_bytes": 792, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.510075Z", "uid": "SH7481109", "id.orig_h": "116.149.83.216", "id.orig_p": 29924, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1150, "resp_pkts": 32, "resp_ip_bytes": 2336, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510087Z", "uid": "SH8886388", "id.orig_h": "206.121.122.80", "id.orig_p": 18976, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 760, "resp_pkts": 31, "resp_ip_bytes": 1798, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.510098Z", "uid": "SH8764972", "id.orig_h": "116.149.83.216", "id.orig_p": 49810, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 750, "resp_pkts": 17, "resp_ip_bytes": 1105, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510108Z", "uid": "SH2836445", "id.orig_h": "111.129.222.243", "id.orig_p": 13225, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1896, "resp_pkts": 46, "resp_ip_bytes": 2806, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.510119Z", "uid": "SH9687150", "id.orig_h": "172.197.112.108", "id.orig_p": 55629, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2720, "resp_pkts": 27, "resp_ip_bytes": 1809, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.510129Z", "uid": "SH1025638", "id.orig_h": "34.243.90.209", "id.orig_p": 16408, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 680, "resp_pkts": 17, "resp_ip_bytes": 799, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.510141Z", "uid": "SH9315781", "id.orig_h": "52.173.49.103", "id.orig_p": 38163, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 3080, "resp_pkts": 42, "resp_ip_bytes": 3150, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510152Z", "uid": "SH8389125", "id.orig_h": "125.123.103.182", "id.orig_p": 54168, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2058, "resp_pkts": 49, "resp_ip_bytes": 2842, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510163Z", "uid": "SH7754792", "id.orig_h": "105.236.211.106", "id.orig_p": 6483, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 702, "resp_pkts": 13, "resp_ip_bytes": 975, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510174Z", "uid": "SH7743052", "id.orig_h": "191.47.156.160", "id.orig_p": 38563, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 1936, "resp_pkts": 43, "resp_ip_bytes": 2666, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.510186Z", "uid": "SH1487004", "id.orig_h": "147.83.99.54", "id.orig_p": 57286, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1332, "resp_pkts": 24, "resp_ip_bytes": 1008, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.510343Z", "uid": "SH7120864", "id.orig_h": "159.193.183.0", "id.orig_p": 65131, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 574, "resp_pkts": 20, "resp_ip_bytes": 1000, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510356Z", "uid": "SH2419415", "id.orig_h": "147.83.99.54", "id.orig_p": 31350, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1768, "resp_pkts": 41, "resp_ip_bytes": 1886, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.510368Z", "uid": "SH6767472", "id.orig_h": "31.184.137.182", "id.orig_p": 57971, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1836, "resp_pkts": 30, "resp_ip_bytes": 1890, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.510379Z", "uid": "SH1489199", "id.orig_h": "105.236.211.106", "id.orig_p": 39584, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 930, "resp_pkts": 32, "resp_ip_bytes": 1472, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510389Z", "uid": "SH4308307", "id.orig_h": "197.168.76.169", "id.orig_p": 36272, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 640, "resp_pkts": 39, "resp_ip_bytes": 2379, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510400Z", "uid": "SH6048860", "id.orig_h": "129.164.50.72", "id.orig_p": 33243, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2960, "resp_pkts": 10, "resp_ip_bytes": 700, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.510411Z", "uid": "SH9115940", "id.orig_h": "52.173.49.103", "id.orig_p": 34187, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1786, "resp_pkts": 16, "resp_ip_bytes": 816, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510424Z", "uid": "SH2980078", "id.orig_h": "171.204.144.93", "id.orig_p": 41879, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2700, "resp_pkts": 10, "resp_ip_bytes": 800, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.510436Z", "uid": "SH1265506", "id.orig_h": "4.5.47.4", "id.orig_p": 40193, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2898, "resp_pkts": 46, "resp_ip_bytes": 2714, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510448Z", "uid": "SH7347884", "id.orig_h": "78.164.1.207", "id.orig_p": 8960, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2144, "resp_pkts": 28, "resp_ip_bytes": 1764, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510459Z", "uid": "SH1612565", "id.orig_h": "197.168.76.169", "id.orig_p": 4777, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2150, "resp_pkts": 29, "resp_ip_bytes": 1334, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510471Z", "uid": "SH2260206", "id.orig_h": "216.10.117.99", "id.orig_p": 26451, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 810, "resp_pkts": 39, "resp_ip_bytes": 2223, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.510481Z", "uid": "SH6258133", "id.orig_h": "122.204.186.125", "id.orig_p": 59477, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1763, "resp_pkts": 20, "resp_ip_bytes": 1140, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510492Z", "uid": "SH3976963", "id.orig_h": "74.165.131.224", "id.orig_p": 27009, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3010, "resp_pkts": 14, "resp_ip_bytes": 728, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.510503Z", "uid": "SH5684901", "id.orig_h": "105.236.211.106", "id.orig_p": 44558, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 868, "resp_pkts": 46, "resp_ip_bytes": 3174, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510514Z", "uid": "SH2271865", "id.orig_h": "173.53.0.82", "id.orig_p": 50917, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1122, "resp_pkts": 49, "resp_ip_bytes": 3087, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.510526Z", "uid": "SH4248696", "id.orig_h": "122.204.186.125", "id.orig_p": 13637, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1988, "resp_pkts": 29, "resp_ip_bytes": 2291, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510537Z", "uid": "SH1777846", "id.orig_h": "3.157.204.249", "id.orig_p": 53908, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1248, "resp_pkts": 41, "resp_ip_bytes": 2952, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.510549Z", "uid": "SH5724382", "id.orig_h": "102.213.11.119", "id.orig_p": 2834, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1113, "resp_pkts": 10, "resp_ip_bytes": 400, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.510562Z", "uid": "SH2334731", "id.orig_h": "52.173.49.103", "id.orig_p": 57454, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2117, "resp_pkts": 11, "resp_ip_bytes": 550, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510574Z", "uid": "SH1871892", "id.orig_h": "125.123.103.182", "id.orig_p": 47905, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 768, "resp_pkts": 45, "resp_ip_bytes": 3465, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510585Z", "uid": "SH1180823", "id.orig_h": "191.43.248.137", "id.orig_p": 40514, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 688, "resp_pkts": 18, "resp_ip_bytes": 774, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.510596Z", "uid": "SH7765099", "id.orig_h": "196.134.79.79", "id.orig_p": 43310, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2379, "resp_pkts": 15, "resp_ip_bytes": 930, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.510607Z", "uid": "SH2447496", "id.orig_h": "4.5.47.4", "id.orig_p": 20811, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3432, "resp_pkts": 17, "resp_ip_bytes": 1360, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510617Z", "uid": "SH7217427", "id.orig_h": "110.177.195.150", "id.orig_p": 50999, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2695, "resp_pkts": 50, "resp_ip_bytes": 3200, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.510628Z", "uid": "SH5487103", "id.orig_h": "4.224.23.39", "id.orig_p": 18944, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1024, "resp_pkts": 50, "resp_ip_bytes": 2400, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.510639Z", "uid": "SH7462373", "id.orig_h": "129.164.50.72", "id.orig_p": 5479, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3680, "resp_pkts": 35, "resp_ip_bytes": 2135, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.510649Z", "uid": "SH3433632", "id.orig_h": "110.16.7.177", "id.orig_p": 32774, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2233, "resp_pkts": 48, "resp_ip_bytes": 3840, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.510660Z", "uid": "SH2801663", "id.orig_h": "191.33.181.155", "id.orig_p": 14810, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2120, "resp_pkts": 33, "resp_ip_bytes": 1683, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.510671Z", "uid": "SH1631618", "id.orig_h": "172.197.112.108", "id.orig_p": 23605, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2214, "resp_pkts": 30, "resp_ip_bytes": 1860, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.510682Z", "uid": "SH6190368", "id.orig_h": "132.199.128.167", "id.orig_p": 2469, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 690, "resp_pkts": 30, "resp_ip_bytes": 1260, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510693Z", "uid": "SH9623130", "id.orig_h": "122.204.186.125", "id.orig_p": 24723, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1241, "resp_pkts": 38, "resp_ip_bytes": 2812, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.510704Z", "uid": "SH2389742", "id.orig_h": "74.165.131.224", "id.orig_p": 48649, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2592, "resp_pkts": 42, "resp_ip_bytes": 3108, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.510715Z", "uid": "SH6753871", "id.orig_h": "116.149.83.216", "id.orig_p": 52794, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1350, "resp_pkts": 14, "resp_ip_bytes": 854, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510725Z", "uid": "SH8425830", "id.orig_h": "168.154.125.86", "id.orig_p": 37737, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2535, "resp_pkts": 43, "resp_ip_bytes": 2795, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.510735Z", "uid": "SH3120736", "id.orig_h": "191.33.181.155", "id.orig_p": 64976, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1242, "resp_pkts": 32, "resp_ip_bytes": 2304, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.510747Z", "uid": "SH1578783", "id.orig_h": "173.53.0.82", "id.orig_p": 61583, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1530, "resp_pkts": 45, "resp_ip_bytes": 2250, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.510758Z", "uid": "SH6578676", "id.orig_h": "110.177.195.150", "id.orig_p": 10250, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3555, "resp_pkts": 13, "resp_ip_bytes": 702, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.510769Z", "uid": "SH8061198", "id.orig_h": "147.83.99.54", "id.orig_p": 41608, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3285, "resp_pkts": 19, "resp_ip_bytes": 1482, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.510781Z", "uid": "SH5996428", "id.orig_h": "125.123.103.182", "id.orig_p": 35732, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 690, "resp_pkts": 19, "resp_ip_bytes": 1501, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510794Z", "uid": "SH3802331", "id.orig_h": "125.123.103.182", "id.orig_p": 6867, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2000, "resp_pkts": 14, "resp_ip_bytes": 966, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510805Z", "uid": "SH6221141", "id.orig_h": "131.42.117.209", "id.orig_p": 7036, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2400, "resp_pkts": 26, "resp_ip_bytes": 2028, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.510816Z", "uid": "SH4768643", "id.orig_h": "110.177.195.150", "id.orig_p": 58987, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1650, "resp_pkts": 44, "resp_ip_bytes": 1980, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.510826Z", "uid": "SH4255585", "id.orig_h": "83.195.24.226", "id.orig_p": 44263, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2040, "resp_pkts": 39, "resp_ip_bytes": 2535, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.510838Z", "uid": "SH3708827", "id.orig_h": "181.91.226.98", "id.orig_p": 11048, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1518, "resp_pkts": 46, "resp_ip_bytes": 1840, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510849Z", "uid": "SH7164970", "id.orig_h": "191.43.248.137", "id.orig_p": 42847, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2107, "resp_pkts": 32, "resp_ip_bytes": 2176, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.510859Z", "uid": "SH4835099", "id.orig_h": "191.43.248.137", "id.orig_p": 23790, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3450, "resp_pkts": 10, "resp_ip_bytes": 480, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.510871Z", "uid": "SH3937129", "id.orig_h": "25.47.52.197", "id.orig_p": 23844, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2684, "resp_pkts": 32, "resp_ip_bytes": 2272, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.510882Z", "uid": "SH6681952", "id.orig_h": "87.143.23.119", "id.orig_p": 48834, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2291, "resp_pkts": 37, "resp_ip_bytes": 2220, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.510894Z", "uid": "SH2008330", "id.orig_h": "114.126.110.154", "id.orig_p": 64991, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 570, "resp_pkts": 16, "resp_ip_bytes": 672, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.510905Z", "uid": "SH2754745", "id.orig_h": "52.173.49.103", "id.orig_p": 40922, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2205, "resp_pkts": 12, "resp_ip_bytes": 936, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.510916Z", "uid": "SH7373056", "id.orig_h": "116.149.83.216", "id.orig_p": 28208, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3128, "resp_pkts": 34, "resp_ip_bytes": 1428, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510927Z", "uid": "SH2911610", "id.orig_h": "114.126.110.154", "id.orig_p": 12509, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2475, "resp_pkts": 35, "resp_ip_bytes": 2520, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.510942Z", "uid": "SH4174044", "id.orig_h": "212.152.24.209", "id.orig_p": 48446, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 780, "resp_pkts": 22, "resp_ip_bytes": 1584, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.510952Z", "uid": "SH6941262", "id.orig_h": "191.47.156.160", "id.orig_p": 51739, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1824, "resp_pkts": 13, "resp_ip_bytes": 676, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.510963Z", "uid": "SH3328543", "id.orig_h": "171.3.171.165", "id.orig_p": 32485, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1855, "resp_pkts": 44, "resp_ip_bytes": 1804, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.510975Z", "uid": "SH6603637", "id.orig_h": "74.165.131.224", "id.orig_p": 65325, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 473, "resp_pkts": 36, "resp_ip_bytes": 1692, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.510986Z", "uid": "SH5336964", "id.orig_h": "132.199.128.167", "id.orig_p": 12816, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2576, "resp_pkts": 44, "resp_ip_bytes": 2552, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.510997Z", "uid": "SH2309798", "id.orig_h": "131.42.117.209", "id.orig_p": 5622, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1071, "resp_pkts": 11, "resp_ip_bytes": 616, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511008Z", "uid": "SH8910950", "id.orig_h": "83.195.24.226", "id.orig_p": 63166, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2115, "resp_pkts": 49, "resp_ip_bytes": 3381, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511020Z", "uid": "SH8405026", "id.orig_h": "110.16.7.177", "id.orig_p": 22632, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 880, "resp_pkts": 47, "resp_ip_bytes": 2256, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.511030Z", "uid": "SH3932655", "id.orig_h": "191.33.181.155", "id.orig_p": 33253, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1394, "resp_pkts": 20, "resp_ip_bytes": 1580, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511043Z", "uid": "SH2886548", "id.orig_h": "114.126.110.154", "id.orig_p": 46268, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2450, "resp_pkts": 26, "resp_ip_bytes": 1794, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.511056Z", "uid": "SH9105975", "id.orig_h": "132.199.128.167", "id.orig_p": 9761, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2310, "resp_pkts": 30, "resp_ip_bytes": 1890, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.511069Z", "uid": "SH5458351", "id.orig_h": "52.173.49.103", "id.orig_p": 55260, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2646, "resp_pkts": 31, "resp_ip_bytes": 2232, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.511080Z", "uid": "SH6065325", "id.orig_h": "52.173.49.103", "id.orig_p": 41469, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 590, "resp_pkts": 40, "resp_ip_bytes": 2680, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.511092Z", "uid": "SH7468588", "id.orig_h": "212.152.24.209", "id.orig_p": 48476, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3478, "resp_pkts": 39, "resp_ip_bytes": 1599, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511103Z", "uid": "SH8759563", "id.orig_h": "74.165.131.224", "id.orig_p": 5094, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2070, "resp_pkts": 17, "resp_ip_bytes": 816, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.511114Z", "uid": "SH1674737", "id.orig_h": "105.236.211.106", "id.orig_p": 65388, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1452, "resp_pkts": 15, "resp_ip_bytes": 1170, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.511124Z", "uid": "SH2195868", "id.orig_h": "191.33.181.155", "id.orig_p": 18348, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2401, "resp_pkts": 40, "resp_ip_bytes": 2960, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511136Z", "uid": "SH4153248", "id.orig_h": "171.3.171.165", "id.orig_p": 58266, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1265, "resp_pkts": 14, "resp_ip_bytes": 1092, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.511146Z", "uid": "SH9268691", "id.orig_h": "135.55.210.223", "id.orig_p": 61138, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1998, "resp_pkts": 42, "resp_ip_bytes": 2226, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.511158Z", "uid": "SH7527174", "id.orig_h": "191.43.248.137", "id.orig_p": 55309, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1599, "resp_pkts": 48, "resp_ip_bytes": 2592, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.511170Z", "uid": "SH5248425", "id.orig_h": "116.149.83.216", "id.orig_p": 23419, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1887, "resp_pkts": 10, "resp_ip_bytes": 610, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.511182Z", "uid": "SH9257378", "id.orig_h": "113.173.136.4", "id.orig_p": 17868, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1353, "resp_pkts": 31, "resp_ip_bytes": 1984, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511193Z", "uid": "SH3762601", "id.orig_h": "78.164.1.207", "id.orig_p": 45515, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2772, "resp_pkts": 14, "resp_ip_bytes": 658, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.511205Z", "uid": "SH1339782", "id.orig_h": "78.164.1.207", "id.orig_p": 32673, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3479, "resp_pkts": 39, "resp_ip_bytes": 1638, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.511215Z", "uid": "SH6226323", "id.orig_h": "168.154.125.86", "id.orig_p": 57656, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1488, "resp_pkts": 41, "resp_ip_bytes": 1845, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.511226Z", "uid": "SH5684866", "id.orig_h": "110.177.195.150", "id.orig_p": 29886, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2442, "resp_pkts": 44, "resp_ip_bytes": 3256, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.511237Z", "uid": "SH5351630", "id.orig_h": "31.184.137.182", "id.orig_p": 43824, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2700, "resp_pkts": 44, "resp_ip_bytes": 2596, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511249Z", "uid": "SH4793640", "id.orig_h": "168.154.125.86", "id.orig_p": 57484, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2520, "resp_pkts": 24, "resp_ip_bytes": 1152, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.511261Z", "uid": "SH2985183", "id.orig_h": "170.86.212.161", "id.orig_p": 20375, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2183, "resp_pkts": 36, "resp_ip_bytes": 2412, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511274Z", "uid": "SH6518469", "id.orig_h": "191.33.181.155", "id.orig_p": 9468, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1519, "resp_pkts": 18, "resp_ip_bytes": 1278, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511285Z", "uid": "SH2208487", "id.orig_h": "135.55.210.223", "id.orig_p": 46699, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 2028, "resp_pkts": 18, "resp_ip_bytes": 720, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.511313Z", "uid": "SH1010841", "id.orig_h": "4.224.23.39", "id.orig_p": 50532, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1349, "resp_pkts": 44, "resp_ip_bytes": 2816, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.511325Z", "uid": "SH3987549", "id.orig_h": "164.89.50.183", "id.orig_p": 40452, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3588, "resp_pkts": 33, "resp_ip_bytes": 1617, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.511336Z", "uid": "SH5253592", "id.orig_h": "114.56.126.152", "id.orig_p": 50007, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1148, "resp_pkts": 29, "resp_ip_bytes": 1305, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.511348Z", "uid": "SH6639972", "id.orig_h": "74.146.111.155", "id.orig_p": 58185, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1566, "resp_pkts": 37, "resp_ip_bytes": 2627, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.511359Z", "uid": "SH9614717", "id.orig_h": "197.168.76.169", "id.orig_p": 34134, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1682, "resp_pkts": 23, "resp_ip_bytes": 1288, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.511370Z", "uid": "SH5586634", "id.orig_h": "125.19.151.3", "id.orig_p": 20924, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1584, "resp_pkts": 12, "resp_ip_bytes": 492, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.511381Z", "uid": "SH9413137", "id.orig_h": "173.53.0.82", "id.orig_p": 19492, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1530, "resp_pkts": 15, "resp_ip_bytes": 1110, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.511392Z", "uid": "SH7003880", "id.orig_h": "4.5.47.4", "id.orig_p": 6041, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2211, "resp_pkts": 39, "resp_ip_bytes": 1716, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.511404Z", "uid": "SH7660089", "id.orig_h": "171.204.144.93", "id.orig_p": 60399, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 473, "resp_pkts": 31, "resp_ip_bytes": 1612, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.511417Z", "uid": "SH4469145", "id.orig_h": "171.204.144.93", "id.orig_p": 61445, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2842, "resp_pkts": 48, "resp_ip_bytes": 2352, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.511428Z", "uid": "SH3937696", "id.orig_h": "34.243.90.209", "id.orig_p": 28744, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2816, "resp_pkts": 49, "resp_ip_bytes": 2499, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511440Z", "uid": "SH4743031", "id.orig_h": "212.152.24.209", "id.orig_p": 54628, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2356, "resp_pkts": 31, "resp_ip_bytes": 2139, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511452Z", "uid": "SH9922770", "id.orig_h": "168.154.125.86", "id.orig_p": 51734, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 969, "resp_pkts": 13, "resp_ip_bytes": 988, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.511463Z", "uid": "SH4575541", "id.orig_h": "114.126.110.154", "id.orig_p": 55417, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1640, "resp_pkts": 31, "resp_ip_bytes": 2356, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.511474Z", "uid": "SH1957866", "id.orig_h": "191.43.248.137", "id.orig_p": 27503, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 1001, "resp_pkts": 44, "resp_ip_bytes": 2068, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.511484Z", "uid": "SH1153285", "id.orig_h": "83.195.24.226", "id.orig_p": 22479, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 680, "resp_pkts": 50, "resp_ip_bytes": 3400, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511495Z", "uid": "SH3016443", "id.orig_h": "135.176.100.83", "id.orig_p": 21641, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1360, "resp_pkts": 40, "resp_ip_bytes": 2520, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.511507Z", "uid": "SH3523037", "id.orig_h": "132.199.128.167", "id.orig_p": 5516, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1679, "resp_pkts": 25, "resp_ip_bytes": 1425, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.511518Z", "uid": "SH7572842", "id.orig_h": "132.180.149.17", "id.orig_p": 57355, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1134, "resp_pkts": 10, "resp_ip_bytes": 400, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.511530Z", "uid": "SH5220328", "id.orig_h": "83.195.24.226", "id.orig_p": 4846, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2684, "resp_pkts": 35, "resp_ip_bytes": 1470, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511542Z", "uid": "SH8896415", "id.orig_h": "164.89.50.183", "id.orig_p": 21110, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3588, "resp_pkts": 18, "resp_ip_bytes": 1116, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.511750Z", "uid": "SH8399969", "id.orig_h": "212.152.24.209", "id.orig_p": 34312, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3600, "resp_pkts": 34, "resp_ip_bytes": 2142, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511762Z", "uid": "SH3080443", "id.orig_h": "111.129.222.243", "id.orig_p": 46336, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1426, "resp_pkts": 46, "resp_ip_bytes": 3404, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511781Z", "uid": "SH4435622", "id.orig_h": "173.53.0.82", "id.orig_p": 17099, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 690, "resp_pkts": 47, "resp_ip_bytes": 2726, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.511793Z", "uid": "SH5805762", "id.orig_h": "25.47.52.197", "id.orig_p": 28321, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 780, "resp_pkts": 42, "resp_ip_bytes": 2898, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.511804Z", "uid": "SH6606362", "id.orig_h": "131.42.117.209", "id.orig_p": 11876, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1334, "resp_pkts": 39, "resp_ip_bytes": 2847, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511814Z", "uid": "SH5191535", "id.orig_h": "87.143.23.119", "id.orig_p": 34265, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2982, "resp_pkts": 36, "resp_ip_bytes": 2448, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.511824Z", "uid": "SH4577623", "id.orig_h": "212.152.24.209", "id.orig_p": 60378, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2806, "resp_pkts": 16, "resp_ip_bytes": 944, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511835Z", "uid": "SH3541619", "id.orig_h": "4.224.23.39", "id.orig_p": 35093, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1680, "resp_pkts": 33, "resp_ip_bytes": 2013, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.511845Z", "uid": "SH5662735", "id.orig_h": "34.243.90.209", "id.orig_p": 40873, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 960, "resp_pkts": 15, "resp_ip_bytes": 1125, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.511856Z", "uid": "SH7323781", "id.orig_h": "171.3.171.165", "id.orig_p": 56568, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 833, "resp_pkts": 24, "resp_ip_bytes": 1800, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.511867Z", "uid": "SH7804147", "id.orig_h": "113.173.136.4", "id.orig_p": 38116, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1830, "resp_pkts": 39, "resp_ip_bytes": 2340, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511882Z", "uid": "SH1331802", "id.orig_h": "159.193.183.0", "id.orig_p": 8538, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3300, "resp_pkts": 37, "resp_ip_bytes": 1480, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.511893Z", "uid": "SH1822684", "id.orig_h": "181.91.226.98", "id.orig_p": 34236, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2623, "resp_pkts": 24, "resp_ip_bytes": 1776, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.511903Z", "uid": "SH4920632", "id.orig_h": "191.33.181.155", "id.orig_p": 5480, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 1022, "resp_pkts": 12, "resp_ip_bytes": 792, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511914Z", "uid": "SH8934624", "id.orig_h": "132.180.149.17", "id.orig_p": 11954, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2132, "resp_pkts": 46, "resp_ip_bytes": 2760, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.511926Z", "uid": "SH3519313", "id.orig_h": "83.195.24.226", "id.orig_p": 65040, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1140, "resp_pkts": 18, "resp_ip_bytes": 1224, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511937Z", "uid": "SH5779909", "id.orig_h": "113.173.136.4", "id.orig_p": 40019, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1575, "resp_pkts": 45, "resp_ip_bytes": 1800, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.511948Z", "uid": "SH4072520", "id.orig_h": "83.195.24.226", "id.orig_p": 30631, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3350, "resp_pkts": 34, "resp_ip_bytes": 1802, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.511959Z", "uid": "SH4903009", "id.orig_h": "4.224.23.39", "id.orig_p": 42199, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 768, "resp_pkts": 13, "resp_ip_bytes": 702, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.511970Z", "uid": "SH6151293", "id.orig_h": "122.204.186.125", "id.orig_p": 56287, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 550, "resp_pkts": 35, "resp_ip_bytes": 1750, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.511985Z", "uid": "SH9425569", "id.orig_h": "74.146.111.155", "id.orig_p": 3543, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1480, "resp_pkts": 32, "resp_ip_bytes": 1440, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.511997Z", "uid": "SH5273394", "id.orig_h": "173.53.0.82", "id.orig_p": 52170, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1620, "resp_pkts": 37, "resp_ip_bytes": 1628, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.512008Z", "uid": "SH2375082", "id.orig_h": "173.53.0.82", "id.orig_p": 21598, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1872, "resp_pkts": 39, "resp_ip_bytes": 2418, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.512021Z", "uid": "SH9070445", "id.orig_h": "135.55.210.223", "id.orig_p": 48424, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 3157, "resp_pkts": 13, "resp_ip_bytes": 975, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.512032Z", "uid": "SH2798792", "id.orig_h": "105.236.211.106", "id.orig_p": 17013, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 616, "resp_pkts": 17, "resp_ip_bytes": 1224, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512044Z", "uid": "SH8572562", "id.orig_h": "129.164.50.72", "id.orig_p": 60772, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2162, "resp_pkts": 30, "resp_ip_bytes": 1200, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.512055Z", "uid": "SH3540060", "id.orig_h": "78.164.1.207", "id.orig_p": 62821, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1976, "resp_pkts": 40, "resp_ip_bytes": 3040, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512066Z", "uid": "SH3747072", "id.orig_h": "87.143.23.119", "id.orig_p": 9123, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2145, "resp_pkts": 38, "resp_ip_bytes": 2812, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512077Z", "uid": "SH7273101", "id.orig_h": "135.176.100.83", "id.orig_p": 31072, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2438, "resp_pkts": 11, "resp_ip_bytes": 550, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.512093Z", "uid": "SH9251695", "id.orig_h": "122.204.186.125", "id.orig_p": 43264, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 630, "resp_pkts": 27, "resp_ip_bytes": 1755, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512104Z", "uid": "SH7241449", "id.orig_h": "102.213.11.119", "id.orig_p": 33685, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 768, "resp_pkts": 38, "resp_ip_bytes": 1710, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.512116Z", "uid": "SH4419606", "id.orig_h": "52.173.49.103", "id.orig_p": 43973, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3008, "resp_pkts": 43, "resp_ip_bytes": 3139, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.512127Z", "uid": "SH6676163", "id.orig_h": "164.89.50.183", "id.orig_p": 21221, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1260, "resp_pkts": 12, "resp_ip_bytes": 732, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512138Z", "uid": "SH7474776", "id.orig_h": "191.47.156.160", "id.orig_p": 21010, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1196, "resp_pkts": 22, "resp_ip_bytes": 1584, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512149Z", "uid": "SH3570128", "id.orig_h": "196.134.79.79", "id.orig_p": 8922, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1098, "resp_pkts": 19, "resp_ip_bytes": 1140, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.512160Z", "uid": "SH6988837", "id.orig_h": "122.204.186.125", "id.orig_p": 8122, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3196, "resp_pkts": 28, "resp_ip_bytes": 1568, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512170Z", "uid": "SH5566625", "id.orig_h": "105.236.211.106", "id.orig_p": 13870, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3182, "resp_pkts": 18, "resp_ip_bytes": 972, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512181Z", "uid": "SH7484294", "id.orig_h": "172.197.112.108", "id.orig_p": 50344, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1394, "resp_pkts": 10, "resp_ip_bytes": 760, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.512196Z", "uid": "SH8460050", "id.orig_h": "173.53.0.82", "id.orig_p": 34718, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 915, "resp_pkts": 31, "resp_ip_bytes": 1395, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.512207Z", "uid": "SH5769626", "id.orig_h": "87.143.23.119", "id.orig_p": 7819, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2322, "resp_pkts": 39, "resp_ip_bytes": 1950, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512218Z", "uid": "SH4577412", "id.orig_h": "196.134.79.79", "id.orig_p": 53786, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2844, "resp_pkts": 24, "resp_ip_bytes": 1104, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.512230Z", "uid": "SH6708394", "id.orig_h": "105.236.211.106", "id.orig_p": 5208, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1155, "resp_pkts": 22, "resp_ip_bytes": 1078, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512241Z", "uid": "SH7651933", "id.orig_h": "129.164.50.72", "id.orig_p": 26983, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 680, "resp_pkts": 40, "resp_ip_bytes": 1600, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.512252Z", "uid": "SH7868638", "id.orig_h": "110.177.195.150", "id.orig_p": 60436, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 854, "resp_pkts": 44, "resp_ip_bytes": 2068, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.512264Z", "uid": "SH3220489", "id.orig_h": "212.152.24.209", "id.orig_p": 9617, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1210, "resp_pkts": 29, "resp_ip_bytes": 1305, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.512275Z", "uid": "SH2040883", "id.orig_h": "171.204.144.93", "id.orig_p": 19656, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 638, "resp_pkts": 43, "resp_ip_bytes": 2064, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.512286Z", "uid": "SH7931381", "id.orig_h": "4.224.23.39", "id.orig_p": 65094, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1350, "resp_pkts": 12, "resp_ip_bytes": 696, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512302Z", "uid": "SH5740650", "id.orig_h": "191.47.156.160", "id.orig_p": 54580, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3053, "resp_pkts": 43, "resp_ip_bytes": 2107, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512314Z", "uid": "SH8947375", "id.orig_h": "34.243.90.209", "id.orig_p": 29641, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1633, "resp_pkts": 22, "resp_ip_bytes": 1628, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.512324Z", "uid": "SH3306485", "id.orig_h": "125.19.151.3", "id.orig_p": 54018, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1482, "resp_pkts": 33, "resp_ip_bytes": 2376, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512335Z", "uid": "SH7739393", "id.orig_h": "132.199.128.167", "id.orig_p": 49405, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1672, "resp_pkts": 49, "resp_ip_bytes": 2842, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512346Z", "uid": "SH1348531", "id.orig_h": "4.5.47.4", "id.orig_p": 31742, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2700, "resp_pkts": 24, "resp_ip_bytes": 1320, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512358Z", "uid": "SH2673341", "id.orig_h": "122.204.186.125", "id.orig_p": 45948, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 735, "resp_pkts": 22, "resp_ip_bytes": 1078, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512369Z", "uid": "SH2795064", "id.orig_h": "132.180.149.17", "id.orig_p": 21815, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2107, "resp_pkts": 42, "resp_ip_bytes": 1722, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.512380Z", "uid": "SH4207530", "id.orig_h": "116.149.83.216", "id.orig_p": 50480, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 2240, "resp_pkts": 38, "resp_ip_bytes": 1824, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512393Z", "uid": "SH7071530", "id.orig_h": "191.33.181.155", "id.orig_p": 15723, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 912, "resp_pkts": 28, "resp_ip_bytes": 1260, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.512408Z", "uid": "SH1494173", "id.orig_h": "74.146.111.155", "id.orig_p": 24691, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2178, "resp_pkts": 11, "resp_ip_bytes": 506, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.512419Z", "uid": "SH4372445", "id.orig_h": "171.204.144.93", "id.orig_p": 36561, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1782, "resp_pkts": 40, "resp_ip_bytes": 2280, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.512430Z", "uid": "SH6432252", "id.orig_h": "172.197.112.108", "id.orig_p": 40419, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1512, "resp_pkts": 45, "resp_ip_bytes": 2655, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.512442Z", "uid": "SH3773823", "id.orig_h": "135.176.100.83", "id.orig_p": 32788, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2415, "resp_pkts": 22, "resp_ip_bytes": 1232, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.512454Z", "uid": "SH4495789", "id.orig_h": "135.55.210.223", "id.orig_p": 51207, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 560, "resp_pkts": 47, "resp_ip_bytes": 3713, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.512466Z", "uid": "SH3153099", "id.orig_h": "105.236.211.106", "id.orig_p": 15660, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 768, "resp_pkts": 13, "resp_ip_bytes": 949, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512477Z", "uid": "SH8729871", "id.orig_h": "135.55.210.223", "id.orig_p": 37837, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1760, "resp_pkts": 17, "resp_ip_bytes": 799, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.512490Z", "uid": "SH5106040", "id.orig_h": "78.164.1.207", "id.orig_p": 8747, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1056, "resp_pkts": 11, "resp_ip_bytes": 814, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512500Z", "uid": "SH3904920", "id.orig_h": "181.91.226.98", "id.orig_p": 63531, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2448, "resp_pkts": 46, "resp_ip_bytes": 3036, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.512511Z", "uid": "SH4363719", "id.orig_h": "4.224.23.39", "id.orig_p": 60918, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1824, "resp_pkts": 42, "resp_ip_bytes": 2016, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512529Z", "uid": "SH4984527", "id.orig_h": "170.86.212.161", "id.orig_p": 35831, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2542, "resp_pkts": 47, "resp_ip_bytes": 3572, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.512540Z", "uid": "SH4471305", "id.orig_h": "171.204.144.93", "id.orig_p": 43935, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2847, "resp_pkts": 31, "resp_ip_bytes": 1798, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.512551Z", "uid": "SH7872175", "id.orig_h": "116.149.83.216", "id.orig_p": 7593, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 816, "resp_pkts": 21, "resp_ip_bytes": 1596, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512561Z", "uid": "SH3465496", "id.orig_h": "122.204.186.125", "id.orig_p": 43622, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 989, "resp_pkts": 25, "resp_ip_bytes": 1100, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512572Z", "uid": "SH4846962", "id.orig_h": "116.149.83.216", "id.orig_p": 65023, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 1036, "resp_pkts": 39, "resp_ip_bytes": 2925, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512583Z", "uid": "SH2396652", "id.orig_h": "74.146.111.155", "id.orig_p": 7650, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 765, "resp_pkts": 33, "resp_ip_bytes": 2343, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.512594Z", "uid": "SH4424764", "id.orig_h": "164.89.50.183", "id.orig_p": 11054, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2928, "resp_pkts": 40, "resp_ip_bytes": 2160, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512606Z", "uid": "SH8587331", "id.orig_h": "197.168.76.169", "id.orig_p": 54374, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1652, "resp_pkts": 41, "resp_ip_bytes": 2501, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512616Z", "uid": "SH7722396", "id.orig_h": "116.149.83.216", "id.orig_p": 48165, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3024, "resp_pkts": 17, "resp_ip_bytes": 867, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512632Z", "uid": "SH8863479", "id.orig_h": "159.193.183.0", "id.orig_p": 64771, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2016, "resp_pkts": 29, "resp_ip_bytes": 2204, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512645Z", "uid": "SH5360586", "id.orig_h": "191.47.156.160", "id.orig_p": 39381, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1320, "resp_pkts": 38, "resp_ip_bytes": 2470, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.512655Z", "uid": "SH2570923", "id.orig_h": "34.243.90.209", "id.orig_p": 9892, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2144, "resp_pkts": 24, "resp_ip_bytes": 1824, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.512666Z", "uid": "SH1756094", "id.orig_h": "110.177.195.150", "id.orig_p": 18754, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 660, "resp_pkts": 36, "resp_ip_bytes": 2232, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.512676Z", "uid": "SH7673893", "id.orig_h": "159.193.183.0", "id.orig_p": 57791, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1656, "resp_pkts": 36, "resp_ip_bytes": 1944, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512687Z", "uid": "SH7892584", "id.orig_h": "135.55.210.223", "id.orig_p": 10345, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1272, "resp_pkts": 49, "resp_ip_bytes": 3381, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.512698Z", "uid": "SH7414198", "id.orig_h": "122.204.186.125", "id.orig_p": 51506, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2774, "resp_pkts": 48, "resp_ip_bytes": 2160, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.512709Z", "uid": "SH4396460", "id.orig_h": "4.224.23.39", "id.orig_p": 3564, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1610, "resp_pkts": 23, "resp_ip_bytes": 1518, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512720Z", "uid": "SH2650904", "id.orig_h": "125.123.103.182", "id.orig_p": 22198, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2750, "resp_pkts": 18, "resp_ip_bytes": 1350, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.512734Z", "uid": "SH4734605", "id.orig_h": "171.3.171.165", "id.orig_p": 8242, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2553, "resp_pkts": 22, "resp_ip_bytes": 1188, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512745Z", "uid": "SH7154032", "id.orig_h": "147.83.99.54", "id.orig_p": 30490, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3149, "resp_pkts": 15, "resp_ip_bytes": 930, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.512757Z", "uid": "SH1378277", "id.orig_h": "105.236.211.106", "id.orig_p": 15385, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2990, "resp_pkts": 22, "resp_ip_bytes": 1430, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512769Z", "uid": "SH1311730", "id.orig_h": "25.47.52.197", "id.orig_p": 40226, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1430, "resp_pkts": 37, "resp_ip_bytes": 1591, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512780Z", "uid": "SH4893219", "id.orig_h": "171.3.171.165", "id.orig_p": 38974, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2108, "resp_pkts": 17, "resp_ip_bytes": 1326, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512791Z", "uid": "SH1355867", "id.orig_h": "135.55.210.223", "id.orig_p": 12881, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2380, "resp_pkts": 41, "resp_ip_bytes": 2173, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.512801Z", "uid": "SH3714610", "id.orig_h": "87.143.23.119", "id.orig_p": 21105, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1311, "resp_pkts": 11, "resp_ip_bytes": 451, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512812Z", "uid": "SH2268376", "id.orig_h": "132.180.149.17", "id.orig_p": 58979, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1917, "resp_pkts": 18, "resp_ip_bytes": 846, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.512822Z", "uid": "SH4479652", "id.orig_h": "171.3.171.165", "id.orig_p": 64067, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 768, "resp_pkts": 11, "resp_ip_bytes": 693, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512838Z", "uid": "SH4032540", "id.orig_h": "52.173.49.103", "id.orig_p": 28597, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3102, "resp_pkts": 11, "resp_ip_bytes": 836, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.512851Z", "uid": "SH1119940", "id.orig_h": "4.224.23.39", "id.orig_p": 62353, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1380, "resp_pkts": 26, "resp_ip_bytes": 1508, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512861Z", "uid": "SH9030091", "id.orig_h": "212.152.24.209", "id.orig_p": 5087, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1700, "resp_pkts": 13, "resp_ip_bytes": 585, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.512873Z", "uid": "SH1400591", "id.orig_h": "135.55.210.223", "id.orig_p": 3851, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1485, "resp_pkts": 30, "resp_ip_bytes": 1320, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.512883Z", "uid": "SH8688008", "id.orig_h": "216.10.117.99", "id.orig_p": 64271, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1690, "resp_pkts": 16, "resp_ip_bytes": 1056, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.512894Z", "uid": "SH5025525", "id.orig_h": "159.193.183.0", "id.orig_p": 30691, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1980, "resp_pkts": 18, "resp_ip_bytes": 756, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512906Z", "uid": "SH2056919", "id.orig_h": "110.16.7.177", "id.orig_p": 21623, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1075, "resp_pkts": 36, "resp_ip_bytes": 2484, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.512917Z", "uid": "SH6812378", "id.orig_h": "136.169.203.247", "id.orig_p": 18751, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1855, "resp_pkts": 47, "resp_ip_bytes": 2209, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.512927Z", "uid": "SH7974097", "id.orig_h": "25.47.52.197", "id.orig_p": 50098, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2380, "resp_pkts": 39, "resp_ip_bytes": 2886, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.512942Z", "uid": "SH2043673", "id.orig_h": "116.149.83.216", "id.orig_p": 63192, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2584, "resp_pkts": 16, "resp_ip_bytes": 976, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.512955Z", "uid": "SH1079864", "id.orig_h": "132.199.128.167", "id.orig_p": 18441, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 1840, "resp_pkts": 31, "resp_ip_bytes": 2077, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.512965Z", "uid": "SH9983614", "id.orig_h": "147.83.99.54", "id.orig_p": 19223, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2162, "resp_pkts": 46, "resp_ip_bytes": 3220, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.512976Z", "uid": "SH7949473", "id.orig_h": "171.204.144.93", "id.orig_p": 7949, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1568, "resp_pkts": 11, "resp_ip_bytes": 682, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.512987Z", "uid": "SH9002157", "id.orig_h": "196.134.79.79", "id.orig_p": 43214, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 1845, "resp_pkts": 15, "resp_ip_bytes": 1200, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.512998Z", "uid": "SH3640505", "id.orig_h": "171.204.144.93", "id.orig_p": 7868, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1206, "resp_pkts": 32, "resp_ip_bytes": 2144, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.513008Z", "uid": "SH4715828", "id.orig_h": "197.168.76.169", "id.orig_p": 26475, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1736, "resp_pkts": 49, "resp_ip_bytes": 2499, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513020Z", "uid": "SH3696712", "id.orig_h": "113.173.136.4", "id.orig_p": 42333, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2250, "resp_pkts": 25, "resp_ip_bytes": 1250, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513032Z", "uid": "SH7415628", "id.orig_h": "172.197.112.108", "id.orig_p": 52364, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3100, "resp_pkts": 43, "resp_ip_bytes": 3053, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.513047Z", "uid": "SH5553037", "id.orig_h": "34.243.90.209", "id.orig_p": 49202, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1675, "resp_pkts": 50, "resp_ip_bytes": 2900, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.513058Z", "uid": "SH1153683", "id.orig_h": "114.56.126.152", "id.orig_p": 26492, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 770, "resp_pkts": 18, "resp_ip_bytes": 792, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513068Z", "uid": "SH2811795", "id.orig_h": "168.154.125.86", "id.orig_p": 11544, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1701, "resp_pkts": 44, "resp_ip_bytes": 1980, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.513079Z", "uid": "SH9414160", "id.orig_h": "171.204.144.93", "id.orig_p": 49884, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2196, "resp_pkts": 13, "resp_ip_bytes": 780, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.513093Z", "uid": "SH7918043", "id.orig_h": "111.129.222.243", "id.orig_p": 28885, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1680, "resp_pkts": 47, "resp_ip_bytes": 2350, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513103Z", "uid": "SH1902660", "id.orig_h": "135.55.210.223", "id.orig_p": 54889, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1232, "resp_pkts": 30, "resp_ip_bytes": 1290, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.513114Z", "uid": "SH9610700", "id.orig_h": "105.236.211.106", "id.orig_p": 36125, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2555, "resp_pkts": 26, "resp_ip_bytes": 1612, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.513125Z", "uid": "SH7151434", "id.orig_h": "83.195.24.226", "id.orig_p": 35321, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2139, "resp_pkts": 25, "resp_ip_bytes": 1600, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513137Z", "uid": "SH9139496", "id.orig_h": "147.83.99.54", "id.orig_p": 31129, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2064, "resp_pkts": 46, "resp_ip_bytes": 3496, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.513153Z", "uid": "SH3210410", "id.orig_h": "136.169.203.247", "id.orig_p": 33356, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2254, "resp_pkts": 48, "resp_ip_bytes": 3264, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.513163Z", "uid": "SH5134092", "id.orig_h": "87.143.23.119", "id.orig_p": 28755, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2160, "resp_pkts": 27, "resp_ip_bytes": 1782, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.513174Z", "uid": "SH1316908", "id.orig_h": "114.56.126.152", "id.orig_p": 47938, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 611, "resp_pkts": 50, "resp_ip_bytes": 3400, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513186Z", "uid": "SH9622582", "id.orig_h": "135.176.100.83", "id.orig_p": 43424, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1274, "resp_pkts": 35, "resp_ip_bytes": 1680, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.513196Z", "uid": "SH3833649", "id.orig_h": "135.176.100.83", "id.orig_p": 17738, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 900, "resp_pkts": 15, "resp_ip_bytes": 1065, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.513206Z", "uid": "SH8882799", "id.orig_h": "212.152.24.209", "id.orig_p": 17275, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1617, "resp_pkts": 47, "resp_ip_bytes": 3619, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.513217Z", "uid": "SH7292953", "id.orig_h": "105.236.211.106", "id.orig_p": 17899, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1840, "resp_pkts": 25, "resp_ip_bytes": 1975, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.513230Z", "uid": "SH8645000", "id.orig_h": "197.168.76.169", "id.orig_p": 26413, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2254, "resp_pkts": 38, "resp_ip_bytes": 2812, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513240Z", "uid": "SH1633179", "id.orig_h": "116.149.83.216", "id.orig_p": 29028, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 828, "resp_pkts": 39, "resp_ip_bytes": 2145, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.513250Z", "uid": "SH8901834", "id.orig_h": "102.213.11.119", "id.orig_p": 39623, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1776, "resp_pkts": 44, "resp_ip_bytes": 2376, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.513264Z", "uid": "SH8317824", "id.orig_h": "197.168.76.169", "id.orig_p": 6005, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 645, "resp_pkts": 10, "resp_ip_bytes": 470, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513276Z", "uid": "SH3552043", "id.orig_h": "122.204.186.125", "id.orig_p": 23584, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 966, "resp_pkts": 44, "resp_ip_bytes": 3036, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513287Z", "uid": "SH1184132", "id.orig_h": "74.165.131.224", "id.orig_p": 10970, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2420, "resp_pkts": 30, "resp_ip_bytes": 2220, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.513300Z", "uid": "SH7074729", "id.orig_h": "74.165.131.224", "id.orig_p": 9873, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2508, "resp_pkts": 39, "resp_ip_bytes": 2496, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.513311Z", "uid": "SH7349896", "id.orig_h": "111.129.222.243", "id.orig_p": 59998, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1464, "resp_pkts": 36, "resp_ip_bytes": 2232, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513326Z", "uid": "SH4596044", "id.orig_h": "172.197.112.108", "id.orig_p": 54088, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1484, "resp_pkts": 28, "resp_ip_bytes": 1736, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.513337Z", "uid": "SH3559517", "id.orig_h": "52.173.49.103", "id.orig_p": 26630, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2211, "resp_pkts": 41, "resp_ip_bytes": 2542, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.513347Z", "uid": "SH3014231", "id.orig_h": "129.164.50.72", "id.orig_p": 32579, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 945, "resp_pkts": 39, "resp_ip_bytes": 2301, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513359Z", "uid": "SH3842857", "id.orig_h": "191.33.181.155", "id.orig_p": 45664, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2162, "resp_pkts": 17, "resp_ip_bytes": 833, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513374Z", "uid": "SH6252074", "id.orig_h": "191.33.181.155", "id.orig_p": 29762, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 825, "resp_pkts": 25, "resp_ip_bytes": 1325, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513385Z", "uid": "SH9885392", "id.orig_h": "191.33.181.155", "id.orig_p": 58627, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2400, "resp_pkts": 31, "resp_ip_bytes": 1643, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513396Z", "uid": "SH8026451", "id.orig_h": "116.149.83.216", "id.orig_p": 58403, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3168, "resp_pkts": 24, "resp_ip_bytes": 1632, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.513406Z", "uid": "SH6802408", "id.orig_h": "136.169.203.247", "id.orig_p": 20656, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1680, "resp_pkts": 34, "resp_ip_bytes": 1360, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.513419Z", "uid": "SH9701163", "id.orig_h": "23.111.149.52", "id.orig_p": 28607, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2021, "resp_pkts": 27, "resp_ip_bytes": 1836, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.513430Z", "uid": "SH7294690", "id.orig_h": "34.243.90.209", "id.orig_p": 46510, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1794, "resp_pkts": 25, "resp_ip_bytes": 1900, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.513440Z", "uid": "SH4288157", "id.orig_h": "87.143.23.119", "id.orig_p": 48813, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2640, "resp_pkts": 22, "resp_ip_bytes": 1144, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.513452Z", "uid": "SH2952711", "id.orig_h": "206.121.122.80", "id.orig_p": 28740, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2112, "resp_pkts": 17, "resp_ip_bytes": 816, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513463Z", "uid": "SH9891000", "id.orig_h": "170.86.212.161", "id.orig_p": 49912, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2541, "resp_pkts": 28, "resp_ip_bytes": 1568, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513477Z", "uid": "SH1295061", "id.orig_h": "114.56.126.152", "id.orig_p": 58324, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3552, "resp_pkts": 22, "resp_ip_bytes": 1188, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513488Z", "uid": "SH5784421", "id.orig_h": "164.89.50.183", "id.orig_p": 2542, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 935, "resp_pkts": 18, "resp_ip_bytes": 918, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.513500Z", "uid": "SH4801839", "id.orig_h": "159.193.183.0", "id.orig_p": 44196, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1792, "resp_pkts": 36, "resp_ip_bytes": 2412, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.513513Z", "uid": "SH3945836", "id.orig_h": "191.43.248.137", "id.orig_p": 24162, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 704, "resp_pkts": 39, "resp_ip_bytes": 1560, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.513524Z", "uid": "SH9220684", "id.orig_h": "23.111.149.52", "id.orig_p": 45703, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1971, "resp_pkts": 25, "resp_ip_bytes": 1325, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.513536Z", "uid": "SH7002555", "id.orig_h": "125.19.151.3", "id.orig_p": 25795, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 760, "resp_pkts": 28, "resp_ip_bytes": 1288, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.513546Z", "uid": "SH2211556", "id.orig_h": "132.180.149.17", "id.orig_p": 61962, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2340, "resp_pkts": 26, "resp_ip_bytes": 1820, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.513558Z", "uid": "SH1874868", "id.orig_h": "110.177.195.150", "id.orig_p": 45235, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2183, "resp_pkts": 23, "resp_ip_bytes": 1242, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.513568Z", "uid": "SH2157269", "id.orig_h": "206.121.122.80", "id.orig_p": 49905, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2655, "resp_pkts": 42, "resp_ip_bytes": 1680, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513583Z", "uid": "SH7750659", "id.orig_h": "206.121.122.80", "id.orig_p": 28025, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 784, "resp_pkts": 38, "resp_ip_bytes": 1786, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513594Z", "uid": "SH3149007", "id.orig_h": "173.53.0.82", "id.orig_p": 65153, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 1155, "resp_pkts": 50, "resp_ip_bytes": 2200, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513605Z", "uid": "SH1296973", "id.orig_h": "136.169.203.247", "id.orig_p": 60700, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1692, "resp_pkts": 42, "resp_ip_bytes": 2436, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.513630Z", "uid": "SH3497428", "id.orig_h": "122.204.186.125", "id.orig_p": 60984, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 1806, "resp_pkts": 16, "resp_ip_bytes": 1184, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513641Z", "uid": "SH8758052", "id.orig_h": "110.177.195.150", "id.orig_p": 45473, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2064, "resp_pkts": 48, "resp_ip_bytes": 2112, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.513651Z", "uid": "SH2882675", "id.orig_h": "181.91.226.98", "id.orig_p": 45806, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1334, "resp_pkts": 11, "resp_ip_bytes": 814, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.513663Z", "uid": "SH2978856", "id.orig_h": "125.19.151.3", "id.orig_p": 17966, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1035, "resp_pkts": 33, "resp_ip_bytes": 1617, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.513674Z", "uid": "SH4422106", "id.orig_h": "110.177.195.150", "id.orig_p": 49401, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2646, "resp_pkts": 47, "resp_ip_bytes": 2068, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.513685Z", "uid": "SH4222730", "id.orig_h": "83.195.24.226", "id.orig_p": 59609, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1032, "resp_pkts": 47, "resp_ip_bytes": 2961, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513701Z", "uid": "SH1220510", "id.orig_h": "191.43.248.137", "id.orig_p": 44596, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1554, "resp_pkts": 17, "resp_ip_bytes": 867, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.513713Z", "uid": "SH1686576", "id.orig_h": "31.184.137.182", "id.orig_p": 40286, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2640, "resp_pkts": 44, "resp_ip_bytes": 2200, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513724Z", "uid": "SH7172109", "id.orig_h": "31.184.137.182", "id.orig_p": 22338, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1886, "resp_pkts": 35, "resp_ip_bytes": 2100, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513735Z", "uid": "SH8628272", "id.orig_h": "74.165.131.224", "id.orig_p": 13486, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2376, "resp_pkts": 34, "resp_ip_bytes": 2176, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.513746Z", "uid": "SH8537602", "id.orig_h": "102.213.11.119", "id.orig_p": 18042, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 462, "resp_pkts": 27, "resp_ip_bytes": 2106, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.513758Z", "uid": "SH2799328", "id.orig_h": "159.193.183.0", "id.orig_p": 36335, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 944, "resp_pkts": 49, "resp_ip_bytes": 2303, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.513768Z", "uid": "SH9697027", "id.orig_h": "196.134.79.79", "id.orig_p": 41324, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2607, "resp_pkts": 17, "resp_ip_bytes": 1224, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513780Z", "uid": "SH9374275", "id.orig_h": "83.195.24.226", "id.orig_p": 29801, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1710, "resp_pkts": 23, "resp_ip_bytes": 1495, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513791Z", "uid": "SH8817356", "id.orig_h": "25.47.52.197", "id.orig_p": 16643, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2730, "resp_pkts": 31, "resp_ip_bytes": 1488, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.513807Z", "uid": "SH1810086", "id.orig_h": "191.43.248.137", "id.orig_p": 11614, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2772, "resp_pkts": 49, "resp_ip_bytes": 2695, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.513820Z", "uid": "SH9125877", "id.orig_h": "216.10.117.99", "id.orig_p": 13926, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2108, "resp_pkts": 49, "resp_ip_bytes": 3871, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513832Z", "uid": "SH2805795", "id.orig_h": "173.53.0.82", "id.orig_p": 27555, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2960, "resp_pkts": 50, "resp_ip_bytes": 3450, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.513842Z", "uid": "SH8679134", "id.orig_h": "136.169.203.247", "id.orig_p": 27025, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2535, "resp_pkts": 38, "resp_ip_bytes": 1520, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.513852Z", "uid": "SH4260784", "id.orig_h": "168.154.125.86", "id.orig_p": 65521, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1491, "resp_pkts": 27, "resp_ip_bytes": 1971, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.513864Z", "uid": "SH8695644", "id.orig_h": "25.47.52.197", "id.orig_p": 43837, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2665, "resp_pkts": 31, "resp_ip_bytes": 1395, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.513875Z", "uid": "SH6276954", "id.orig_h": "206.121.122.80", "id.orig_p": 41704, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1216, "resp_pkts": 42, "resp_ip_bytes": 2856, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513886Z", "uid": "SH5377886", "id.orig_h": "122.204.186.125", "id.orig_p": 36959, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1368, "resp_pkts": 37, "resp_ip_bytes": 2072, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.513898Z", "uid": "SH4587628", "id.orig_h": "191.33.181.155", "id.orig_p": 47030, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1176, "resp_pkts": 24, "resp_ip_bytes": 1056, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.513916Z", "uid": "SH1868891", "id.orig_h": "83.195.24.226", "id.orig_p": 36250, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2640, "resp_pkts": 37, "resp_ip_bytes": 2738, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513926Z", "uid": "SH8303093", "id.orig_h": "83.195.24.226", "id.orig_p": 45872, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1736, "resp_pkts": 15, "resp_ip_bytes": 885, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513942Z", "uid": "SH9491837", "id.orig_h": "206.121.122.80", "id.orig_p": 50872, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 580, "resp_pkts": 21, "resp_ip_bytes": 1533, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.513955Z", "uid": "SH1750666", "id.orig_h": "83.195.24.226", "id.orig_p": 34027, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3650, "resp_pkts": 48, "resp_ip_bytes": 3744, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513966Z", "uid": "SH7636690", "id.orig_h": "83.195.24.226", "id.orig_p": 12622, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1280, "resp_pkts": 18, "resp_ip_bytes": 1026, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513977Z", "uid": "SH9442487", "id.orig_h": "135.55.210.223", "id.orig_p": 15431, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1254, "resp_pkts": 14, "resp_ip_bytes": 952, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.513988Z", "uid": "SH2158831", "id.orig_h": "170.86.212.161", "id.orig_p": 26788, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1715, "resp_pkts": 38, "resp_ip_bytes": 1710, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.513998Z", "uid": "SH9073324", "id.orig_h": "87.143.23.119", "id.orig_p": 21016, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2000, "resp_pkts": 17, "resp_ip_bytes": 884, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514009Z", "uid": "SH8172899", "id.orig_h": "52.173.49.103", "id.orig_p": 64546, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2205, "resp_pkts": 41, "resp_ip_bytes": 1640, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.514021Z", "uid": "SH9108180", "id.orig_h": "132.199.128.167", "id.orig_p": 45312, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1152, "resp_pkts": 41, "resp_ip_bytes": 1763, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.514037Z", "uid": "SH1789638", "id.orig_h": "87.143.23.119", "id.orig_p": 59399, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2214, "resp_pkts": 15, "resp_ip_bytes": 1125, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514047Z", "uid": "SH9983001", "id.orig_h": "170.86.212.161", "id.orig_p": 56847, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1392, "resp_pkts": 39, "resp_ip_bytes": 1560, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514058Z", "uid": "SH7067312", "id.orig_h": "212.152.24.209", "id.orig_p": 37226, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3264, "resp_pkts": 40, "resp_ip_bytes": 2120, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514069Z", "uid": "SH8998612", "id.orig_h": "4.5.47.4", "id.orig_p": 21058, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2480, "resp_pkts": 12, "resp_ip_bytes": 612, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.514080Z", "uid": "SH5837415", "id.orig_h": "125.19.151.3", "id.orig_p": 24890, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 972, "resp_pkts": 38, "resp_ip_bytes": 2166, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514095Z", "uid": "SH2509893", "id.orig_h": "159.193.183.0", "id.orig_p": 13968, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1166, "resp_pkts": 13, "resp_ip_bytes": 1040, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.514106Z", "uid": "SH5015421", "id.orig_h": "4.224.23.39", "id.orig_p": 12392, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2520, "resp_pkts": 30, "resp_ip_bytes": 2340, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514122Z", "uid": "SH9973046", "id.orig_h": "171.204.144.93", "id.orig_p": 58767, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1173, "resp_pkts": 34, "resp_ip_bytes": 2006, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.514133Z", "uid": "SH1298801", "id.orig_h": "83.195.24.226", "id.orig_p": 14567, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1197, "resp_pkts": 11, "resp_ip_bytes": 671, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514149Z", "uid": "SH7692365", "id.orig_h": "125.19.151.3", "id.orig_p": 16395, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1794, "resp_pkts": 20, "resp_ip_bytes": 840, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514160Z", "uid": "SH7250985", "id.orig_h": "173.53.0.82", "id.orig_p": 54145, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3195, "resp_pkts": 17, "resp_ip_bytes": 901, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.514171Z", "uid": "SH3101501", "id.orig_h": "136.169.203.247", "id.orig_p": 4203, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3920, "resp_pkts": 49, "resp_ip_bytes": 3038, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.514182Z", "uid": "SH7018982", "id.orig_h": "168.154.125.86", "id.orig_p": 17203, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1550, "resp_pkts": 45, "resp_ip_bytes": 1935, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.514193Z", "uid": "SH7374952", "id.orig_h": "212.152.24.209", "id.orig_p": 56227, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1457, "resp_pkts": 35, "resp_ip_bytes": 2660, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514205Z", "uid": "SH8280041", "id.orig_h": "83.195.24.226", "id.orig_p": 38452, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 2156, "resp_pkts": 42, "resp_ip_bytes": 1932, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514217Z", "uid": "SH8742532", "id.orig_h": "31.184.137.182", "id.orig_p": 20835, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2765, "resp_pkts": 32, "resp_ip_bytes": 1344, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514228Z", "uid": "SH3204784", "id.orig_h": "168.154.125.86", "id.orig_p": 61322, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 960, "resp_pkts": 32, "resp_ip_bytes": 1312, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.514240Z", "uid": "SH5398262", "id.orig_h": "83.195.24.226", "id.orig_p": 58657, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 506, "resp_pkts": 14, "resp_ip_bytes": 686, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514255Z", "uid": "SH3934379", "id.orig_h": "173.53.0.82", "id.orig_p": 54187, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2160, "resp_pkts": 47, "resp_ip_bytes": 1927, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.514265Z", "uid": "SH5742595", "id.orig_h": "132.180.149.17", "id.orig_p": 24068, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3266, "resp_pkts": 35, "resp_ip_bytes": 1890, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.514276Z", "uid": "SH4004554", "id.orig_h": "105.236.211.106", "id.orig_p": 29316, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1232, "resp_pkts": 35, "resp_ip_bytes": 1820, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.514289Z", "uid": "SH8337574", "id.orig_h": "111.129.222.243", "id.orig_p": 51839, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 800, "resp_pkts": 15, "resp_ip_bytes": 945, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.514299Z", "uid": "SH9404961", "id.orig_h": "114.126.110.154", "id.orig_p": 16594, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1855, "resp_pkts": 24, "resp_ip_bytes": 1344, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.514310Z", "uid": "SH9286442", "id.orig_h": "31.184.137.182", "id.orig_p": 27708, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1972, "resp_pkts": 48, "resp_ip_bytes": 2688, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514321Z", "uid": "SH1130160", "id.orig_h": "164.89.50.183", "id.orig_p": 56229, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 840, "resp_pkts": 23, "resp_ip_bytes": 943, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514333Z", "uid": "SH7129665", "id.orig_h": "83.195.24.226", "id.orig_p": 38437, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1855, "resp_pkts": 45, "resp_ip_bytes": 2790, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514345Z", "uid": "SH2418611", "id.orig_h": "159.193.183.0", "id.orig_p": 24583, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1725, "resp_pkts": 18, "resp_ip_bytes": 1080, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.514359Z", "uid": "SH6615669", "id.orig_h": "87.143.23.119", "id.orig_p": 39465, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 644, "resp_pkts": 40, "resp_ip_bytes": 2960, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514371Z", "uid": "SH6246693", "id.orig_h": "172.197.112.108", "id.orig_p": 31599, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1722, "resp_pkts": 31, "resp_ip_bytes": 1674, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.514381Z", "uid": "SH8498794", "id.orig_h": "83.195.24.226", "id.orig_p": 37440, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1377, "resp_pkts": 29, "resp_ip_bytes": 2291, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514391Z", "uid": "SH2132278", "id.orig_h": "132.199.128.167", "id.orig_p": 52755, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3552, "resp_pkts": 44, "resp_ip_bytes": 3300, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.514402Z", "uid": "SH3917864", "id.orig_h": "110.16.7.177", "id.orig_p": 47243, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1830, "resp_pkts": 40, "resp_ip_bytes": 1920, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.514414Z", "uid": "SH5557520", "id.orig_h": "191.47.156.160", "id.orig_p": 36832, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1638, "resp_pkts": 40, "resp_ip_bytes": 2640, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514425Z", "uid": "SH9741014", "id.orig_h": "129.164.50.72", "id.orig_p": 58207, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 903, "resp_pkts": 47, "resp_ip_bytes": 3760, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.514435Z", "uid": "SH1152257", "id.orig_h": "110.16.7.177", "id.orig_p": 64603, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2501, "resp_pkts": 13, "resp_ip_bytes": 663, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.514447Z", "uid": "SH5001077", "id.orig_h": "114.56.126.152", "id.orig_p": 59032, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 3075, "resp_pkts": 37, "resp_ip_bytes": 2072, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.514463Z", "uid": "SH5389919", "id.orig_h": "191.33.181.155", "id.orig_p": 5496, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1624, "resp_pkts": 27, "resp_ip_bytes": 1674, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.514477Z", "uid": "SH7496170", "id.orig_h": "105.236.211.106", "id.orig_p": 54643, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2145, "resp_pkts": 46, "resp_ip_bytes": 2392, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.514488Z", "uid": "SH2074544", "id.orig_h": "52.173.49.103", "id.orig_p": 36223, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2600, "resp_pkts": 24, "resp_ip_bytes": 1752, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.514498Z", "uid": "SH3732493", "id.orig_h": "164.89.50.183", "id.orig_p": 15343, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 912, "resp_pkts": 17, "resp_ip_bytes": 952, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514510Z", "uid": "SH2642796", "id.orig_h": "102.213.11.119", "id.orig_p": 7735, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1794, "resp_pkts": 32, "resp_ip_bytes": 2336, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.514520Z", "uid": "SH8444112", "id.orig_h": "125.19.151.3", "id.orig_p": 20278, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 590, "resp_pkts": 18, "resp_ip_bytes": 1026, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514531Z", "uid": "SH7727828", "id.orig_h": "34.243.90.209", "id.orig_p": 25654, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2250, "resp_pkts": 24, "resp_ip_bytes": 1896, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514542Z", "uid": "SH7125529", "id.orig_h": "52.173.49.103", "id.orig_p": 6954, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1239, "resp_pkts": 10, "resp_ip_bytes": 560, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.514553Z", "uid": "SH8908753", "id.orig_h": "131.42.117.209", "id.orig_p": 48927, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 1845, "resp_pkts": 46, "resp_ip_bytes": 3496, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514567Z", "uid": "SH8347298", "id.orig_h": "191.43.248.137", "id.orig_p": 22125, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 765, "resp_pkts": 43, "resp_ip_bytes": 2967, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.514579Z", "uid": "SH8525359", "id.orig_h": "74.165.131.224", "id.orig_p": 59173, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1827, "resp_pkts": 18, "resp_ip_bytes": 1116, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.514590Z", "uid": "SH1326668", "id.orig_h": "25.47.52.197", "id.orig_p": 49960, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1107, "resp_pkts": 27, "resp_ip_bytes": 1377, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514603Z", "uid": "SH7614226", "id.orig_h": "114.56.126.152", "id.orig_p": 40002, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1219, "resp_pkts": 46, "resp_ip_bytes": 2714, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.514615Z", "uid": "SH9635161", "id.orig_h": "136.169.203.247", "id.orig_p": 61263, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 950, "resp_pkts": 33, "resp_ip_bytes": 2310, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.514626Z", "uid": "SH4139093", "id.orig_h": "34.243.90.209", "id.orig_p": 1041, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2414, "resp_pkts": 31, "resp_ip_bytes": 1581, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514637Z", "uid": "SH7527330", "id.orig_h": "136.169.203.247", "id.orig_p": 5787, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2448, "resp_pkts": 47, "resp_ip_bytes": 2820, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.514650Z", "uid": "SH5967579", "id.orig_h": "131.42.117.209", "id.orig_p": 8373, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2440, "resp_pkts": 32, "resp_ip_bytes": 1664, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514663Z", "uid": "SH4982770", "id.orig_h": "4.5.47.4", "id.orig_p": 43308, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 528, "resp_pkts": 20, "resp_ip_bytes": 1460, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.514679Z", "uid": "SH5977863", "id.orig_h": "216.10.117.99", "id.orig_p": 5082, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1736, "resp_pkts": 24, "resp_ip_bytes": 1128, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514690Z", "uid": "SH1754487", "id.orig_h": "191.47.156.160", "id.orig_p": 2827, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 845, "resp_pkts": 34, "resp_ip_bytes": 2448, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514700Z", "uid": "SH8472819", "id.orig_h": "191.47.156.160", "id.orig_p": 59363, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 817, "resp_pkts": 29, "resp_ip_bytes": 1798, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514713Z", "uid": "SH3790247", "id.orig_h": "114.56.126.152", "id.orig_p": 4401, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 610, "resp_pkts": 16, "resp_ip_bytes": 1120, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.514724Z", "uid": "SH6092869", "id.orig_h": "4.224.23.39", "id.orig_p": 7835, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 588, "resp_pkts": 26, "resp_ip_bytes": 1768, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.514736Z", "uid": "SH8974949", "id.orig_h": "111.129.222.243", "id.orig_p": 41487, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1207, "resp_pkts": 19, "resp_ip_bytes": 836, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.514747Z", "uid": "SH3600975", "id.orig_h": "170.86.212.161", "id.orig_p": 25466, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1264, "resp_pkts": 19, "resp_ip_bytes": 1159, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514757Z", "uid": "SH1081302", "id.orig_h": "171.3.171.165", "id.orig_p": 8627, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2698, "resp_pkts": 40, "resp_ip_bytes": 3040, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.514773Z", "uid": "SH9030580", "id.orig_h": "131.42.117.209", "id.orig_p": 65403, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 864, "resp_pkts": 36, "resp_ip_bytes": 1872, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514783Z", "uid": "SH9885686", "id.orig_h": "113.173.136.4", "id.orig_p": 39219, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3520, "resp_pkts": 19, "resp_ip_bytes": 1311, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.514803Z", "uid": "SH5465688", "id.orig_h": "191.47.156.160", "id.orig_p": 1274, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2130, "resp_pkts": 37, "resp_ip_bytes": 1961, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514815Z", "uid": "SH2014356", "id.orig_h": "164.89.50.183", "id.orig_p": 38243, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1386, "resp_pkts": 40, "resp_ip_bytes": 2880, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514827Z", "uid": "SH4219751", "id.orig_h": "216.10.117.99", "id.orig_p": 57035, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2112, "resp_pkts": 38, "resp_ip_bytes": 2736, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514838Z", "uid": "SH8002642", "id.orig_h": "170.86.212.161", "id.orig_p": 28881, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1026, "resp_pkts": 37, "resp_ip_bytes": 2664, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514851Z", "uid": "SH7184281", "id.orig_h": "114.126.110.154", "id.orig_p": 41101, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1197, "resp_pkts": 15, "resp_ip_bytes": 840, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.514867Z", "uid": "SH4036283", "id.orig_h": "83.195.24.226", "id.orig_p": 47770, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1276, "resp_pkts": 21, "resp_ip_bytes": 1323, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514877Z", "uid": "SH3725082", "id.orig_h": "191.33.181.155", "id.orig_p": 53687, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1652, "resp_pkts": 23, "resp_ip_bytes": 1012, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.514888Z", "uid": "SH7617759", "id.orig_h": "191.43.248.137", "id.orig_p": 38858, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 810, "resp_pkts": 16, "resp_ip_bytes": 880, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.514899Z", "uid": "SH9297547", "id.orig_h": "83.195.24.226", "id.orig_p": 56269, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3400, "resp_pkts": 15, "resp_ip_bytes": 1080, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.514917Z", "uid": "SH8865939", "id.orig_h": "122.204.186.125", "id.orig_p": 7019, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2343, "resp_pkts": 13, "resp_ip_bytes": 520, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.514928Z", "uid": "SH8797005", "id.orig_h": "129.164.50.72", "id.orig_p": 53653, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1350, "resp_pkts": 18, "resp_ip_bytes": 1152, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.514940Z", "uid": "SH3919634", "id.orig_h": "34.243.90.209", "id.orig_p": 20363, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 2016, "resp_pkts": 12, "resp_ip_bytes": 864, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.514951Z", "uid": "SH8327216", "id.orig_h": "132.199.128.167", "id.orig_p": 30142, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2646, "resp_pkts": 30, "resp_ip_bytes": 2220, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.514962Z", "uid": "SH6262261", "id.orig_h": "125.19.151.3", "id.orig_p": 5986, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2990, "resp_pkts": 27, "resp_ip_bytes": 2025, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.514974Z", "uid": "SH8651040", "id.orig_h": "173.53.0.82", "id.orig_p": 18553, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3465, "resp_pkts": 18, "resp_ip_bytes": 1008, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.514984Z", "uid": "SH4907956", "id.orig_h": "3.157.204.249", "id.orig_p": 13565, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 2106, "resp_pkts": 49, "resp_ip_bytes": 3087, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.514996Z", "uid": "SH1153558", "id.orig_h": "147.83.99.54", "id.orig_p": 1811, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2156, "resp_pkts": 25, "resp_ip_bytes": 1050, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.515007Z", "uid": "SH7987229", "id.orig_h": "197.168.76.169", "id.orig_p": 60422, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2784, "resp_pkts": 41, "resp_ip_bytes": 2501, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515025Z", "uid": "SH7278988", "id.orig_h": "4.5.47.4", "id.orig_p": 36051, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1829, "resp_pkts": 26, "resp_ip_bytes": 1404, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515035Z", "uid": "SH3731662", "id.orig_h": "125.123.103.182", "id.orig_p": 10673, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 918, "resp_pkts": 16, "resp_ip_bytes": 656, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515046Z", "uid": "SH7181191", "id.orig_h": "132.199.128.167", "id.orig_p": 14137, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 640, "resp_pkts": 48, "resp_ip_bytes": 2256, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.515060Z", "uid": "SH5484241", "id.orig_h": "191.47.156.160", "id.orig_p": 28892, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1922, "resp_pkts": 40, "resp_ip_bytes": 2720, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515072Z", "uid": "SH1485593", "id.orig_h": "164.89.50.183", "id.orig_p": 16113, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1144, "resp_pkts": 15, "resp_ip_bytes": 1170, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515083Z", "uid": "SH1471980", "id.orig_h": "105.236.211.106", "id.orig_p": 60465, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2430, "resp_pkts": 35, "resp_ip_bytes": 2135, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515094Z", "uid": "SH6628058", "id.orig_h": "132.199.128.167", "id.orig_p": 7389, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3240, "resp_pkts": 47, "resp_ip_bytes": 2585, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.515105Z", "uid": "SH4510217", "id.orig_h": "216.10.117.99", "id.orig_p": 45757, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2345, "resp_pkts": 37, "resp_ip_bytes": 2183, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.515116Z", "uid": "SH8483948", "id.orig_h": "191.33.181.155", "id.orig_p": 59307, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1872, "resp_pkts": 48, "resp_ip_bytes": 3600, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.515131Z", "uid": "SH3268459", "id.orig_h": "87.143.23.119", "id.orig_p": 41369, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2067, "resp_pkts": 49, "resp_ip_bytes": 2695, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.515146Z", "uid": "SH2918591", "id.orig_h": "113.173.136.4", "id.orig_p": 52034, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1428, "resp_pkts": 30, "resp_ip_bytes": 2340, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.515157Z", "uid": "SH7736703", "id.orig_h": "4.5.47.4", "id.orig_p": 33137, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1920, "resp_pkts": 21, "resp_ip_bytes": 903, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515167Z", "uid": "SH3279496", "id.orig_h": "191.47.156.160", "id.orig_p": 5549, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2040, "resp_pkts": 21, "resp_ip_bytes": 1302, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515179Z", "uid": "SH6384905", "id.orig_h": "52.173.49.103", "id.orig_p": 64830, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 2240, "resp_pkts": 35, "resp_ip_bytes": 1680, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515190Z", "uid": "SH2002087", "id.orig_h": "74.165.131.224", "id.orig_p": 7703, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1008, "resp_pkts": 30, "resp_ip_bytes": 1230, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.515202Z", "uid": "SH1146431", "id.orig_h": "191.47.156.160", "id.orig_p": 41048, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1404, "resp_pkts": 20, "resp_ip_bytes": 1220, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515213Z", "uid": "SH3308794", "id.orig_h": "216.10.117.99", "id.orig_p": 48750, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2048, "resp_pkts": 49, "resp_ip_bytes": 2793, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.515223Z", "uid": "SH2539437", "id.orig_h": "171.3.171.165", "id.orig_p": 13173, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1452, "resp_pkts": 50, "resp_ip_bytes": 2900, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515238Z", "uid": "SH4396144", "id.orig_h": "196.134.79.79", "id.orig_p": 5229, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2695, "resp_pkts": 15, "resp_ip_bytes": 780, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.515253Z", "uid": "SH5575717", "id.orig_h": "111.129.222.243", "id.orig_p": 7972, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3384, "resp_pkts": 34, "resp_ip_bytes": 1462, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.515264Z", "uid": "SH8284473", "id.orig_h": "3.157.204.249", "id.orig_p": 57498, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 3040, "resp_pkts": 47, "resp_ip_bytes": 2632, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.515276Z", "uid": "SH1543605", "id.orig_h": "129.164.50.72", "id.orig_p": 50309, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1512, "resp_pkts": 22, "resp_ip_bytes": 1210, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.515286Z", "uid": "SH7648357", "id.orig_h": "52.173.49.103", "id.orig_p": 26101, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1083, "resp_pkts": 32, "resp_ip_bytes": 1600, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515299Z", "uid": "SH5651948", "id.orig_h": "191.47.156.160", "id.orig_p": 29778, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2646, "resp_pkts": 22, "resp_ip_bytes": 1738, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515309Z", "uid": "SH5120451", "id.orig_h": "110.177.195.150", "id.orig_p": 37000, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1798, "resp_pkts": 13, "resp_ip_bytes": 715, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.515320Z", "uid": "SH1584860", "id.orig_h": "114.56.126.152", "id.orig_p": 11863, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2646, "resp_pkts": 38, "resp_ip_bytes": 3040, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.515331Z", "uid": "SH2109551", "id.orig_h": "164.89.50.183", "id.orig_p": 38526, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2832, "resp_pkts": 22, "resp_ip_bytes": 1760, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515346Z", "uid": "SH4911060", "id.orig_h": "196.134.79.79", "id.orig_p": 18423, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1457, "resp_pkts": 37, "resp_ip_bytes": 1591, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.515357Z", "uid": "SH9509662", "id.orig_h": "31.184.137.182", "id.orig_p": 33201, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1408, "resp_pkts": 47, "resp_ip_bytes": 3055, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.515371Z", "uid": "SH6214153", "id.orig_h": "110.177.195.150", "id.orig_p": 57054, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1215, "resp_pkts": 10, "resp_ip_bytes": 710, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515382Z", "uid": "SH8882638", "id.orig_h": "197.168.76.169", "id.orig_p": 27797, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1420, "resp_pkts": 37, "resp_ip_bytes": 2479, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515397Z", "uid": "SH2774692", "id.orig_h": "110.177.195.150", "id.orig_p": 18180, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2117, "resp_pkts": 16, "resp_ip_bytes": 672, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515408Z", "uid": "SH8646092", "id.orig_h": "110.177.195.150", "id.orig_p": 19992, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2414, "resp_pkts": 45, "resp_ip_bytes": 3150, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515418Z", "uid": "SH5488604", "id.orig_h": "206.121.122.80", "id.orig_p": 7669, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1440, "resp_pkts": 39, "resp_ip_bytes": 3003, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.515429Z", "uid": "SH1585646", "id.orig_h": "131.42.117.209", "id.orig_p": 47854, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2597, "resp_pkts": 19, "resp_ip_bytes": 1235, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515441Z", "uid": "SH4277492", "id.orig_h": "34.243.90.209", "id.orig_p": 34442, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2304, "resp_pkts": 41, "resp_ip_bytes": 3034, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515464Z", "uid": "SH7778463", "id.orig_h": "197.168.76.169", "id.orig_p": 20429, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1000, "resp_pkts": 23, "resp_ip_bytes": 1403, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515477Z", "uid": "SH2435890", "id.orig_h": "164.89.50.183", "id.orig_p": 45508, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1035, "resp_pkts": 20, "resp_ip_bytes": 1120, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515487Z", "uid": "SH6929684", "id.orig_h": "135.55.210.223", "id.orig_p": 53403, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 871, "resp_pkts": 10, "resp_ip_bytes": 760, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.515500Z", "uid": "SH2321545", "id.orig_h": "34.243.90.209", "id.orig_p": 8167, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1280, "resp_pkts": 45, "resp_ip_bytes": 3600, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515511Z", "uid": "SH3381888", "id.orig_h": "135.55.210.223", "id.orig_p": 55420, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1071, "resp_pkts": 48, "resp_ip_bytes": 2688, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.515523Z", "uid": "SH8374350", "id.orig_h": "191.43.248.137", "id.orig_p": 40472, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1704, "resp_pkts": 38, "resp_ip_bytes": 2546, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515533Z", "uid": "SH9183277", "id.orig_h": "136.169.203.247", "id.orig_p": 12449, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 672, "resp_pkts": 46, "resp_ip_bytes": 2714, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.515545Z", "uid": "SH5798652", "id.orig_h": "173.53.0.82", "id.orig_p": 44628, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 630, "resp_pkts": 38, "resp_ip_bytes": 2318, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.515555Z", "uid": "SH2646862", "id.orig_h": "164.89.50.183", "id.orig_p": 24042, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2400, "resp_pkts": 36, "resp_ip_bytes": 2196, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515566Z", "uid": "SH2817222", "id.orig_h": "116.149.83.216", "id.orig_p": 42436, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 492, "resp_pkts": 44, "resp_ip_bytes": 3388, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515582Z", "uid": "SH8639534", "id.orig_h": "131.42.117.209", "id.orig_p": 43325, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1323, "resp_pkts": 40, "resp_ip_bytes": 2560, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515592Z", "uid": "SH7469812", "id.orig_h": "23.111.149.52", "id.orig_p": 12965, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2240, "resp_pkts": 48, "resp_ip_bytes": 3696, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.515604Z", "uid": "SH1156020", "id.orig_h": "122.204.186.125", "id.orig_p": 63082, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2508, "resp_pkts": 23, "resp_ip_bytes": 1196, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515614Z", "uid": "SH8312092", "id.orig_h": "131.42.117.209", "id.orig_p": 56834, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1682, "resp_pkts": 49, "resp_ip_bytes": 2793, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515626Z", "uid": "SH7103269", "id.orig_h": "164.89.50.183", "id.orig_p": 30674, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2337, "resp_pkts": 45, "resp_ip_bytes": 3195, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515641Z", "uid": "SH6226771", "id.orig_h": "111.129.222.243", "id.orig_p": 36309, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1314, "resp_pkts": 35, "resp_ip_bytes": 2240, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.515652Z", "uid": "SH5074643", "id.orig_h": "78.164.1.207", "id.orig_p": 63638, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3360, "resp_pkts": 36, "resp_ip_bytes": 1476, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.515668Z", "uid": "SH6351719", "id.orig_h": "113.173.136.4", "id.orig_p": 25677, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1716, "resp_pkts": 29, "resp_ip_bytes": 1189, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.515679Z", "uid": "SH5719044", "id.orig_h": "105.236.211.106", "id.orig_p": 61314, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2961, "resp_pkts": 19, "resp_ip_bytes": 1216, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515694Z", "uid": "SH9084519", "id.orig_h": "191.47.156.160", "id.orig_p": 38144, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2074, "resp_pkts": 41, "resp_ip_bytes": 2788, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515705Z", "uid": "SH7174800", "id.orig_h": "191.43.248.137", "id.orig_p": 64472, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2738, "resp_pkts": 21, "resp_ip_bytes": 1176, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.515716Z", "uid": "SH4317569", "id.orig_h": "110.16.7.177", "id.orig_p": 52227, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2262, "resp_pkts": 17, "resp_ip_bytes": 1241, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.515728Z", "uid": "SH5170155", "id.orig_h": "52.173.49.103", "id.orig_p": 59439, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3332, "resp_pkts": 42, "resp_ip_bytes": 2604, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515739Z", "uid": "SH3941011", "id.orig_h": "110.177.195.150", "id.orig_p": 59139, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1037, "resp_pkts": 41, "resp_ip_bytes": 1886, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515749Z", "uid": "SH9279475", "id.orig_h": "25.47.52.197", "id.orig_p": 24701, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2924, "resp_pkts": 43, "resp_ip_bytes": 2279, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.515760Z", "uid": "SH9423748", "id.orig_h": "181.91.226.98", "id.orig_p": 40159, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 902, "resp_pkts": 15, "resp_ip_bytes": 975, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515771Z", "uid": "SH8099724", "id.orig_h": "216.10.117.99", "id.orig_p": 34620, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1353, "resp_pkts": 21, "resp_ip_bytes": 1218, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.515782Z", "uid": "SH5925827", "id.orig_h": "87.143.23.119", "id.orig_p": 12440, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1435, "resp_pkts": 43, "resp_ip_bytes": 2967, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.515796Z", "uid": "SH9981852", "id.orig_h": "110.16.7.177", "id.orig_p": 11901, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1656, "resp_pkts": 19, "resp_ip_bytes": 950, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.515807Z", "uid": "SH3648000", "id.orig_h": "212.152.24.209", "id.orig_p": 37515, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 975, "resp_pkts": 48, "resp_ip_bytes": 2784, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515818Z", "uid": "SH7117278", "id.orig_h": "116.149.83.216", "id.orig_p": 3718, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 884, "resp_pkts": 35, "resp_ip_bytes": 1540, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515831Z", "uid": "SH7315747", "id.orig_h": "74.146.111.155", "id.orig_p": 24578, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2310, "resp_pkts": 22, "resp_ip_bytes": 1276, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.515842Z", "uid": "SH3262818", "id.orig_h": "196.134.79.79", "id.orig_p": 35313, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1716, "resp_pkts": 24, "resp_ip_bytes": 1488, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.515854Z", "uid": "SH2070614", "id.orig_h": "34.243.90.209", "id.orig_p": 7726, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 700, "resp_pkts": 33, "resp_ip_bytes": 2079, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515864Z", "uid": "SH8780605", "id.orig_h": "125.19.151.3", "id.orig_p": 61777, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2584, "resp_pkts": 40, "resp_ip_bytes": 1880, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515875Z", "uid": "SH8812324", "id.orig_h": "52.173.49.103", "id.orig_p": 20680, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1505, "resp_pkts": 38, "resp_ip_bytes": 2432, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.515886Z", "uid": "SH4879379", "id.orig_h": "116.149.83.216", "id.orig_p": 52894, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1320, "resp_pkts": 24, "resp_ip_bytes": 1320, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.515903Z", "uid": "SH2477597", "id.orig_h": "4.5.47.4", "id.orig_p": 23417, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1674, "resp_pkts": 45, "resp_ip_bytes": 3420, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.515915Z", "uid": "SH3631602", "id.orig_h": "212.152.24.209", "id.orig_p": 20218, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2618, "resp_pkts": 23, "resp_ip_bytes": 1587, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.515925Z", "uid": "SH8962058", "id.orig_h": "110.16.7.177", "id.orig_p": 52815, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2553, "resp_pkts": 11, "resp_ip_bytes": 869, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.515937Z", "uid": "SH3184063", "id.orig_h": "78.164.1.207", "id.orig_p": 25854, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 1932, "resp_pkts": 13, "resp_ip_bytes": 845, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.515948Z", "uid": "SH8482718", "id.orig_h": "173.53.0.82", "id.orig_p": 31985, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3182, "resp_pkts": 40, "resp_ip_bytes": 2600, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.515960Z", "uid": "SH9696054", "id.orig_h": "4.224.23.39", "id.orig_p": 7399, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1541, "resp_pkts": 48, "resp_ip_bytes": 3312, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.515972Z", "uid": "SH1125373", "id.orig_h": "191.47.156.160", "id.orig_p": 9210, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1206, "resp_pkts": 44, "resp_ip_bytes": 2904, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.515983Z", "uid": "SH3585352", "id.orig_h": "191.43.248.137", "id.orig_p": 31841, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2432, "resp_pkts": 33, "resp_ip_bytes": 2376, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.515995Z", "uid": "SH2254076", "id.orig_h": "122.204.186.125", "id.orig_p": 6805, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2304, "resp_pkts": 26, "resp_ip_bytes": 1742, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516015Z", "uid": "SH6714937", "id.orig_h": "31.184.137.182", "id.orig_p": 55607, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2175, "resp_pkts": 16, "resp_ip_bytes": 1264, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516030Z", "uid": "SH2611992", "id.orig_h": "132.180.149.17", "id.orig_p": 64879, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1504, "resp_pkts": 30, "resp_ip_bytes": 1260, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.516051Z", "uid": "SH2166081", "id.orig_h": "191.47.156.160", "id.orig_p": 32996, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1050, "resp_pkts": 24, "resp_ip_bytes": 1536, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.516061Z", "uid": "SH4973660", "id.orig_h": "159.193.183.0", "id.orig_p": 42733, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1072, "resp_pkts": 18, "resp_ip_bytes": 864, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516072Z", "uid": "SH8445434", "id.orig_h": "3.157.204.249", "id.orig_p": 40402, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1920, "resp_pkts": 10, "resp_ip_bytes": 490, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.516083Z", "uid": "SH9769079", "id.orig_h": "181.91.226.98", "id.orig_p": 49747, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1560, "resp_pkts": 48, "resp_ip_bytes": 3408, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.516094Z", "uid": "SH5172343", "id.orig_h": "110.177.195.150", "id.orig_p": 3787, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3196, "resp_pkts": 38, "resp_ip_bytes": 1900, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.516104Z", "uid": "SH9268988", "id.orig_h": "83.195.24.226", "id.orig_p": 53838, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 846, "resp_pkts": 17, "resp_ip_bytes": 731, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516115Z", "uid": "SH3821093", "id.orig_h": "4.5.47.4", "id.orig_p": 6928, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1665, "resp_pkts": 30, "resp_ip_bytes": 2280, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516130Z", "uid": "SH2772437", "id.orig_h": "4.224.23.39", "id.orig_p": 61437, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1026, "resp_pkts": 40, "resp_ip_bytes": 2080, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516141Z", "uid": "SH2358778", "id.orig_h": "87.143.23.119", "id.orig_p": 28828, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 943, "resp_pkts": 47, "resp_ip_bytes": 3713, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516152Z", "uid": "SH6583486", "id.orig_h": "164.89.50.183", "id.orig_p": 63182, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 920, "resp_pkts": 47, "resp_ip_bytes": 2538, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.516163Z", "uid": "SH7889977", "id.orig_h": "4.224.23.39", "id.orig_p": 22845, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1363, "resp_pkts": 25, "resp_ip_bytes": 1875, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516178Z", "uid": "SH4491754", "id.orig_h": "74.146.111.155", "id.orig_p": 4054, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2244, "resp_pkts": 28, "resp_ip_bytes": 1876, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.516189Z", "uid": "SH3972701", "id.orig_h": "110.177.195.150", "id.orig_p": 64253, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 848, "resp_pkts": 39, "resp_ip_bytes": 1755, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.516201Z", "uid": "SH1473447", "id.orig_h": "181.91.226.98", "id.orig_p": 59096, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2668, "resp_pkts": 28, "resp_ip_bytes": 1792, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.516212Z", "uid": "SH1720571", "id.orig_h": "83.195.24.226", "id.orig_p": 48575, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1148, "resp_pkts": 33, "resp_ip_bytes": 2409, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516224Z", "uid": "SH6842314", "id.orig_h": "159.193.183.0", "id.orig_p": 39424, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 672, "resp_pkts": 29, "resp_ip_bytes": 1392, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516238Z", "uid": "SH9382284", "id.orig_h": "212.152.24.209", "id.orig_p": 33158, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2844, "resp_pkts": 17, "resp_ip_bytes": 1037, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.516249Z", "uid": "SH8217373", "id.orig_h": "3.157.204.249", "id.orig_p": 40291, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2850, "resp_pkts": 41, "resp_ip_bytes": 2870, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.516262Z", "uid": "SH1857491", "id.orig_h": "168.154.125.86", "id.orig_p": 17697, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3330, "resp_pkts": 21, "resp_ip_bytes": 1386, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.516275Z", "uid": "SH5700786", "id.orig_h": "4.5.47.4", "id.orig_p": 59805, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1802, "resp_pkts": 20, "resp_ip_bytes": 1460, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516286Z", "uid": "SH3623529", "id.orig_h": "23.111.149.52", "id.orig_p": 38677, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2450, "resp_pkts": 12, "resp_ip_bytes": 816, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.516298Z", "uid": "SH8893077", "id.orig_h": "170.86.212.161", "id.orig_p": 17771, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3619, "resp_pkts": 22, "resp_ip_bytes": 1716, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516310Z", "uid": "SH7096193", "id.orig_h": "122.204.186.125", "id.orig_p": 44228, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1240, "resp_pkts": 44, "resp_ip_bytes": 2200, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516321Z", "uid": "SH7032244", "id.orig_h": "87.143.23.119", "id.orig_p": 28981, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2600, "resp_pkts": 33, "resp_ip_bytes": 2310, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516332Z", "uid": "SH3422513", "id.orig_h": "4.224.23.39", "id.orig_p": 47798, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2296, "resp_pkts": 39, "resp_ip_bytes": 1911, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516343Z", "uid": "SH3185042", "id.orig_h": "78.164.1.207", "id.orig_p": 8739, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1320, "resp_pkts": 45, "resp_ip_bytes": 2835, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516358Z", "uid": "SH2088446", "id.orig_h": "171.204.144.93", "id.orig_p": 49099, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3150, "resp_pkts": 21, "resp_ip_bytes": 1470, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.516370Z", "uid": "SH8086926", "id.orig_h": "181.91.226.98", "id.orig_p": 30215, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1836, "resp_pkts": 41, "resp_ip_bytes": 2378, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.516381Z", "uid": "SH7338749", "id.orig_h": "197.168.76.169", "id.orig_p": 62471, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 840, "resp_pkts": 34, "resp_ip_bytes": 2414, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516391Z", "uid": "SH9334946", "id.orig_h": "136.169.203.247", "id.orig_p": 31167, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2508, "resp_pkts": 28, "resp_ip_bytes": 2240, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.516402Z", "uid": "SH1443226", "id.orig_h": "114.56.126.152", "id.orig_p": 57318, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2350, "resp_pkts": 11, "resp_ip_bytes": 484, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.516418Z", "uid": "SH4047514", "id.orig_h": "83.195.24.226", "id.orig_p": 65050, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1377, "resp_pkts": 44, "resp_ip_bytes": 2156, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516429Z", "uid": "SH5516436", "id.orig_h": "4.224.23.39", "id.orig_p": 13418, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 1880, "resp_pkts": 42, "resp_ip_bytes": 2604, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.516441Z", "uid": "SH8321294", "id.orig_h": "170.86.212.161", "id.orig_p": 64613, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3800, "resp_pkts": 36, "resp_ip_bytes": 2592, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516452Z", "uid": "SH9730746", "id.orig_h": "4.5.47.4", "id.orig_p": 48928, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 990, "resp_pkts": 21, "resp_ip_bytes": 1365, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516466Z", "uid": "SH4455109", "id.orig_h": "196.134.79.79", "id.orig_p": 53914, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1092, "resp_pkts": 48, "resp_ip_bytes": 2976, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.516478Z", "uid": "SH1570363", "id.orig_h": "159.193.183.0", "id.orig_p": 7368, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 590, "resp_pkts": 49, "resp_ip_bytes": 3626, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516489Z", "uid": "SH7719554", "id.orig_h": "122.204.186.125", "id.orig_p": 41761, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3800, "resp_pkts": 25, "resp_ip_bytes": 1950, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516500Z", "uid": "SH7817492", "id.orig_h": "23.111.149.52", "id.orig_p": 47134, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 2000, "resp_pkts": 35, "resp_ip_bytes": 1890, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.516511Z", "uid": "SH3152606", "id.orig_h": "125.19.151.3", "id.orig_p": 41571, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 767, "resp_pkts": 25, "resp_ip_bytes": 1550, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.516521Z", "uid": "SH1991736", "id.orig_h": "125.123.103.182", "id.orig_p": 22432, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 697, "resp_pkts": 45, "resp_ip_bytes": 2565, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.516532Z", "uid": "SH3281405", "id.orig_h": "125.19.151.3", "id.orig_p": 30208, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1408, "resp_pkts": 45, "resp_ip_bytes": 2745, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.516542Z", "uid": "SH8286769", "id.orig_h": "4.5.47.4", "id.orig_p": 48543, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2747, "resp_pkts": 10, "resp_ip_bytes": 510, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.516553Z", "uid": "SH3969755", "id.orig_h": "74.165.131.224", "id.orig_p": 15341, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 792, "resp_pkts": 11, "resp_ip_bytes": 803, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.516568Z", "uid": "SH4958708", "id.orig_h": "125.123.103.182", "id.orig_p": 38811, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1332, "resp_pkts": 39, "resp_ip_bytes": 2301, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.516580Z", "uid": "SH1512355", "id.orig_h": "159.193.183.0", "id.orig_p": 64643, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2660, "resp_pkts": 44, "resp_ip_bytes": 2420, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516591Z", "uid": "SH2720846", "id.orig_h": "216.10.117.99", "id.orig_p": 64109, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3650, "resp_pkts": 19, "resp_ip_bytes": 1178, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516747Z", "uid": "SH4421286", "id.orig_h": "147.83.99.54", "id.orig_p": 36414, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 896, "resp_pkts": 41, "resp_ip_bytes": 2624, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.516770Z", "uid": "SH9214342", "id.orig_h": "196.134.79.79", "id.orig_p": 14175, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 1027, "resp_pkts": 13, "resp_ip_bytes": 663, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.516789Z", "uid": "SH7687781", "id.orig_h": "78.164.1.207", "id.orig_p": 34438, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1820, "resp_pkts": 19, "resp_ip_bytes": 1463, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.516801Z", "uid": "SH7646990", "id.orig_h": "31.184.137.182", "id.orig_p": 40174, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1343, "resp_pkts": 28, "resp_ip_bytes": 1344, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.516810Z", "uid": "SH2683372", "id.orig_h": "212.152.24.209", "id.orig_p": 59980, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 656, "resp_pkts": 28, "resp_ip_bytes": 1148, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.516817Z", "uid": "SH3528627", "id.orig_h": "135.55.210.223", "id.orig_p": 49820, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2556, "resp_pkts": 29, "resp_ip_bytes": 1885, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.516827Z", "uid": "SH9995957", "id.orig_h": "191.47.156.160", "id.orig_p": 10628, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 817, "resp_pkts": 38, "resp_ip_bytes": 2850, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.516835Z", "uid": "SH8238853", "id.orig_h": "113.173.136.4", "id.orig_p": 32588, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3920, "resp_pkts": 30, "resp_ip_bytes": 1590, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.516843Z", "uid": "SH7567536", "id.orig_h": "131.42.117.209", "id.orig_p": 64234, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1440, "resp_pkts": 16, "resp_ip_bytes": 640, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.516850Z", "uid": "SH5998667", "id.orig_h": "171.3.171.165", "id.orig_p": 10570, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3950, "resp_pkts": 11, "resp_ip_bytes": 825, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.516857Z", "uid": "SH4996167", "id.orig_h": "114.126.110.154", "id.orig_p": 35565, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3182, "resp_pkts": 40, "resp_ip_bytes": 2400, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.516864Z", "uid": "SH2962963", "id.orig_h": "131.42.117.209", "id.orig_p": 36925, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2961, "resp_pkts": 36, "resp_ip_bytes": 2412, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.516872Z", "uid": "SH9653940", "id.orig_h": "23.111.149.52", "id.orig_p": 2519, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 520, "resp_pkts": 16, "resp_ip_bytes": 960, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.516880Z", "uid": "SH6910137", "id.orig_h": "74.165.131.224", "id.orig_p": 58424, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2208, "resp_pkts": 45, "resp_ip_bytes": 2610, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.516887Z", "uid": "SH4623349", "id.orig_h": "3.157.204.249", "id.orig_p": 53128, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1440, "resp_pkts": 20, "resp_ip_bytes": 800, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.516897Z", "uid": "SH6525891", "id.orig_h": "206.121.122.80", "id.orig_p": 35398, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 893, "resp_pkts": 24, "resp_ip_bytes": 1320, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.517433Z", "uid": "SH7161191", "id.orig_h": "83.195.24.226", "id.orig_p": 13110, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1311, "resp_pkts": 35, "resp_ip_bytes": 1715, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.517454Z", "uid": "SH6592395", "id.orig_h": "23.111.149.52", "id.orig_p": 41252, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2320, "resp_pkts": 40, "resp_ip_bytes": 2840, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.517466Z", "uid": "SH4466101", "id.orig_h": "3.157.204.249", "id.orig_p": 7979, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1568, "resp_pkts": 42, "resp_ip_bytes": 3318, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.517483Z", "uid": "SH9147824", "id.orig_h": "164.89.50.183", "id.orig_p": 28342, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 649, "resp_pkts": 21, "resp_ip_bytes": 1344, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.517496Z", "uid": "SH7462091", "id.orig_h": "170.86.212.161", "id.orig_p": 50873, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 510, "resp_pkts": 20, "resp_ip_bytes": 840, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.517508Z", "uid": "SH6970777", "id.orig_h": "136.169.203.247", "id.orig_p": 6282, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1292, "resp_pkts": 25, "resp_ip_bytes": 2000, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.517521Z", "uid": "SH9574991", "id.orig_h": "135.176.100.83", "id.orig_p": 3041, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2068, "resp_pkts": 36, "resp_ip_bytes": 1872, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.517533Z", "uid": "SH4951650", "id.orig_h": "129.164.50.72", "id.orig_p": 62408, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 3002, "resp_pkts": 37, "resp_ip_bytes": 1665, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.517561Z", "uid": "SH1209888", "id.orig_h": "78.164.1.207", "id.orig_p": 51547, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2279, "resp_pkts": 49, "resp_ip_bytes": 2597, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.517574Z", "uid": "SH2558300", "id.orig_h": "135.176.100.83", "id.orig_p": 57401, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3312, "resp_pkts": 50, "resp_ip_bytes": 2850, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.517586Z", "uid": "SH2735669", "id.orig_h": "113.173.136.4", "id.orig_p": 63163, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3053, "resp_pkts": 18, "resp_ip_bytes": 1170, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.517599Z", "uid": "SH7088259", "id.orig_h": "74.165.131.224", "id.orig_p": 7284, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1508, "resp_pkts": 29, "resp_ip_bytes": 1566, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.517734Z", "uid": "SH6928483", "id.orig_h": "131.42.117.209", "id.orig_p": 53609, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 1886, "resp_pkts": 50, "resp_ip_bytes": 3700, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.517753Z", "uid": "SH7323375", "id.orig_h": "136.169.203.247", "id.orig_p": 24220, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 832, "resp_pkts": 50, "resp_ip_bytes": 3400, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.517764Z", "uid": "SH8451178", "id.orig_h": "31.184.137.182", "id.orig_p": 41315, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 1050, "resp_pkts": 27, "resp_ip_bytes": 1080, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.517773Z", "uid": "SH3466613", "id.orig_h": "113.173.136.4", "id.orig_p": 60641, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1190, "resp_pkts": 32, "resp_ip_bytes": 1792, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.517784Z", "uid": "SH3873175", "id.orig_h": "125.19.151.3", "id.orig_p": 40547, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2736, "resp_pkts": 12, "resp_ip_bytes": 540, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.517804Z", "uid": "SH9765797", "id.orig_h": "181.91.226.98", "id.orig_p": 47504, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1848, "resp_pkts": 23, "resp_ip_bytes": 1518, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.517818Z", "uid": "SH9515072", "id.orig_h": "25.47.52.197", "id.orig_p": 26121, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1501, "resp_pkts": 23, "resp_ip_bytes": 1656, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.517824Z", "uid": "SH6581287", "id.orig_h": "125.123.103.182", "id.orig_p": 1888, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2535, "resp_pkts": 21, "resp_ip_bytes": 1386, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.517832Z", "uid": "SH1790291", "id.orig_h": "87.143.23.119", "id.orig_p": 19248, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1620, "resp_pkts": 37, "resp_ip_bytes": 1813, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.517838Z", "uid": "SH9688520", "id.orig_h": "129.164.50.72", "id.orig_p": 26833, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 1001, "resp_pkts": 43, "resp_ip_bytes": 2107, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.517845Z", "uid": "SH8433973", "id.orig_h": "52.173.49.103", "id.orig_p": 7269, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 3200, "resp_pkts": 37, "resp_ip_bytes": 2331, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.517853Z", "uid": "SH5908556", "id.orig_h": "191.47.156.160", "id.orig_p": 17230, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 847, "resp_pkts": 37, "resp_ip_bytes": 1480, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.517859Z", "uid": "SH8371632", "id.orig_h": "191.33.181.155", "id.orig_p": 18020, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2204, "resp_pkts": 35, "resp_ip_bytes": 2800, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.517865Z", "uid": "SH8326069", "id.orig_h": "191.43.248.137", "id.orig_p": 24088, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1152, "resp_pkts": 25, "resp_ip_bytes": 1600, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.517881Z", "uid": "SH7973081", "id.orig_h": "25.47.52.197", "id.orig_p": 24593, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2193, "resp_pkts": 22, "resp_ip_bytes": 1034, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.517892Z", "uid": "SH9527217", "id.orig_h": "172.197.112.108", "id.orig_p": 22139, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2046, "resp_pkts": 34, "resp_ip_bytes": 1734, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.517899Z", "uid": "SH5609097", "id.orig_h": "4.224.23.39", "id.orig_p": 17854, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2016, "resp_pkts": 26, "resp_ip_bytes": 1924, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.517905Z", "uid": "SH5470266", "id.orig_h": "171.3.171.165", "id.orig_p": 59976, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 940, "resp_pkts": 25, "resp_ip_bytes": 1200, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.517912Z", "uid": "SH6898223", "id.orig_h": "164.89.50.183", "id.orig_p": 62709, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 660, "resp_pkts": 15, "resp_ip_bytes": 1185, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.517918Z", "uid": "SH2503362", "id.orig_h": "164.89.50.183", "id.orig_p": 51604, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2840, "resp_pkts": 45, "resp_ip_bytes": 1935, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.517924Z", "uid": "SH2155422", "id.orig_h": "113.173.136.4", "id.orig_p": 40086, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1755, "resp_pkts": 47, "resp_ip_bytes": 2820, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.517931Z", "uid": "SH1000372", "id.orig_h": "110.16.7.177", "id.orig_p": 50419, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1898, "resp_pkts": 30, "resp_ip_bytes": 1470, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.517943Z", "uid": "SH3380621", "id.orig_h": "74.165.131.224", "id.orig_p": 41488, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1984, "resp_pkts": 37, "resp_ip_bytes": 1591, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.517953Z", "uid": "SH2018975", "id.orig_h": "181.91.226.98", "id.orig_p": 59818, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2028, "resp_pkts": 15, "resp_ip_bytes": 600, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.517963Z", "uid": "SH2594838", "id.orig_h": "173.53.0.82", "id.orig_p": 2550, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1927, "resp_pkts": 11, "resp_ip_bytes": 605, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.517973Z", "uid": "SH5554732", "id.orig_h": "171.204.144.93", "id.orig_p": 34257, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2646, "resp_pkts": 49, "resp_ip_bytes": 2009, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.517980Z", "uid": "SH1649768", "id.orig_h": "191.43.248.137", "id.orig_p": 15707, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2205, "resp_pkts": 16, "resp_ip_bytes": 688, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.517986Z", "uid": "SH9566260", "id.orig_h": "212.152.24.209", "id.orig_p": 11135, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1122, "resp_pkts": 50, "resp_ip_bytes": 3750, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.517992Z", "uid": "SH2556716", "id.orig_h": "196.134.79.79", "id.orig_p": 51563, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2541, "resp_pkts": 23, "resp_ip_bytes": 1495, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.517999Z", "uid": "SH6781393", "id.orig_h": "102.213.11.119", "id.orig_p": 46177, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2574, "resp_pkts": 12, "resp_ip_bytes": 636, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518005Z", "uid": "SH5291459", "id.orig_h": "212.152.24.209", "id.orig_p": 47414, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 1806, "resp_pkts": 12, "resp_ip_bytes": 708, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518011Z", "uid": "SH3960842", "id.orig_h": "113.173.136.4", "id.orig_p": 44624, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1638, "resp_pkts": 18, "resp_ip_bytes": 1206, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518018Z", "uid": "SH9656722", "id.orig_h": "4.5.47.4", "id.orig_p": 15271, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 740, "resp_pkts": 49, "resp_ip_bytes": 3626, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.518028Z", "uid": "SH6798233", "id.orig_h": "168.154.125.86", "id.orig_p": 33210, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3650, "resp_pkts": 11, "resp_ip_bytes": 869, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518034Z", "uid": "SH4500211", "id.orig_h": "122.204.186.125", "id.orig_p": 49470, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3066, "resp_pkts": 42, "resp_ip_bytes": 2982, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.518041Z", "uid": "SH5348995", "id.orig_h": "173.53.0.82", "id.orig_p": 57723, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2604, "resp_pkts": 12, "resp_ip_bytes": 960, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.518048Z", "uid": "SH3169245", "id.orig_h": "23.111.149.52", "id.orig_p": 44351, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3008, "resp_pkts": 32, "resp_ip_bytes": 1568, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.518055Z", "uid": "SH3590247", "id.orig_h": "23.111.149.52", "id.orig_p": 6410, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2482, "resp_pkts": 32, "resp_ip_bytes": 1472, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.518063Z", "uid": "SH4425734", "id.orig_h": "173.53.0.82", "id.orig_p": 24207, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2142, "resp_pkts": 44, "resp_ip_bytes": 3388, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.518069Z", "uid": "SH5327293", "id.orig_h": "168.154.125.86", "id.orig_p": 14246, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2496, "resp_pkts": 47, "resp_ip_bytes": 3196, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518075Z", "uid": "SH6625737", "id.orig_h": "25.47.52.197", "id.orig_p": 42884, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 858, "resp_pkts": 50, "resp_ip_bytes": 2600, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518083Z", "uid": "SH4392593", "id.orig_h": "129.164.50.72", "id.orig_p": 7544, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1960, "resp_pkts": 22, "resp_ip_bytes": 1342, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.518093Z", "uid": "SH9455543", "id.orig_h": "3.157.204.249", "id.orig_p": 21306, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1716, "resp_pkts": 35, "resp_ip_bytes": 2380, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518099Z", "uid": "SH2337418", "id.orig_h": "110.177.195.150", "id.orig_p": 34752, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 748, "resp_pkts": 32, "resp_ip_bytes": 1664, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.518106Z", "uid": "SH5536175", "id.orig_h": "172.197.112.108", "id.orig_p": 51386, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1118, "resp_pkts": 43, "resp_ip_bytes": 2365, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "support"}
{"ts": "2025-04-24T10:20:09.518113Z", "uid": "SH1474327", "id.orig_h": "173.53.0.82", "id.orig_p": 38611, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3243, "resp_pkts": 23, "resp_ip_bytes": 1311, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518120Z", "uid": "SH1758271", "id.orig_h": "173.53.0.82", "id.orig_p": 34951, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1539, "resp_pkts": 14, "resp_ip_bytes": 728, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.518126Z", "uid": "SH1565824", "id.orig_h": "125.19.151.3", "id.orig_p": 12106, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1320, "resp_pkts": 47, "resp_ip_bytes": 2350, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518132Z", "uid": "SH8022053", "id.orig_h": "113.173.136.4", "id.orig_p": 57674, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2553, "resp_pkts": 28, "resp_ip_bytes": 2156, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518139Z", "uid": "SH4337275", "id.orig_h": "135.55.210.223", "id.orig_p": 58874, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 702, "resp_pkts": 37, "resp_ip_bytes": 2257, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.518146Z", "uid": "SH8981878", "id.orig_h": "74.165.131.224", "id.orig_p": 30793, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2380, "resp_pkts": 14, "resp_ip_bytes": 700, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518155Z", "uid": "SH6051110", "id.orig_h": "164.89.50.183", "id.orig_p": 44070, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2296, "resp_pkts": 19, "resp_ip_bytes": 855, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518161Z", "uid": "SH5546683", "id.orig_h": "34.243.90.209", "id.orig_p": 24290, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1428, "resp_pkts": 24, "resp_ip_bytes": 1536, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518168Z", "uid": "SH6674556", "id.orig_h": "122.204.186.125", "id.orig_p": 9220, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 638, "resp_pkts": 38, "resp_ip_bytes": 2622, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.518174Z", "uid": "SH3155587", "id.orig_h": "111.129.222.243", "id.orig_p": 42755, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1760, "resp_pkts": 29, "resp_ip_bytes": 1392, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518186Z", "uid": "SH4845525", "id.orig_h": "181.91.226.98", "id.orig_p": 26381, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1680, "resp_pkts": 28, "resp_ip_bytes": 2016, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518193Z", "uid": "SH2749770", "id.orig_h": "170.86.212.161", "id.orig_p": 8878, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1782, "resp_pkts": 10, "resp_ip_bytes": 700, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518199Z", "uid": "SH7294309", "id.orig_h": "4.224.23.39", "id.orig_p": 19658, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 901, "resp_pkts": 39, "resp_ip_bytes": 1560, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518206Z", "uid": "SH7133096", "id.orig_h": "52.173.49.103", "id.orig_p": 63130, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1722, "resp_pkts": 21, "resp_ip_bytes": 1323, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518212Z", "uid": "SH7974057", "id.orig_h": "135.55.210.223", "id.orig_p": 25720, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 684, "resp_pkts": 14, "resp_ip_bytes": 672, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.518222Z", "uid": "SH1117277", "id.orig_h": "83.195.24.226", "id.orig_p": 13277, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 700, "resp_pkts": 35, "resp_ip_bytes": 2240, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518228Z", "uid": "SH6795197", "id.orig_h": "191.33.181.155", "id.orig_p": 44798, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 992, "resp_pkts": 28, "resp_ip_bytes": 1316, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518235Z", "uid": "SH4746200", "id.orig_h": "34.243.90.209", "id.orig_p": 54228, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1480, "resp_pkts": 44, "resp_ip_bytes": 2860, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518242Z", "uid": "SH7386072", "id.orig_h": "170.86.212.161", "id.orig_p": 45254, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 759, "resp_pkts": 19, "resp_ip_bytes": 760, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518255Z", "uid": "SH5144462", "id.orig_h": "111.129.222.243", "id.orig_p": 31292, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2024, "resp_pkts": 48, "resp_ip_bytes": 3552, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518262Z", "uid": "SH7403822", "id.orig_h": "110.16.7.177", "id.orig_p": 61465, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2440, "resp_pkts": 20, "resp_ip_bytes": 1040, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.518269Z", "uid": "SH2397451", "id.orig_h": "74.165.131.224", "id.orig_p": 14942, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2847, "resp_pkts": 14, "resp_ip_bytes": 728, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518275Z", "uid": "SH8171755", "id.orig_h": "74.146.111.155", "id.orig_p": 59571, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2738, "resp_pkts": 13, "resp_ip_bytes": 728, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518281Z", "uid": "SH5834270", "id.orig_h": "212.152.24.209", "id.orig_p": 34498, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1440, "resp_pkts": 21, "resp_ip_bytes": 1281, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518290Z", "uid": "SH9979595", "id.orig_h": "4.5.47.4", "id.orig_p": 61529, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 616, "resp_pkts": 44, "resp_ip_bytes": 2068, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.518298Z", "uid": "SH8794519", "id.orig_h": "74.165.131.224", "id.orig_p": 56902, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 561, "resp_pkts": 42, "resp_ip_bytes": 2814, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518304Z", "uid": "SH2767710", "id.orig_h": "114.56.126.152", "id.orig_p": 27768, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 780, "resp_pkts": 16, "resp_ip_bytes": 944, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518311Z", "uid": "SH8124133", "id.orig_h": "168.154.125.86", "id.orig_p": 43748, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2747, "resp_pkts": 21, "resp_ip_bytes": 1575, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518318Z", "uid": "SH1538427", "id.orig_h": "74.165.131.224", "id.orig_p": 25281, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1512, "resp_pkts": 21, "resp_ip_bytes": 1554, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518325Z", "uid": "SH4673556", "id.orig_h": "87.143.23.119", "id.orig_p": 44807, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1638, "resp_pkts": 49, "resp_ip_bytes": 3822, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518331Z", "uid": "SH9548363", "id.orig_h": "129.164.50.72", "id.orig_p": 27445, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2772, "resp_pkts": 33, "resp_ip_bytes": 1881, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.518337Z", "uid": "SH6192462", "id.orig_h": "191.43.248.137", "id.orig_p": 20421, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1827, "resp_pkts": 45, "resp_ip_bytes": 2970, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.518347Z", "uid": "SH6491238", "id.orig_h": "52.173.49.103", "id.orig_p": 64839, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 645, "resp_pkts": 24, "resp_ip_bytes": 1176, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518353Z", "uid": "SH2461263", "id.orig_h": "131.42.117.209", "id.orig_p": 55141, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 765, "resp_pkts": 15, "resp_ip_bytes": 630, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518362Z", "uid": "SH1268413", "id.orig_h": "31.184.137.182", "id.orig_p": 31493, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1742, "resp_pkts": 26, "resp_ip_bytes": 2028, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518369Z", "uid": "SH4029394", "id.orig_h": "3.157.204.249", "id.orig_p": 36065, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1568, "resp_pkts": 12, "resp_ip_bytes": 732, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518375Z", "uid": "SH4364423", "id.orig_h": "170.86.212.161", "id.orig_p": 61667, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 720, "resp_pkts": 15, "resp_ip_bytes": 1020, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518390Z", "uid": "SH4421736", "id.orig_h": "172.197.112.108", "id.orig_p": 17897, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3650, "resp_pkts": 45, "resp_ip_bytes": 2565, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.518397Z", "uid": "SH1620706", "id.orig_h": "136.169.203.247", "id.orig_p": 21053, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2254, "resp_pkts": 21, "resp_ip_bytes": 840, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.518404Z", "uid": "SH9949419", "id.orig_h": "114.126.110.154", "id.orig_p": 51382, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2496, "resp_pkts": 32, "resp_ip_bytes": 1472, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.518411Z", "uid": "SH7580404", "id.orig_h": "132.180.149.17", "id.orig_p": 22302, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 770, "resp_pkts": 11, "resp_ip_bytes": 440, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.518418Z", "uid": "SH3482173", "id.orig_h": "181.91.226.98", "id.orig_p": 44690, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1710, "resp_pkts": 39, "resp_ip_bytes": 2730, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518429Z", "uid": "SH2463797", "id.orig_h": "159.193.183.0", "id.orig_p": 13311, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2303, "resp_pkts": 40, "resp_ip_bytes": 2200, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.518438Z", "uid": "SH9535038", "id.orig_h": "168.154.125.86", "id.orig_p": 60585, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1220, "resp_pkts": 47, "resp_ip_bytes": 2303, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518445Z", "uid": "SH2999688", "id.orig_h": "159.193.183.0", "id.orig_p": 14159, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 893, "resp_pkts": 11, "resp_ip_bytes": 440, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.518451Z", "uid": "SH4250754", "id.orig_h": "87.143.23.119", "id.orig_p": 16486, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3408, "resp_pkts": 48, "resp_ip_bytes": 2928, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518459Z", "uid": "SH1802454", "id.orig_h": "114.56.126.152", "id.orig_p": 6918, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1740, "resp_pkts": 37, "resp_ip_bytes": 1480, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518465Z", "uid": "SH5865500", "id.orig_h": "125.19.151.3", "id.orig_p": 48487, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1750, "resp_pkts": 41, "resp_ip_bytes": 2132, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518471Z", "uid": "SH8025993", "id.orig_h": "191.47.156.160", "id.orig_p": 50657, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 696, "resp_pkts": 26, "resp_ip_bytes": 2054, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518478Z", "uid": "SH2543874", "id.orig_h": "181.91.226.98", "id.orig_p": 54481, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3024, "resp_pkts": 10, "resp_ip_bytes": 750, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518484Z", "uid": "SH4456976", "id.orig_h": "122.204.186.125", "id.orig_p": 15154, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 1885, "resp_pkts": 29, "resp_ip_bytes": 1189, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.518491Z", "uid": "SH4004309", "id.orig_h": "171.3.171.165", "id.orig_p": 17074, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3800, "resp_pkts": 36, "resp_ip_bytes": 1476, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518501Z", "uid": "SH7302446", "id.orig_h": "23.111.149.52", "id.orig_p": 25580, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1702, "resp_pkts": 21, "resp_ip_bytes": 987, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.518507Z", "uid": "SH8475593", "id.orig_h": "191.43.248.137", "id.orig_p": 44939, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2108, "resp_pkts": 23, "resp_ip_bytes": 1334, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.518514Z", "uid": "SH8374621", "id.orig_h": "114.126.110.154", "id.orig_p": 22934, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 748, "resp_pkts": 12, "resp_ip_bytes": 768, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.518521Z", "uid": "SH8915784", "id.orig_h": "113.173.136.4", "id.orig_p": 10877, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 675, "resp_pkts": 34, "resp_ip_bytes": 2040, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518528Z", "uid": "SH9211368", "id.orig_h": "78.164.1.207", "id.orig_p": 39052, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3192, "resp_pkts": 25, "resp_ip_bytes": 1675, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.518535Z", "uid": "SH2309703", "id.orig_h": "181.91.226.98", "id.orig_p": 58464, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1320, "resp_pkts": 26, "resp_ip_bytes": 1430, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518542Z", "uid": "SH3379001", "id.orig_h": "164.89.50.183", "id.orig_p": 44751, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 816, "resp_pkts": 10, "resp_ip_bytes": 680, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518548Z", "uid": "SH6176605", "id.orig_h": "171.3.171.165", "id.orig_p": 27321, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1696, "resp_pkts": 48, "resp_ip_bytes": 1968, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518555Z", "uid": "SH6670324", "id.orig_h": "25.47.52.197", "id.orig_p": 13109, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1568, "resp_pkts": 33, "resp_ip_bytes": 2244, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518564Z", "uid": "SH4633680", "id.orig_h": "132.180.149.17", "id.orig_p": 32652, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1584, "resp_pkts": 46, "resp_ip_bytes": 2530, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.518575Z", "uid": "SH3977217", "id.orig_h": "173.53.0.82", "id.orig_p": 6778, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 29, "orig_ip_bytes": 2146, "resp_pkts": 15, "resp_ip_bytes": 1065, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.518581Z", "uid": "SH7096909", "id.orig_h": "171.204.144.93", "id.orig_p": 45683, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 580, "resp_pkts": 32, "resp_ip_bytes": 2368, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518588Z", "uid": "SH9644184", "id.orig_h": "4.224.23.39", "id.orig_p": 48229, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1512, "resp_pkts": 18, "resp_ip_bytes": 1386, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518594Z", "uid": "SH4651367", "id.orig_h": "131.42.117.209", "id.orig_p": 38502, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1400, "resp_pkts": 29, "resp_ip_bytes": 2146, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518603Z", "uid": "SH4435635", "id.orig_h": "110.16.7.177", "id.orig_p": 31517, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1632, "resp_pkts": 40, "resp_ip_bytes": 1680, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.518610Z", "uid": "SH5439493", "id.orig_h": "23.111.149.52", "id.orig_p": 23773, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2618, "resp_pkts": 31, "resp_ip_bytes": 2418, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.518616Z", "uid": "SH2848178", "id.orig_h": "191.43.248.137", "id.orig_p": 43216, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2698, "resp_pkts": 12, "resp_ip_bytes": 924, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.518622Z", "uid": "SH9657245", "id.orig_h": "31.184.137.182", "id.orig_p": 34013, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 1908, "resp_pkts": 33, "resp_ip_bytes": 2244, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518632Z", "uid": "SH2366340", "id.orig_h": "4.224.23.39", "id.orig_p": 19904, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3102, "resp_pkts": 34, "resp_ip_bytes": 1496, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518638Z", "uid": "SH4068174", "id.orig_h": "147.83.99.54", "id.orig_p": 14576, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1302, "resp_pkts": 18, "resp_ip_bytes": 774, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518645Z", "uid": "SH2592276", "id.orig_h": "181.91.226.98", "id.orig_p": 10290, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1840, "resp_pkts": 31, "resp_ip_bytes": 1922, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518652Z", "uid": "SH3919064", "id.orig_h": "4.224.23.39", "id.orig_p": 30604, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2535, "resp_pkts": 22, "resp_ip_bytes": 1562, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518662Z", "uid": "SH2809189", "id.orig_h": "196.134.79.79", "id.orig_p": 50352, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 588, "resp_pkts": 42, "resp_ip_bytes": 3066, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.518668Z", "uid": "SH9692165", "id.orig_h": "191.47.156.160", "id.orig_p": 35286, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1248, "resp_pkts": 18, "resp_ip_bytes": 1242, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518675Z", "uid": "SH6107389", "id.orig_h": "87.143.23.119", "id.orig_p": 7357, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 912, "resp_pkts": 37, "resp_ip_bytes": 1739, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518681Z", "uid": "SH3244723", "id.orig_h": "171.3.171.165", "id.orig_p": 26041, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2173, "resp_pkts": 48, "resp_ip_bytes": 2544, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518687Z", "uid": "SH3901789", "id.orig_h": "171.3.171.165", "id.orig_p": 20179, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1742, "resp_pkts": 16, "resp_ip_bytes": 848, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518697Z", "uid": "SH7454817", "id.orig_h": "116.149.83.216", "id.orig_p": 56877, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 756, "resp_pkts": 13, "resp_ip_bytes": 962, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518704Z", "uid": "SH6772725", "id.orig_h": "3.157.204.249", "id.orig_p": 61807, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2279, "resp_pkts": 30, "resp_ip_bytes": 2340, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518711Z", "uid": "SH8306332", "id.orig_h": "114.56.126.152", "id.orig_p": 63123, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1425, "resp_pkts": 29, "resp_ip_bytes": 1943, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.518717Z", "uid": "SH5288353", "id.orig_h": "110.16.7.177", "id.orig_p": 49294, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1558, "resp_pkts": 31, "resp_ip_bytes": 1426, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.518728Z", "uid": "SH7318871", "id.orig_h": "170.86.212.161", "id.orig_p": 37821, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 1776, "resp_pkts": 35, "resp_ip_bytes": 1610, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518735Z", "uid": "SH6174207", "id.orig_h": "110.16.7.177", "id.orig_p": 57829, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1392, "resp_pkts": 19, "resp_ip_bytes": 912, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.518741Z", "uid": "SH4773379", "id.orig_h": "111.129.222.243", "id.orig_p": 39224, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 3087, "resp_pkts": 43, "resp_ip_bytes": 2408, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518748Z", "uid": "SH9262608", "id.orig_h": "3.157.204.249", "id.orig_p": 53098, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 1064, "resp_pkts": 47, "resp_ip_bytes": 1974, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518755Z", "uid": "SH2604185", "id.orig_h": "191.43.248.137", "id.orig_p": 6006, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3066, "resp_pkts": 49, "resp_ip_bytes": 2303, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.518765Z", "uid": "SH8569109", "id.orig_h": "111.129.222.243", "id.orig_p": 8424, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1428, "resp_pkts": 36, "resp_ip_bytes": 2268, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518772Z", "uid": "SH3834553", "id.orig_h": "114.126.110.154", "id.orig_p": 2219, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1240, "resp_pkts": 48, "resp_ip_bytes": 2976, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.518779Z", "uid": "SH2462873", "id.orig_h": "135.55.210.223", "id.orig_p": 11796, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1333, "resp_pkts": 28, "resp_ip_bytes": 1932, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.518785Z", "uid": "SH2269117", "id.orig_h": "116.149.83.216", "id.orig_p": 64591, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3504, "resp_pkts": 37, "resp_ip_bytes": 2331, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518792Z", "uid": "SH7298992", "id.orig_h": "168.154.125.86", "id.orig_p": 60399, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 624, "resp_pkts": 16, "resp_ip_bytes": 1152, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518798Z", "uid": "SH9640843", "id.orig_h": "173.53.0.82", "id.orig_p": 60083, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3666, "resp_pkts": 44, "resp_ip_bytes": 3300, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518805Z", "uid": "SH6619381", "id.orig_h": "25.47.52.197", "id.orig_p": 40393, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 2340, "resp_pkts": 25, "resp_ip_bytes": 1250, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518812Z", "uid": "SH7441547", "id.orig_h": "135.176.100.83", "id.orig_p": 32810, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1235, "resp_pkts": 21, "resp_ip_bytes": 1092, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.518818Z", "uid": "SH3447536", "id.orig_h": "125.19.151.3", "id.orig_p": 49739, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1204, "resp_pkts": 40, "resp_ip_bytes": 2120, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518824Z", "uid": "SH2206708", "id.orig_h": "34.243.90.209", "id.orig_p": 8964, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1694, "resp_pkts": 22, "resp_ip_bytes": 1474, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518833Z", "uid": "SH8554172", "id.orig_h": "168.154.125.86", "id.orig_p": 53099, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2024, "resp_pkts": 42, "resp_ip_bytes": 1680, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518840Z", "uid": "SH6709432", "id.orig_h": "114.56.126.152", "id.orig_p": 11649, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3168, "resp_pkts": 35, "resp_ip_bytes": 2380, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518846Z", "uid": "SH3129752", "id.orig_h": "131.42.117.209", "id.orig_p": 39454, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 804, "resp_pkts": 39, "resp_ip_bytes": 1950, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.518853Z", "uid": "SH2220720", "id.orig_h": "173.53.0.82", "id.orig_p": 63502, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1824, "resp_pkts": 47, "resp_ip_bytes": 2256, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.518860Z", "uid": "SH4707277", "id.orig_h": "196.134.79.79", "id.orig_p": 25578, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2345, "resp_pkts": 23, "resp_ip_bytes": 1242, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.518867Z", "uid": "SH6060799", "id.orig_h": "74.165.131.224", "id.orig_p": 48987, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1725, "resp_pkts": 44, "resp_ip_bytes": 2376, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518873Z", "uid": "SH4953145", "id.orig_h": "125.123.103.182", "id.orig_p": 4089, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 770, "resp_pkts": 20, "resp_ip_bytes": 840, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518884Z", "uid": "SH1469890", "id.orig_h": "135.55.210.223", "id.orig_p": 37002, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2950, "resp_pkts": 46, "resp_ip_bytes": 3542, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.518895Z", "uid": "SH8541882", "id.orig_h": "171.3.171.165", "id.orig_p": 36373, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2142, "resp_pkts": 20, "resp_ip_bytes": 1600, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518904Z", "uid": "SH1874099", "id.orig_h": "170.86.212.161", "id.orig_p": 56457, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 693, "resp_pkts": 45, "resp_ip_bytes": 2340, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518910Z", "uid": "SH1255720", "id.orig_h": "74.146.111.155", "id.orig_p": 1493, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2584, "resp_pkts": 40, "resp_ip_bytes": 2160, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.518917Z", "uid": "SH6631425", "id.orig_h": "116.149.83.216", "id.orig_p": 52136, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2312, "resp_pkts": 46, "resp_ip_bytes": 3312, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.518924Z", "uid": "SH7636461", "id.orig_h": "83.195.24.226", "id.orig_p": 35998, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2530, "resp_pkts": 49, "resp_ip_bytes": 2793, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518931Z", "uid": "SH6628191", "id.orig_h": "125.19.151.3", "id.orig_p": 50436, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2923, "resp_pkts": 19, "resp_ip_bytes": 1254, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518937Z", "uid": "SH3886077", "id.orig_h": "52.173.49.103", "id.orig_p": 16293, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2520, "resp_pkts": 14, "resp_ip_bytes": 826, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.518943Z", "uid": "SH1444982", "id.orig_h": "191.33.181.155", "id.orig_p": 48356, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2112, "resp_pkts": 48, "resp_ip_bytes": 2352, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.518949Z", "uid": "SH9572546", "id.orig_h": "164.89.50.183", "id.orig_p": 54303, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1120, "resp_pkts": 20, "resp_ip_bytes": 820, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.518956Z", "uid": "SH2520156", "id.orig_h": "170.86.212.161", "id.orig_p": 13239, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1640, "resp_pkts": 24, "resp_ip_bytes": 1848, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518966Z", "uid": "SH4672140", "id.orig_h": "3.157.204.249", "id.orig_p": 65412, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1833, "resp_pkts": 15, "resp_ip_bytes": 720, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.518972Z", "uid": "SH4295937", "id.orig_h": "87.143.23.119", "id.orig_p": 35981, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1794, "resp_pkts": 38, "resp_ip_bytes": 1938, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.518978Z", "uid": "SH7066241", "id.orig_h": "83.195.24.226", "id.orig_p": 40642, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1378, "resp_pkts": 23, "resp_ip_bytes": 1656, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.518985Z", "uid": "SH1057773", "id.orig_h": "114.56.126.152", "id.orig_p": 45034, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 560, "resp_pkts": 31, "resp_ip_bytes": 2108, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.519037Z", "uid": "SH8457307", "id.orig_h": "173.53.0.82", "id.orig_p": 52671, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1600, "resp_pkts": 29, "resp_ip_bytes": 1363, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.519044Z", "uid": "SH8178457", "id.orig_h": "110.177.195.150", "id.orig_p": 4155, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2976, "resp_pkts": 11, "resp_ip_bytes": 583, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.519051Z", "uid": "SH6413832", "id.orig_h": "113.173.136.4", "id.orig_p": 25707, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2160, "resp_pkts": 13, "resp_ip_bytes": 793, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519057Z", "uid": "SH2304564", "id.orig_h": "25.47.52.197", "id.orig_p": 37622, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1431, "resp_pkts": 16, "resp_ip_bytes": 1200, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519064Z", "uid": "SH9807771", "id.orig_h": "78.164.1.207", "id.orig_p": 55962, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1120, "resp_pkts": 37, "resp_ip_bytes": 1776, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.519075Z", "uid": "SH1687773", "id.orig_h": "170.86.212.161", "id.orig_p": 19907, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2491, "resp_pkts": 22, "resp_ip_bytes": 924, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519082Z", "uid": "SH7433579", "id.orig_h": "114.56.126.152", "id.orig_p": 21481, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 748, "resp_pkts": 19, "resp_ip_bytes": 779, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.519089Z", "uid": "SH4446656", "id.orig_h": "125.19.151.3", "id.orig_p": 17338, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3105, "resp_pkts": 20, "resp_ip_bytes": 820, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519095Z", "uid": "SH3220449", "id.orig_h": "34.243.90.209", "id.orig_p": 45184, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1080, "resp_pkts": 19, "resp_ip_bytes": 1045, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519102Z", "uid": "SH3933915", "id.orig_h": "110.16.7.177", "id.orig_p": 21440, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 3050, "resp_pkts": 42, "resp_ip_bytes": 3150, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.519108Z", "uid": "SH5045267", "id.orig_h": "216.10.117.99", "id.orig_p": 33251, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2475, "resp_pkts": 24, "resp_ip_bytes": 1680, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519115Z", "uid": "SH8099468", "id.orig_h": "52.173.49.103", "id.orig_p": 4818, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 900, "resp_pkts": 48, "resp_ip_bytes": 2400, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519122Z", "uid": "SH5685189", "id.orig_h": "111.129.222.243", "id.orig_p": 11231, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1218, "resp_pkts": 38, "resp_ip_bytes": 2850, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519128Z", "uid": "SH9520121", "id.orig_h": "4.5.47.4", "id.orig_p": 54203, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2294, "resp_pkts": 35, "resp_ip_bytes": 2695, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519141Z", "uid": "SH6293765", "id.orig_h": "125.123.103.182", "id.orig_p": 57151, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 3010, "resp_pkts": 30, "resp_ip_bytes": 1440, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519151Z", "uid": "SH2665707", "id.orig_h": "105.236.211.106", "id.orig_p": 28962, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2747, "resp_pkts": 24, "resp_ip_bytes": 1896, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519158Z", "uid": "SH2080064", "id.orig_h": "216.10.117.99", "id.orig_p": 53113, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3168, "resp_pkts": 13, "resp_ip_bytes": 975, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519164Z", "uid": "SH5015634", "id.orig_h": "164.89.50.183", "id.orig_p": 4541, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1728, "resp_pkts": 40, "resp_ip_bytes": 1920, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519171Z", "uid": "SH6617850", "id.orig_h": "122.204.186.125", "id.orig_p": 61521, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1180, "resp_pkts": 16, "resp_ip_bytes": 960, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519177Z", "uid": "SH6681735", "id.orig_h": "87.143.23.119", "id.orig_p": 14732, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1292, "resp_pkts": 15, "resp_ip_bytes": 960, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519184Z", "uid": "SH5504565", "id.orig_h": "168.154.125.86", "id.orig_p": 8188, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1104, "resp_pkts": 28, "resp_ip_bytes": 1736, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519191Z", "uid": "SH4137976", "id.orig_h": "83.195.24.226", "id.orig_p": 57890, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1232, "resp_pkts": 31, "resp_ip_bytes": 2449, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519198Z", "uid": "SH1123152", "id.orig_h": "25.47.52.197", "id.orig_p": 44535, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1989, "resp_pkts": 30, "resp_ip_bytes": 2280, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519208Z", "uid": "SH1221634", "id.orig_h": "110.16.7.177", "id.orig_p": 36169, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1440, "resp_pkts": 11, "resp_ip_bytes": 561, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.519214Z", "uid": "SH6926470", "id.orig_h": "83.195.24.226", "id.orig_p": 30300, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1890, "resp_pkts": 14, "resp_ip_bytes": 756, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519221Z", "uid": "SH3180180", "id.orig_h": "74.165.131.224", "id.orig_p": 50684, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 574, "resp_pkts": 49, "resp_ip_bytes": 2940, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519229Z", "uid": "SH1763547", "id.orig_h": "136.169.203.247", "id.orig_p": 38311, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2961, "resp_pkts": 23, "resp_ip_bytes": 1748, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.519239Z", "uid": "SH6838694", "id.orig_h": "105.236.211.106", "id.orig_p": 62050, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1012, "resp_pkts": 23, "resp_ip_bytes": 1334, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519246Z", "uid": "SH5963975", "id.orig_h": "125.19.151.3", "id.orig_p": 61824, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 1968, "resp_pkts": 36, "resp_ip_bytes": 1836, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519253Z", "uid": "SH4361151", "id.orig_h": "25.47.52.197", "id.orig_p": 58032, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1271, "resp_pkts": 43, "resp_ip_bytes": 2236, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519260Z", "uid": "SH4653021", "id.orig_h": "168.154.125.86", "id.orig_p": 45348, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 975, "resp_pkts": 40, "resp_ip_bytes": 1720, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519267Z", "uid": "SH4447871", "id.orig_h": "181.91.226.98", "id.orig_p": 57920, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2139, "resp_pkts": 46, "resp_ip_bytes": 2484, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519276Z", "uid": "SH4884115", "id.orig_h": "110.177.195.150", "id.orig_p": 22961, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2464, "resp_pkts": 49, "resp_ip_bytes": 2597, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.519283Z", "uid": "SH6363338", "id.orig_h": "25.47.52.197", "id.orig_p": 14672, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3036, "resp_pkts": 47, "resp_ip_bytes": 3572, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519290Z", "uid": "SH7301438", "id.orig_h": "196.134.79.79", "id.orig_p": 29042, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1204, "resp_pkts": 35, "resp_ip_bytes": 1540, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.519297Z", "uid": "SH1698922", "id.orig_h": "74.146.111.155", "id.orig_p": 40626, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 574, "resp_pkts": 31, "resp_ip_bytes": 1798, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519303Z", "uid": "SH5138676", "id.orig_h": "125.19.151.3", "id.orig_p": 21193, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3337, "resp_pkts": 24, "resp_ip_bytes": 1344, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519310Z", "uid": "SH5323071", "id.orig_h": "135.176.100.83", "id.orig_p": 27198, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 726, "resp_pkts": 16, "resp_ip_bytes": 1104, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.519316Z", "uid": "SH5700720", "id.orig_h": "196.134.79.79", "id.orig_p": 2442, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1170, "resp_pkts": 27, "resp_ip_bytes": 1134, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.519323Z", "uid": "SH1104828", "id.orig_h": "74.165.131.224", "id.orig_p": 6366, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 3080, "resp_pkts": 16, "resp_ip_bytes": 1040, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519330Z", "uid": "SH8431506", "id.orig_h": "110.16.7.177", "id.orig_p": 8695, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2080, "resp_pkts": 12, "resp_ip_bytes": 480, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519336Z", "uid": "SH3013902", "id.orig_h": "4.5.47.4", "id.orig_p": 28903, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2100, "resp_pkts": 12, "resp_ip_bytes": 480, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519346Z", "uid": "SH4856763", "id.orig_h": "102.213.11.119", "id.orig_p": 53735, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1196, "resp_pkts": 36, "resp_ip_bytes": 2412, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519353Z", "uid": "SH4274132", "id.orig_h": "52.173.49.103", "id.orig_p": 40863, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 972, "resp_pkts": 30, "resp_ip_bytes": 1980, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519359Z", "uid": "SH4152215", "id.orig_h": "212.152.24.209", "id.orig_p": 30191, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1188, "resp_pkts": 47, "resp_ip_bytes": 3572, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519366Z", "uid": "SH3221690", "id.orig_h": "3.157.204.249", "id.orig_p": 43922, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1275, "resp_pkts": 10, "resp_ip_bytes": 660, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519380Z", "uid": "SH8483000", "id.orig_h": "135.176.100.83", "id.orig_p": 19937, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2166, "resp_pkts": 35, "resp_ip_bytes": 2660, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519391Z", "uid": "SH5217947", "id.orig_h": "83.195.24.226", "id.orig_p": 3745, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1950, "resp_pkts": 10, "resp_ip_bytes": 780, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519398Z", "uid": "SH8393204", "id.orig_h": "83.195.24.226", "id.orig_p": 23027, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2990, "resp_pkts": 27, "resp_ip_bytes": 1215, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519404Z", "uid": "SH4243502", "id.orig_h": "110.16.7.177", "id.orig_p": 62702, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1376, "resp_pkts": 18, "resp_ip_bytes": 1368, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519411Z", "uid": "SH4156315", "id.orig_h": "191.47.156.160", "id.orig_p": 48545, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3696, "resp_pkts": 15, "resp_ip_bytes": 810, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519422Z", "uid": "SH6907792", "id.orig_h": "110.16.7.177", "id.orig_p": 29980, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 1800, "resp_pkts": 25, "resp_ip_bytes": 1300, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.519429Z", "uid": "SH3701819", "id.orig_h": "129.164.50.72", "id.orig_p": 53019, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 740, "resp_pkts": 47, "resp_ip_bytes": 1880, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.519436Z", "uid": "SH6977063", "id.orig_h": "105.236.211.106", "id.orig_p": 3363, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 960, "resp_pkts": 45, "resp_ip_bytes": 3015, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519442Z", "uid": "SH4832889", "id.orig_h": "74.146.111.155", "id.orig_p": 23794, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1925, "resp_pkts": 48, "resp_ip_bytes": 3696, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519449Z", "uid": "SH4610653", "id.orig_h": "25.47.52.197", "id.orig_p": 28235, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 2784, "resp_pkts": 34, "resp_ip_bytes": 1734, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519456Z", "uid": "SH9573511", "id.orig_h": "4.5.47.4", "id.orig_p": 10657, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 1804, "resp_pkts": 42, "resp_ip_bytes": 1806, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519466Z", "uid": "SH3983200", "id.orig_h": "111.129.222.243", "id.orig_p": 1236, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 2106, "resp_pkts": 15, "resp_ip_bytes": 1170, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519476Z", "uid": "SH3408115", "id.orig_h": "129.164.50.72", "id.orig_p": 47696, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1824, "resp_pkts": 47, "resp_ip_bytes": 2256, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.519486Z", "uid": "SH9917461", "id.orig_h": "131.42.117.209", "id.orig_p": 64095, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1995, "resp_pkts": 39, "resp_ip_bytes": 2457, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519503Z", "uid": "SH4362645", "id.orig_h": "52.173.49.103", "id.orig_p": 53746, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2025, "resp_pkts": 48, "resp_ip_bytes": 3168, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519514Z", "uid": "SH7465611", "id.orig_h": "212.152.24.209", "id.orig_p": 7846, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1224, "resp_pkts": 42, "resp_ip_bytes": 3360, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519522Z", "uid": "SH2719007", "id.orig_h": "125.19.151.3", "id.orig_p": 43479, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 780, "resp_pkts": 38, "resp_ip_bytes": 1862, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519528Z", "uid": "SH9000867", "id.orig_h": "122.204.186.125", "id.orig_p": 26015, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1127, "resp_pkts": 34, "resp_ip_bytes": 1836, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519534Z", "uid": "SH3921339", "id.orig_h": "171.3.171.165", "id.orig_p": 12343, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 440, "resp_pkts": 37, "resp_ip_bytes": 2294, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519545Z", "uid": "SH2865573", "id.orig_h": "136.169.203.247", "id.orig_p": 40536, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1403, "resp_pkts": 45, "resp_ip_bytes": 1890, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.519551Z", "uid": "SH7672078", "id.orig_h": "171.204.144.93", "id.orig_p": 57685, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 2145, "resp_pkts": 45, "resp_ip_bytes": 2700, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.519558Z", "uid": "SH1228521", "id.orig_h": "87.143.23.119", "id.orig_p": 13427, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2668, "resp_pkts": 24, "resp_ip_bytes": 1776, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519565Z", "uid": "SH9363891", "id.orig_h": "110.177.195.150", "id.orig_p": 3413, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 3192, "resp_pkts": 36, "resp_ip_bytes": 1980, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.519575Z", "uid": "SH1604374", "id.orig_h": "168.154.125.86", "id.orig_p": 28118, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 2508, "resp_pkts": 37, "resp_ip_bytes": 2738, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519585Z", "uid": "SH6423176", "id.orig_h": "181.91.226.98", "id.orig_p": 38186, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 2232, "resp_pkts": 48, "resp_ip_bytes": 3024, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519591Z", "uid": "SH4268677", "id.orig_h": "135.176.100.83", "id.orig_p": 24839, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 780, "resp_pkts": 37, "resp_ip_bytes": 1813, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519598Z", "uid": "SH4873261", "id.orig_h": "111.129.222.243", "id.orig_p": 41644, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1840, "resp_pkts": 44, "resp_ip_bytes": 3036, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519605Z", "uid": "SH6168135", "id.orig_h": "23.111.149.52", "id.orig_p": 38480, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 782, "resp_pkts": 16, "resp_ip_bytes": 944, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.519612Z", "uid": "SH4890391", "id.orig_h": "197.168.76.169", "id.orig_p": 63084, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 732, "resp_pkts": 11, "resp_ip_bytes": 858, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519619Z", "uid": "SH6699864", "id.orig_h": "113.173.136.4", "id.orig_p": 49777, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 43, "orig_ip_bytes": 2494, "resp_pkts": 11, "resp_ip_bytes": 539, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519625Z", "uid": "SH8361126", "id.orig_h": "4.5.47.4", "id.orig_p": 4926, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2520, "resp_pkts": 30, "resp_ip_bytes": 1950, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519632Z", "uid": "SH6983249", "id.orig_h": "31.184.137.182", "id.orig_p": 5258, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1100, "resp_pkts": 38, "resp_ip_bytes": 1976, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519642Z", "uid": "SH7275525", "id.orig_h": "110.16.7.177", "id.orig_p": 59033, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 736, "resp_pkts": 47, "resp_ip_bytes": 2256, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.519651Z", "uid": "SH9857700", "id.orig_h": "135.176.100.83", "id.orig_p": 30482, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 728, "resp_pkts": 18, "resp_ip_bytes": 1026, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.519658Z", "uid": "SH9064873", "id.orig_h": "31.184.137.182", "id.orig_p": 58886, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 22, "orig_ip_bytes": 1474, "resp_pkts": 31, "resp_ip_bytes": 1798, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519665Z", "uid": "SH5654117", "id.orig_h": "172.197.112.108", "id.orig_p": 44588, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 880, "resp_pkts": 28, "resp_ip_bytes": 1148, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.519671Z", "uid": "SH9558144", "id.orig_h": "3.157.204.249", "id.orig_p": 28679, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1360, "resp_pkts": 27, "resp_ip_bytes": 1188, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519678Z", "uid": "SH8233505", "id.orig_h": "52.173.49.103", "id.orig_p": 26619, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2844, "resp_pkts": 35, "resp_ip_bytes": 2310, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519684Z", "uid": "SH5116254", "id.orig_h": "122.204.186.125", "id.orig_p": 47382, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1207, "resp_pkts": 18, "resp_ip_bytes": 720, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519691Z", "uid": "SH4754867", "id.orig_h": "159.193.183.0", "id.orig_p": 58819, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1664, "resp_pkts": 23, "resp_ip_bytes": 1587, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.519698Z", "uid": "SH5554274", "id.orig_h": "83.195.24.226", "id.orig_p": 65486, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1833, "resp_pkts": 42, "resp_ip_bytes": 2520, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519708Z", "uid": "SH2082954", "id.orig_h": "181.91.226.98", "id.orig_p": 16431, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2520, "resp_pkts": 44, "resp_ip_bytes": 3300, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519714Z", "uid": "SH2482083", "id.orig_h": "110.16.7.177", "id.orig_p": 33000, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3588, "resp_pkts": 31, "resp_ip_bytes": 1798, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.519722Z", "uid": "SH7500479", "id.orig_h": "34.243.90.209", "id.orig_p": 3240, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1140, "resp_pkts": 10, "resp_ip_bytes": 700, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519728Z", "uid": "SH2627722", "id.orig_h": "136.169.203.247", "id.orig_p": 27984, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 27, "orig_ip_bytes": 1593, "resp_pkts": 32, "resp_ip_bytes": 2080, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.519736Z", "uid": "SH4725829", "id.orig_h": "125.123.103.182", "id.orig_p": 41947, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2162, "resp_pkts": 27, "resp_ip_bytes": 1917, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "backup"}
{"ts": "2025-04-24T10:20:09.519742Z", "uid": "SH7301347", "id.orig_h": "114.126.110.154", "id.orig_p": 51121, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 1155, "resp_pkts": 13, "resp_ip_bytes": 728, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.519749Z", "uid": "SH5268156", "id.orig_h": "110.177.195.150", "id.orig_p": 57872, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1485, "resp_pkts": 46, "resp_ip_bytes": 3358, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.519756Z", "uid": "SH6398984", "id.orig_h": "34.243.90.209", "id.orig_p": 26550, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 3634, "resp_pkts": 24, "resp_ip_bytes": 1032, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519762Z", "uid": "SH6917936", "id.orig_h": "78.164.1.207", "id.orig_p": 6739, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 680, "resp_pkts": 50, "resp_ip_bytes": 3900, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.519772Z", "uid": "SH8653915", "id.orig_h": "197.168.76.169", "id.orig_p": 18979, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1083, "resp_pkts": 20, "resp_ip_bytes": 1420, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.519779Z", "uid": "SH7705684", "id.orig_h": "116.149.83.216", "id.orig_p": 56641, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 3120, "resp_pkts": 11, "resp_ip_bytes": 484, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519785Z", "uid": "SH7134398", "id.orig_h": "173.53.0.82", "id.orig_p": 64002, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1984, "resp_pkts": 19, "resp_ip_bytes": 969, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.519792Z", "uid": "SH3508052", "id.orig_h": "171.3.171.165", "id.orig_p": 42776, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2262, "resp_pkts": 41, "resp_ip_bytes": 2583, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519798Z", "uid": "SH2494838", "id.orig_h": "136.169.203.247", "id.orig_p": 8791, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1472, "resp_pkts": 36, "resp_ip_bytes": 1872, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.519805Z", "uid": "SH5733202", "id.orig_h": "74.146.111.155", "id.orig_p": 63706, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1568, "resp_pkts": 36, "resp_ip_bytes": 2376, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519812Z", "uid": "SH1263356", "id.orig_h": "191.43.248.137", "id.orig_p": 53800, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 1640, "resp_pkts": 11, "resp_ip_bytes": 462, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.519818Z", "uid": "SH7865698", "id.orig_h": "171.204.144.93", "id.orig_p": 20786, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 24, "orig_ip_bytes": 1080, "resp_pkts": 29, "resp_ip_bytes": 1189, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.519824Z", "uid": "SH9468763", "id.orig_h": "131.42.117.209", "id.orig_p": 33696, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 1715, "resp_pkts": 22, "resp_ip_bytes": 1144, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519830Z", "uid": "SH7122783", "id.orig_h": "4.224.23.39", "id.orig_p": 62649, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 893, "resp_pkts": 24, "resp_ip_bytes": 1296, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519840Z", "uid": "SH8259035", "id.orig_h": "132.199.128.167", "id.orig_p": 62761, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2960, "resp_pkts": 34, "resp_ip_bytes": 2380, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.519848Z", "uid": "SH9848995", "id.orig_h": "135.176.100.83", "id.orig_p": 35321, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1950, "resp_pkts": 21, "resp_ip_bytes": 861, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519855Z", "uid": "SH7859625", "id.orig_h": "34.243.90.209", "id.orig_p": 26607, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1824, "resp_pkts": 33, "resp_ip_bytes": 2046, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519861Z", "uid": "SH4105410", "id.orig_h": "23.111.149.52", "id.orig_p": 38855, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 3600, "resp_pkts": 36, "resp_ip_bytes": 2808, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519868Z", "uid": "SH8505641", "id.orig_h": "4.224.23.39", "id.orig_p": 40276, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1634, "resp_pkts": 36, "resp_ip_bytes": 1908, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519877Z", "uid": "SH1635078", "id.orig_h": "168.154.125.86", "id.orig_p": 53961, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 3075, "resp_pkts": 19, "resp_ip_bytes": 1406, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.519884Z", "uid": "SH7467846", "id.orig_h": "74.165.131.224", "id.orig_p": 11981, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 49, "orig_ip_bytes": 2058, "resp_pkts": 25, "resp_ip_bytes": 1100, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.519895Z", "uid": "SH5226596", "id.orig_h": "216.10.117.99", "id.orig_p": 29874, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1584, "resp_pkts": 26, "resp_ip_bytes": 1248, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519902Z", "uid": "SH5853963", "id.orig_h": "191.47.156.160", "id.orig_p": 29704, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 50, "orig_ip_bytes": 2000, "resp_pkts": 44, "resp_ip_bytes": 2772, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519912Z", "uid": "SH4528208", "id.orig_h": "105.236.211.106", "id.orig_p": 8695, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1120, "resp_pkts": 26, "resp_ip_bytes": 1768, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.519922Z", "uid": "SH6909188", "id.orig_h": "83.195.24.226", "id.orig_p": 23537, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 3572, "resp_pkts": 24, "resp_ip_bytes": 1152, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519929Z", "uid": "SH2602339", "id.orig_h": "125.19.151.3", "id.orig_p": 63345, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 33, "orig_ip_bytes": 1848, "resp_pkts": 12, "resp_ip_bytes": 876, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.519935Z", "uid": "SH6335447", "id.orig_h": "110.16.7.177", "id.orig_p": 32445, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 1404, "resp_pkts": 22, "resp_ip_bytes": 880, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.519942Z", "uid": "SH7667723", "id.orig_h": "23.111.149.52", "id.orig_p": 7303, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 1927, "resp_pkts": 17, "resp_ip_bytes": 1071, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.519948Z", "uid": "SH1881521", "id.orig_h": "113.173.136.4", "id.orig_p": 8285, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 450, "resp_pkts": 27, "resp_ip_bytes": 1728, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.519955Z", "uid": "SH4417748", "id.orig_h": "216.10.117.99", "id.orig_p": 53321, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2553, "resp_pkts": 40, "resp_ip_bytes": 1640, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519961Z", "uid": "SH8885922", "id.orig_h": "212.152.24.209", "id.orig_p": 65481, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 14, "orig_ip_bytes": 1120, "resp_pkts": 37, "resp_ip_bytes": 2775, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.519968Z", "uid": "SH6062511", "id.orig_h": "31.184.137.182", "id.orig_p": 12564, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 3198, "resp_pkts": 25, "resp_ip_bytes": 1250, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.519977Z", "uid": "SH4235787", "id.orig_h": "4.224.23.39", "id.orig_p": 11519, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1330, "resp_pkts": 50, "resp_ip_bytes": 2750, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "alice"}
{"ts": "2025-04-24T10:20:09.519983Z", "uid": "SH5637753", "id.orig_h": "110.177.195.150", "id.orig_p": 30938, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 1672, "resp_pkts": 48, "resp_ip_bytes": 2160, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "test"}
{"ts": "2025-04-24T10:20:09.519992Z", "uid": "SH5277983", "id.orig_h": "171.204.144.93", "id.orig_p": 63936, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1104, "resp_pkts": 37, "resp_ip_bytes": 2960, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "root"}
{"ts": "2025-04-24T10:20:09.519999Z", "uid": "SH1901750", "id.orig_h": "110.177.195.150", "id.orig_p": 17820, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1395, "resp_pkts": 27, "resp_ip_bytes": 1269, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.520005Z", "uid": "SH5943326", "id.orig_h": "105.236.211.106", "id.orig_p": 1507, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 2120, "resp_pkts": 33, "resp_ip_bytes": 2541, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.520012Z", "uid": "SH5215853", "id.orig_h": "125.19.151.3", "id.orig_p": 3775, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 41, "orig_ip_bytes": 2337, "resp_pkts": 19, "resp_ip_bytes": 1045, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "svc_ssh"}
{"ts": "2025-04-24T10:20:09.520018Z", "uid": "SH7118383", "id.orig_h": "31.184.137.182", "id.orig_p": 53729, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2553, "resp_pkts": 33, "resp_ip_bytes": 1848, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.520025Z", "uid": "SH2277834", "id.orig_h": "172.197.112.108", "id.orig_p": 21819, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1406, "resp_pkts": 10, "resp_ip_bytes": 560, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.520033Z", "uid": "SH8666037", "id.orig_h": "197.168.76.169", "id.orig_p": 48053, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2430, "resp_pkts": 37, "resp_ip_bytes": 2479, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520044Z", "uid": "SH9278188", "id.orig_h": "173.53.0.82", "id.orig_p": 23329, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 45, "orig_ip_bytes": 2385, "resp_pkts": 24, "resp_ip_bytes": 1872, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "root"}
{"ts": "2025-04-24T10:20:09.520051Z", "uid": "SH9304309", "id.orig_h": "135.176.100.83", "id.orig_p": 62256, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2700, "resp_pkts": 35, "resp_ip_bytes": 2485, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.520057Z", "uid": "SH1797967", "id.orig_h": "216.10.117.99", "id.orig_p": 50557, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1725, "resp_pkts": 38, "resp_ip_bytes": 1862, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.520063Z", "uid": "SH6481266", "id.orig_h": "171.3.171.165", "id.orig_p": 60267, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2684, "resp_pkts": 30, "resp_ip_bytes": 1830, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "john.doe"}
{"ts": "2025-04-24T10:20:09.520069Z", "uid": "SH3611689", "id.orig_h": "197.168.76.169", "id.orig_p": 48493, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1200, "resp_pkts": 22, "resp_ip_bytes": 1012, "auth_success": false, "auth_attempts": 8, "event_type": "Multiple Failed Authentication Attempts", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520076Z", "uid": "SH2600346", "id.orig_h": "196.134.79.79", "id.orig_p": 16033, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2508, "resp_pkts": 31, "resp_ip_bytes": 1674, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.520082Z", "uid": "SH7590906", "id.orig_h": "172.197.112.108", "id.orig_p": 27450, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1530, "resp_pkts": 49, "resp_ip_bytes": 3577, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.520089Z", "uid": "SH7761128", "id.orig_h": "110.16.7.177", "id.orig_p": 30479, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 35, "orig_ip_bytes": 2590, "resp_pkts": 36, "resp_ip_bytes": 1692, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.520095Z", "uid": "SH2477961", "id.orig_h": "197.168.76.169", "id.orig_p": 60697, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 15, "orig_ip_bytes": 735, "resp_pkts": 16, "resp_ip_bytes": 816, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520105Z", "uid": "SH3019790", "id.orig_h": "171.204.144.93", "id.orig_p": 60053, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 38, "orig_ip_bytes": 3040, "resp_pkts": 36, "resp_ip_bytes": 2448, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "root"}
{"ts": "2025-04-24T10:20:09.520115Z", "uid": "SH1796187", "id.orig_h": "87.143.23.119", "id.orig_p": 17847, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 880, "resp_pkts": 15, "resp_ip_bytes": 1200, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "alice"}
{"ts": "2025-04-24T10:20:09.520122Z", "uid": "SH5112416", "id.orig_h": "110.16.7.177", "id.orig_p": 62923, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1518, "resp_pkts": 26, "resp_ip_bytes": 1612, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.520128Z", "uid": "SH6634199", "id.orig_h": "168.154.125.86", "id.orig_p": 51062, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 1344, "resp_pkts": 50, "resp_ip_bytes": 2150, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.520135Z", "uid": "SH3928035", "id.orig_h": "216.10.117.99", "id.orig_p": 36335, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 1833, "resp_pkts": 11, "resp_ip_bytes": 803, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.520141Z", "uid": "SH7728979", "id.orig_h": "122.204.186.125", "id.orig_p": 55682, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 21, "orig_ip_bytes": 1575, "resp_pkts": 32, "resp_ip_bytes": 2016, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520148Z", "uid": "SH6125679", "id.orig_h": "212.152.24.209", "id.orig_p": 37728, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 1598, "resp_pkts": 13, "resp_ip_bytes": 988, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.520155Z", "uid": "SH7304755", "id.orig_h": "31.184.137.182", "id.orig_p": 40543, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 25, "orig_ip_bytes": 1450, "resp_pkts": 29, "resp_ip_bytes": 1392, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "admin"}
{"ts": "2025-04-24T10:20:09.520161Z", "uid": "SH7295634", "id.orig_h": "132.199.128.167", "id.orig_p": 33230, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2772, "resp_pkts": 16, "resp_ip_bytes": 1088, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.520171Z", "uid": "SH4948401", "id.orig_h": "172.197.112.108", "id.orig_p": 19924, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2016, "resp_pkts": 34, "resp_ip_bytes": 1802, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.520177Z", "uid": "SH1881125", "id.orig_h": "168.154.125.86", "id.orig_p": 40743, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 42, "orig_ip_bytes": 2016, "resp_pkts": 50, "resp_ip_bytes": 2800, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.520184Z", "uid": "SH4236108", "id.orig_h": "147.83.99.54", "id.orig_p": 6150, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 46, "orig_ip_bytes": 2162, "resp_pkts": 48, "resp_ip_bytes": 2496, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.520191Z", "uid": "SH9193934", "id.orig_h": "159.193.183.0", "id.orig_p": 9758, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 30, "orig_ip_bytes": 1260, "resp_pkts": 21, "resp_ip_bytes": 987, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.520202Z", "uid": "SH5273173", "id.orig_h": "74.146.111.155", "id.orig_p": 57287, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 48, "orig_ip_bytes": 3792, "resp_pkts": 22, "resp_ip_bytes": 1122, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.520209Z", "uid": "SH7571770", "id.orig_h": "23.111.149.52", "id.orig_p": 21117, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2240, "resp_pkts": 24, "resp_ip_bytes": 1464, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "service"}
{"ts": "2025-04-24T10:20:09.520215Z", "uid": "SH8754307", "id.orig_h": "147.83.99.54", "id.orig_p": 1942, "id.resp_h": "84.85.166.230", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2414, "resp_pkts": 36, "resp_ip_bytes": 2196, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.520240Z", "uid": "SH5067356", "id.orig_h": "78.164.1.207", "id.orig_p": 41614, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 40, "orig_ip_bytes": 3200, "resp_pkts": 29, "resp_ip_bytes": 1218, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.520247Z", "uid": "SH3383772", "id.orig_h": "111.129.222.243", "id.orig_p": 36733, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 20, "orig_ip_bytes": 1480, "resp_pkts": 21, "resp_ip_bytes": 1407, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.520257Z", "uid": "SH7176805", "id.orig_h": "170.86.212.161", "id.orig_p": 9314, "id.resp_h": "204.226.108.67", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 39, "orig_ip_bytes": 2847, "resp_pkts": 39, "resp_ip_bytes": 2184, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "admin"}
{"ts": "2025-04-24T10:20:09.520264Z", "uid": "SH9506140", "id.orig_h": "125.123.103.182", "id.orig_p": 52497, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 23, "orig_ip_bytes": 1357, "resp_pkts": 11, "resp_ip_bytes": 781, "auth_success": false, "auth_attempts": 7, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.520270Z", "uid": "SH9964094", "id.orig_h": "113.173.136.4", "id.orig_p": 9249, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 16, "orig_ip_bytes": 1216, "resp_pkts": 50, "resp_ip_bytes": 3100, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.520277Z", "uid": "SH6183992", "id.orig_h": "135.176.100.83", "id.orig_p": 53994, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1984, "resp_pkts": 11, "resp_ip_bytes": 484, "auth_success": false, "auth_attempts": 5, "event_type": "Multiple Failed Authentication Attempts", "username": "service"}
{"ts": "2025-04-24T10:20:09.520284Z", "uid": "SH8814302", "id.orig_h": "135.55.210.223", "id.orig_p": 45150, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1360, "resp_pkts": 28, "resp_ip_bytes": 1372, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.520290Z", "uid": "SH4216112", "id.orig_h": "110.16.7.177", "id.orig_p": 12751, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 10, "orig_ip_bytes": 710, "resp_pkts": 50, "resp_ip_bytes": 2900, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.520296Z", "uid": "SH9048764", "id.orig_h": "110.16.7.177", "id.orig_p": 57780, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 26, "orig_ip_bytes": 1872, "resp_pkts": 28, "resp_ip_bytes": 1148, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.520302Z", "uid": "SH9532812", "id.orig_h": "135.176.100.83", "id.orig_p": 45303, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 36, "orig_ip_bytes": 2880, "resp_pkts": 34, "resp_ip_bytes": 1870, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "service"}
{"ts": "2025-04-24T10:20:09.520312Z", "uid": "SH7736581", "id.orig_h": "74.165.131.224", "id.orig_p": 58809, "id.resp_h": "173.96.169.78", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 17, "orig_ip_bytes": 1326, "resp_pkts": 41, "resp_ip_bytes": 2993, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "webmaster"}
{"ts": "2025-04-24T10:20:09.520318Z", "uid": "SH9015922", "id.orig_h": "52.173.49.103", "id.orig_p": 2038, "id.resp_h": "200.6.78.129", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 28, "orig_ip_bytes": 1680, "resp_pkts": 15, "resp_ip_bytes": 825, "auth_success": false, "auth_attempts": 4, "event_type": "Multiple Failed Authentication Attempts", "username": "backup"}
{"ts": "2025-04-24T10:20:09.520328Z", "uid": "SH3733288", "id.orig_h": "191.33.181.155", "id.orig_p": 48420, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 600, "resp_pkts": 37, "resp_ip_bytes": 2886, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "dbadmin"}
{"ts": "2025-04-24T10:20:09.520335Z", "uid": "SH6834613", "id.orig_h": "136.169.203.247", "id.orig_p": 24001, "id.resp_h": "91.14.145.242", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 37, "orig_ip_bytes": 2331, "resp_pkts": 35, "resp_ip_bytes": 2310, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.520341Z", "uid": "SH2884773", "id.orig_h": "25.47.52.197", "id.orig_p": 39995, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2176, "resp_pkts": 43, "resp_ip_bytes": 2451, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.520347Z", "uid": "SH1376022", "id.orig_h": "191.43.248.137", "id.orig_p": 51432, "id.resp_h": "80.101.200.117", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 720, "resp_pkts": 35, "resp_ip_bytes": 1680, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "test"}
{"ts": "2025-04-24T10:20:09.520353Z", "uid": "SH1227174", "id.orig_h": "4.5.47.4", "id.orig_p": 25809, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 18, "orig_ip_bytes": 864, "resp_pkts": 23, "resp_ip_bytes": 1748, "auth_success": true, "auth_attempts": 2, "event_type": "Successful SSH Login", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520363Z", "uid": "SH3617599", "id.orig_h": "132.180.149.17", "id.orig_p": 29140, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 19, "orig_ip_bytes": 1292, "resp_pkts": 21, "resp_ip_bytes": 1533, "auth_success": true, "auth_attempts": 1, "event_type": "Successful SSH Login", "username": "test"}
{"ts": "2025-04-24T10:20:09.520370Z", "uid": "SH8123603", "id.orig_h": "135.55.210.223", "id.orig_p": 3115, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2336, "resp_pkts": 29, "resp_ip_bytes": 1943, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "support"}
{"ts": "2025-04-24T10:20:09.520377Z", "uid": "SH1256288", "id.orig_h": "25.47.52.197", "id.orig_p": 6125, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 11, "orig_ip_bytes": 693, "resp_pkts": 16, "resp_ip_bytes": 704, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "alice"}
{"ts": "2025-04-24T10:20:09.520383Z", "uid": "SH1030695", "id.orig_h": "197.168.76.169", "id.orig_p": 17873, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 47, "orig_ip_bytes": 2350, "resp_pkts": 40, "resp_ip_bytes": 1920, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "svc_user"}
{"ts": "2025-04-24T10:20:09.520393Z", "uid": "SH9627732", "id.orig_h": "172.197.112.108", "id.orig_p": 9250, "id.resp_h": "187.104.79.154", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 34, "orig_ip_bytes": 2516, "resp_pkts": 17, "resp_ip_bytes": 901, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "support"}
{"ts": "2025-04-24T10:20:09.520399Z", "uid": "SH3962448", "id.orig_h": "3.157.204.249", "id.orig_p": 64889, "id.resp_h": "133.183.125.94", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 32, "orig_ip_bytes": 2496, "resp_pkts": 30, "resp_ip_bytes": 1200, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "sysadmin"}
{"ts": "2025-04-24T10:20:09.520406Z", "uid": "SH6085376", "id.orig_h": "78.164.1.207", "id.orig_p": 32776, "id.resp_h": "170.170.25.84", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 13, "orig_ip_bytes": 910, "resp_pkts": 42, "resp_ip_bytes": 3066, "auth_success": null, "auth_attempts": 0, "event_type": "Connection Without Authentication", "username": "oracle"}
{"ts": "2025-04-24T10:20:09.520412Z", "uid": "SH7474752", "id.orig_h": "206.121.122.80", "id.orig_p": 35876, "id.resp_h": "164.254.24.82", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 12, "orig_ip_bytes": 492, "resp_pkts": 19, "resp_ip_bytes": 855, "auth_success": false, "auth_attempts": 6, "event_type": "Multiple Failed Authentication Attempts", "username": "deploy"}
{"ts": "2025-04-24T10:20:09.520419Z", "uid": "SH7069381", "id.orig_h": "212.152.24.209", "id.orig_p": 25861, "id.resp_h": "123.158.160.191", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 44, "orig_ip_bytes": 2068, "resp_pkts": 36, "resp_ip_bytes": 2160, "auth_success": false, "auth_attempts": 1, "event_type": "Failed SSH Login", "username": "ubuntu"}
{"ts": "2025-04-24T10:20:09.520425Z", "uid": "SH7994674", "id.orig_h": "125.19.151.3", "id.orig_p": 41255, "id.resp_h": "164.186.59.85", "id.resp_p": 22, "proto": "tcp", "conn_state": "SF", "missed_bytes": 0, "history": "ShADadfF", "orig_pkts": 31, "orig_ip_bytes": 1519, "resp_pkts": 18, "resp_ip_bytes": 936, "auth_success": true, "auth_attempts": 3, "event_type": "Successful SSH Login", "username": "svc_ssh"}