[
 {
  "id": "364747fc-ec9b-48cb-8c58-52d229e4e448",
  "name": "grumpy-thrifty-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42906,
  "username": "sugi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:41:23.496432+00:00",
  "ended_at": "2026-08-25T23:41:25.369112+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "4523835d-b773-410d-b8f2-97a797e420c1",
  "name": "tender-kindly-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52610,
  "username": "sugi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:40:52.654576+00:00",
  "ended_at": "2026-08-25T23:41:25.367574+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f5af030e-15d7-42d5-9389-6146af73813a",
  "name": "proud-distant-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34490,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:40:26.920073+00:00",
  "ended_at": "2026-08-25T23:40:28.651858+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e126b4fe-f5cd-4ede-82a6-73f5a3a319c2",
  "name": "brave-bold-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:40:02.287124+00:00",
  "ended_at": "2026-08-25T23:40:03.755392+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bca090cf-b18c-4a76-8f96-1f5e768532da",
  "name": "genial-steady-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:39:38.098050+00:00",
  "ended_at": "2026-08-25T23:39:39.352084+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b3ea0fd4-4acf-455d-b3d1-533fbf03d606",
  "name": "muted-lively-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46540,
  "username": "nvidia",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:39:14.935247+00:00",
  "ended_at": "2026-08-25T23:39:16.752061+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f458f580-865f-4b38-bcc1-2891895ac45c",
  "name": "thorny-shaded-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49338,
  "username": "nexus",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:39:03.913284+00:00",
  "ended_at": "2026-08-25T23:39:05.813661+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "6191cd38-89b3-4af0-8cb1-9479d1228ed4",
  "name": "patient-burly-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39194,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:38:50.958198+00:00",
  "ended_at": "2026-08-25T23:38:53.307826+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "262eb686-8146-4ae2-ac82-d71f263c0bca",
  "name": "gallant-plucky-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39184,
  "username": "nexus",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:38:33.110895+00:00",
  "ended_at": "2026-08-25T23:39:05.814882+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "91929bb2-02b5-443d-bc6f-7cf1c45f4495",
  "name": "tidal-shifting-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:38:01.938454+00:00",
  "ended_at": "2026-08-25T23:38:03.174863+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "37758d2b-07d7-4598-b4e1-70bb522224a7",
  "name": "jolly-rugged-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 44614,
  "username": "www",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:37:40.196506+00:00",
  "ended_at": "2026-08-25T23:37:41.936785+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0f9fbcdc-0ae6-4729-9b74-181724cdae19",
  "name": "genial-languid-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59526,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:37:17.190397+00:00",
  "ended_at": "2026-08-25T23:37:19.172251+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "682a1cba-8a04-4562-9b25-e5572c2692aa",
  "name": "earnest-blazing-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49742,
  "username": "guest",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:36:55.851389+00:00",
  "ended_at": "2026-08-25T23:36:58.097709+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "eaf16cee-0e20-4788-9f8f-76d384ac5ade",
  "name": "subtle-wiry-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55222,
  "username": "test2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:36:41.548782+00:00",
  "ended_at": "2026-08-25T23:36:43.015441+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "e1293800-9f4a-49c4-8f5f-485ddeaaba22",
  "name": "solar-prairie-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38702,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:36:32.468076+00:00",
  "ended_at": "2026-08-25T23:36:34.552030+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "797faa35-72e8-478e-9dd5-c18d9fde1a20",
  "name": "vaulted-ginger-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50102,
  "username": "yarn",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:36:19.469020+00:00",
  "ended_at": "2026-08-25T23:36:21.105119+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "7eae1f0f-18e1-49f3-8739-5b4ff274b3ab",
  "name": "craggy-mossy-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 57190,
  "username": "test2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:36:10.778574+00:00",
  "ended_at": "2026-08-25T23:36:43.018149+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "822fca6e-d052-46da-91f1-56ecd5c77681",
  "name": "supple-vivid-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55216,
  "username": "yarn",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:35:48.519923+00:00",
  "ended_at": "2026-08-25T23:36:21.107243+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e07ec24a-5dba-4755-9553-4a99af21f1ee",
  "name": "buoyant-flinty-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:35:20.410221+00:00",
  "ended_at": "2026-08-25T23:35:22.356091+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e3f8f8b2-3a52-49dd-a8a0-ab06e7a797eb",
  "name": "rugged-somber-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40806,
  "username": "awsgui",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:35:05.747250+00:00",
  "ended_at": "2026-08-25T23:35:08.023095+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1fe7988a-0012-404d-91bc-5f18413a9c3f",
  "name": "rambling-faded-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45938,
  "username": "dolphinscheduler",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:34:57.364746+00:00",
  "ended_at": "2026-08-25T23:34:59.514185+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0903ceb3-0d01-4bf1-a360-a91c0f29f658",
  "name": "muted-lucid-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45934,
  "username": "awsgui",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:34:34.944249+00:00",
  "ended_at": "2026-08-25T23:35:08.024439+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fcad513-209d-421e-a0c7-81b876440d02",
  "name": "jovial-snowy-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49234,
  "username": "uftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:34:07.675480+00:00",
  "ended_at": "2026-08-25T23:34:08.892493+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f729eb7b-5160-4fcb-bf0a-12051a0e622b",
  "name": "steady-boreal-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47422,
  "username": "ftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:33:45.142559+00:00",
  "ended_at": "2026-08-25T23:33:46.929195+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a1da6eb3-eae9-489a-9c19-2490bac80337",
  "name": "rugged-granite-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51674,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:33:23.706174+00:00",
  "ended_at": "2026-08-25T23:33:25.040941+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0d8c4104-b325-4c73-b3d6-9b86696da4c3",
  "name": "deft-jagged-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:32:58.643437+00:00",
  "ended_at": "2026-08-25T23:33:00.484658+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "32e71fbb-6332-46e2-bac0-3259968a4a9f",
  "name": "crystal-pristine-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59746,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:32:35.064535+00:00",
  "ended_at": "2026-08-25T23:32:36.676025+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "72eb8e20-fac8-4875-a83b-b5a53ac454c4",
  "name": "drifting-feathered-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35056,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:32:11.689401+00:00",
  "ended_at": "2026-08-25T23:32:13.414041+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b1058540-7f77-4df5-8c56-24dd79b5b619",
  "name": "humble-sooty-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 44218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:47.164014+00:00",
  "ended_at": "2026-08-25T23:31:48.739430+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f6e4a9eb-2c29-4582-9e68-027bdcd99917",
  "name": "autumn-curious-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:25.572135+00:00",
  "ended_at": "2026-08-25T23:31:27.355846+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9aff9bc9-bfe6-4199-849d-bc9d35288304",
  "name": "pewter-nimble-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:00.395067+00:00",
  "ended_at": "2026-08-25T23:31:02.678617+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1038bb2e-415c-492d-8e2c-43afaef19092",
  "name": "hazy-opal-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54648,
  "username": "rabbitmq",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:30:48.612098+00:00",
  "ended_at": "2026-08-25T23:30:50.914611+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b40fb284-329c-48fa-b6dd-d48fc09e3161",
  "name": "cobalt-golden-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:30:38.790313+00:00",
  "ended_at": "2026-08-25T23:30:41.014329+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d0e7926c-b225-468b-9c72-621eeb18230e",
  "name": "emerald-tidal-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 34830,
  "username": "rabbitmq",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:30:17.781717+00:00",
  "ended_at": "2026-08-25T23:30:50.912665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "37a10140-f210-4995-9a4d-35b92e761b9f",
  "name": "nautical-tidal-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50520,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:50.033387+00:00",
  "ended_at": "2026-08-25T23:29:51.221063+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6f121324-7329-4516-86ba-d41991b0b195",
  "name": "ancient-weathered-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:28.425703+00:00",
  "ended_at": "2026-08-25T23:29:30.511673+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a9f8d7a1-9ab3-4273-84b9-6a35bfb41aed",
  "name": "early-dusky-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:04.595096+00:00",
  "ended_at": "2026-08-25T23:29:06.342817+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "75e47122-257b-44a3-aebf-02b857736180",
  "name": "umber-cunning-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43400,
  "username": "deploy",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:28:40.479266+00:00",
  "ended_at": "2026-08-25T23:28:42.616111+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6496b886-e5a3-48c1-9a3b-687984539247",
  "name": "wooded-primal-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41278,
  "username": "flask",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:28:17.544368+00:00",
  "ended_at": "2026-08-25T23:28:18.600530+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8ac7037e-28ab-4099-85d8-9ddc2d4f14e3",
  "name": "tender-austere-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53238,
  "username": "esadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:28:01.778746+00:00",
  "ended_at": "2026-08-25T23:28:03.835542+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "4b325213-5fa0-4e20-a760-50faafc89428",
  "name": "sooty-gentle-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:27:53.962773+00:00",
  "ended_at": "2026-08-25T23:27:56.163661+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ee8baafe-679f-4681-a7da-fabaf88bcdb1",
  "name": "amiable-early-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 54576,
  "username": "esadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:27:30.899394+00:00",
  "ended_at": "2026-08-25T23:28:03.833873+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8640333f-129f-4dad-8ec7-df7542b96070",
  "name": "bashful-mindful-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:27:06.559150+00:00",
  "ended_at": "2026-08-25T23:27:08.743227+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "432286b9-a85b-4355-9b35-b0bdb0dba822",
  "name": "mossy-daring-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55786,
  "username": "ubuntu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:26:42.728379+00:00",
  "ended_at": "2026-08-25T23:26:44.754720+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "812171e8-50f6-4dcf-ae81-d6bdfb3d52e3",
  "name": "austere-upland-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45926,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:26:19.355094+00:00",
  "ended_at": "2026-08-25T23:26:21.048818+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8c7ac0bd-f003-43d7-8160-b00468e4b71a",
  "name": "misty-ginger-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42428,
  "username": "svnuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:25:53.112653+00:00",
  "ended_at": "2026-08-25T23:25:54.703836+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ecce8467-130d-4a39-a923-b31c8f0b7e26",
  "name": "russet-hushed-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:25:31.816023+00:00",
  "ended_at": "2026-08-25T23:25:34.104861+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4f944582-7cc5-4be4-ad32-a5889f8fccd4",
  "name": "prairie-cunning-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34772,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:25:06.431636+00:00",
  "ended_at": "2026-08-25T23:25:07.933874+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ddee176d-2aef-4008-8e8a-1691adc37684",
  "name": "smooth-placid-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:24:44.407457+00:00",
  "ended_at": "2026-08-25T23:24:46.548675+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "24ef35dd-c694-4269-82ee-c28c7f91a0df",
  "name": "vivid-honest-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:24:17.294240+00:00",
  "ended_at": "2026-08-25T23:24:19.651686+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "fc4f9cfd-1d93-481a-bf0a-82854a2804bf",
  "name": "noble-feral-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:55.064744+00:00",
  "ended_at": "2026-08-25T23:23:56.673712+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8ec1c16b-c93a-4a2b-97e2-e80a16ef1241",
  "name": "bashful-nimble-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:32.885365+00:00",
  "ended_at": "2026-08-25T23:23:34.877457+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c19fdfd2-fb55-40ad-8d7e-a1ebe345b7f4",
  "name": "hushed-tender-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37826,
  "username": "oceanbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:20.708739+00:00",
  "ended_at": "2026-08-25T23:23:22.916448+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "d8a198fe-15cf-4bc4-8bc9-84faafb77620",
  "name": "electric-blazing-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50606,
  "username": "lighthouse",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:09.227149+00:00",
  "ended_at": "2026-08-25T23:23:10.322783+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4079c007-6b85-417e-853e-ac627511017b",
  "name": "sterling-leafy-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 48652,
  "username": "oceanbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:22:49.810929+00:00",
  "ended_at": "2026-08-25T23:23:22.913768+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a533b38-c184-45f3-9eda-5646483cd2e5",
  "name": "misty-blazing-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49090,
  "username": "dev",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:22:21.704965+00:00",
  "ended_at": "2026-08-25T23:22:23.824744+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f35a583a-2b41-4b40-a0a3-546a7d76428a",
  "name": "loyal-wooded-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49376,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:21:58.382786+00:00",
  "ended_at": "2026-08-25T23:21:59.519539+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0e04c071-e7d2-4102-bb0a-a528298a4d92",
  "name": "feathered-nautical-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50300,
  "username": "dolphinscheduler",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:21:33.177360+00:00",
  "ended_at": "2026-08-25T23:21:35.404546+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5551b5e7-cdb2-4099-9fca-6fe49e73f572",
  "name": "electric-watchful-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33652,
  "username": "oscar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:21:13.939623+00:00",
  "ended_at": "2026-08-25T23:21:15.393661+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b4bbfafc-55cd-413f-8a3e-851297ea4721",
  "name": "jaunty-misty-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36594,
  "username": "dev",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:20:46.685651+00:00",
  "ended_at": "2026-08-25T23:20:48.938053+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "3cb69daa-489e-4e55-8c25-554a1246fe26",
  "name": "upland-leafy-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50446,
  "username": "demo",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:20:35.185236+00:00",
  "ended_at": "2026-08-25T23:20:37.133716+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "e006121a-d1ea-4413-b1e2-c47d98f66247",
  "name": "fleeting-sturdy-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35192,
  "username": "deploy",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:20:22.118201+00:00",
  "ended_at": "2026-08-25T23:20:23.696913+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5fa150a6-2133-497c-b0e9-e302673b8100",
  "name": "pleasant-rustic-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56268,
  "username": "deploy",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:20:09.020679+00:00",
  "ended_at": "2026-08-25T23:20:10.150793+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "aa7dc714-669d-4b8f-b847-96b828e3539f",
  "name": "tidal-gilded-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 35180,
  "username": "demo",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:20:04.229185+00:00",
  "ended_at": "2026-08-25T23:20:37.130146+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9335ff3-0cb9-4a57-b1c8-5a4890b0808c",
  "name": "civil-feral-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 47978,
  "username": "deploy",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:19:38.134529+00:00",
  "ended_at": "2026-08-25T23:20:10.152065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9d5bd06-b08a-41f7-ba81-b46b09ef0050",
  "name": "quiet-honest-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:19:12.204670+00:00",
  "ended_at": "2026-08-25T23:19:13.293563+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c625840a-c589-4061-95e9-99e6be377484",
  "name": "grumpy-dusky-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47582,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:18:50.553245+00:00",
  "ended_at": "2026-08-25T23:18:52.316493+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "03642040-b55d-4e81-8fa3-269d8ee185fe",
  "name": "sunlit-gilded-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36982,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:18:25.796570+00:00",
  "ended_at": "2026-08-25T23:18:26.862842+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "60425efc-fb15-4c94-9204-7e50043659d7",
  "name": "barren-jagged-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48580,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:18:02.378774+00:00",
  "ended_at": "2026-08-25T23:18:03.537479+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4fe84a25-3e56-42cf-84c1-d9ff2e216288",
  "name": "sleepy-hazel-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48628,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:17:39.547895+00:00",
  "ended_at": "2026-08-25T23:17:41.083541+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4f74e156-5593-49e6-8308-0c5615ca722a",
  "name": "gnarled-hazel-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60322,
  "username": "worker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:17:16.658686+00:00",
  "ended_at": "2026-08-25T23:17:18.106874+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "116eb925-99a4-4036-8397-2f140a038aed",
  "name": "rugged-windswept-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:16:53.462846+00:00",
  "ended_at": "2026-08-25T23:16:55.474269+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9313111f-1ea5-4a5d-8f7d-46d752780560",
  "name": "plush-watchful-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56050,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:16:28.847521+00:00",
  "ended_at": "2026-08-25T23:16:30.451506+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "476c3bb6-f301-443c-bec0-9d00f04a3f44",
  "name": "prairie-meadow-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52318,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:16:04.958248+00:00",
  "ended_at": "2026-08-25T23:16:06.918698+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "2558f8c1-5fb4-4f70-96eb-267902a77eef",
  "name": "misty-fabled-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39928,
  "username": "vagrant",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:15:52.633791+00:00",
  "ended_at": "2026-08-25T23:15:54.458808+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "3d1a1dcb-d0f6-4a3a-9709-da5b8549dce5",
  "name": "nameless-grumpy-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45128,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:15:40.162966+00:00",
  "ended_at": "2026-08-25T23:15:41.951233+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1a4c6365-2f78-46f4-a560-93d33abf5157",
  "name": "frugal-earnest-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56038,
  "username": "vagrant",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:15:21.734763+00:00",
  "ended_at": "2026-08-25T23:15:54.460368+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e1409f46-b470-4d7d-be24-370c7fb9b399",
  "name": "russet-gnarled-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45764,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:14:55.184474+00:00",
  "ended_at": "2026-08-25T23:14:56.794622+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bd540ce0-1371-4101-b40c-2ac9f5ea7846",
  "name": "wistful-hearty-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52772,
  "username": "elsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:14:31.170546+00:00",
  "ended_at": "2026-08-25T23:14:32.672013+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bf722d80-439b-43de-87c6-8ee235f42743",
  "name": "arctic-bitter-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48326,
  "username": "tomcat",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:14:06.726570+00:00",
  "ended_at": "2026-08-25T23:14:08.444233+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9e94cb58-9cae-4fbc-a656-97406ac3851d",
  "name": "marine-noble-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50148,
  "username": "guest",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:13:42.090917+00:00",
  "ended_at": "2026-08-25T23:13:44.094285+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7dfdf601-f858-412e-af0e-3dbfe3902f7d",
  "name": "earnest-prickly-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59132,
  "username": "dev",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:13:19.618503+00:00",
  "ended_at": "2026-08-25T23:13:20.984386+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8117e1f0-ceaf-4633-bb0c-eaa85545e128",
  "name": "dappled-prairie-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55438,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:12:58.388625+00:00",
  "ended_at": "2026-08-25T23:13:00.018908+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6f85ae6c-2c47-4f3b-956e-69c00d575e7c",
  "name": "eager-blazing-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:12:31.535942+00:00",
  "ended_at": "2026-08-25T23:12:33.169566+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ab03db24-11bb-4a82-9013-6aeb02fc90ea",
  "name": "murky-regal-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48516,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:12:19.301366+00:00",
  "ended_at": "2026-08-25T23:12:20.591327+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "8a11f65b-b2be-4174-8846-8f4bc8ef4ca7",
  "name": "jaunty-idle-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43494,
  "username": "docker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:12:08.727841+00:00",
  "ended_at": "2026-08-25T23:12:09.936421+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4a6d5750-734b-442a-b022-8884a0e5b774",
  "name": "merry-muted-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 33668,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:11:48.462272+00:00",
  "ended_at": "2026-08-25T23:12:20.592599+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "95f1a033-11e6-4361-aa90-849f7bf83817",
  "name": "vaulted-noble-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38568,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:11:20.282707+00:00",
  "ended_at": "2026-08-25T23:11:21.445527+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "50dca2de-61af-484c-b41b-6b17bf9eeeeb",
  "name": "placid-icy-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60638,
  "username": "www",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:10:57.921351+00:00",
  "ended_at": "2026-08-25T23:10:59.046022+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8ee7a36b-552f-4cf0-95bf-f2cab01cfbad",
  "name": "shaded-idle-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:10:33.249532+00:00",
  "ended_at": "2026-08-25T23:10:34.925466+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bbd2d962-94d9-4140-8b95-640c89eebd0a",
  "name": "regal-gentle-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51244,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:10:10.781636+00:00",
  "ended_at": "2026-08-25T23:10:12.125591+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d55fc65e-d62c-43dd-b97c-93a0da6428a7",
  "name": "grumpy-sterling-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36590,
  "username": "mongodb",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:09:58.986648+00:00",
  "ended_at": "2026-08-25T23:10:00.905755+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b86e38a3-4416-4f7e-94b0-3c21d0ae234f",
  "name": "glacial-subtle-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46836,
  "username": "mongodb",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:09:47.294795+00:00",
  "ended_at": "2026-08-25T23:09:49.077468+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7bc9c69b-7db5-41a3-9df5-bf7e897d8f29",
  "name": "glassy-quiet-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 46834,
  "username": "mongodb",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:09:28.035136+00:00",
  "ended_at": "2026-08-25T23:10:00.904611+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33272201-111b-459f-866c-e2b86a6f41ac",
  "name": "airy-placid-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50844,
  "username": "ftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:09:00.600782+00:00",
  "ended_at": "2026-08-25T23:09:02.227308+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "91350c07-831c-4aa5-92a0-39aef5093b10",
  "name": "cosmic-snowy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:08:36.359447+00:00",
  "ended_at": "2026-08-25T23:08:37.602469+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5b74d77a-326c-4cea-ae5b-7df41f4ed8ed",
  "name": "downy-balmy-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33114,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:08:12.573136+00:00",
  "ended_at": "2026-08-25T23:08:14.177004+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ff925ba7-4d21-4d57-9d7d-546761d6792f",
  "name": "candid-rustic-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:51.082994+00:00",
  "ended_at": "2026-08-25T23:07:53.270328+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1eb80850-6aaa-46c8-a7df-0d6e95e6ec57",
  "name": "honest-patient-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46648,
  "username": "nvidia",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:35.048650+00:00",
  "ended_at": "2026-08-25T23:07:36.914958+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "ae961457-9065-4d1f-82e5-b4a51c976552",
  "name": "leafy-dewy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 463,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:25.505641+00:00",
  "ended_at": "2026-08-25T23:07:26.904018+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "59ac4c13-c6e2-4d5e-924e-b1e4f58c0239",
  "name": "salty-distant-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55450,
  "username": "ubnt",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:11.891716+00:00",
  "ended_at": "2026-08-25T23:07:13.958258+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1c26723b-f9a2-4d0f-8e5c-892a213cc19a",
  "name": "rustic-honest-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 59440,
  "username": "nvidia",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:07:04.120613+00:00",
  "ended_at": "2026-08-25T23:07:36.913832+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6018198f-ba0d-4f95-b083-90d9b796ae1a",
  "name": "tranquil-tidal-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39336,
  "username": "ubnt",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:06:40.999235+00:00",
  "ended_at": "2026-08-25T23:07:13.956901+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5810a33-7838-422a-b72c-bcd902fda84e",
  "name": "quiet-sooty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48976,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:06:16.010839+00:00",
  "ended_at": "2026-08-25T23:06:17.557652+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "81986983-ad1c-4011-adf6-68b8b682401b",
  "name": "keen-peaty-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42622,
  "username": "gitlab-runner",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:06:01.765566+00:00",
  "ended_at": "2026-08-25T23:06:02.914723+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b331a737-92e9-4424-b43b-7219a9b77516",
  "name": "glassy-fringed-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53212,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:05:53.733689+00:00",
  "ended_at": "2026-08-25T23:05:55.971909+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "2ddcd8e8-8afe-4cf2-a25f-66878ea1de07",
  "name": "frugal-zealous-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45304,
  "username": "gitlab-runner",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:05:30.975080+00:00",
  "ended_at": "2026-08-25T23:06:02.913278+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "daf8791d-4761-4da7-87c4-cbb35db45f18",
  "name": "bold-languid-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58202,
  "username": "flink",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:05:05.493691+00:00",
  "ended_at": "2026-08-25T23:05:07.088225+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "3a08ac23-a703-4065-86d0-1e407ee6fc2d",
  "name": "nameless-gleaming-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53356,
  "username": "uftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:04:40.429336+00:00",
  "ended_at": "2026-08-25T23:04:42.147521+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "cea076b0-d9d1-401d-a8d3-dfa9034c3d70",
  "name": "breezy-hazel-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58116,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:04:15.251722+00:00",
  "ended_at": "2026-08-25T23:04:17.309450+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "49fd3e05-61bf-4bc7-af5f-6a96a2955e98",
  "name": "burly-peaty-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:03:53.236535+00:00",
  "ended_at": "2026-08-25T23:03:54.489748+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e5f03f98-c251-42f5-a6c5-59d487674eef",
  "name": "zealous-stoic-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48020,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:03:31.851803+00:00",
  "ended_at": "2026-08-25T23:03:33.894085+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "06e2cd89-6cf9-4fb5-9e39-db75eb29b842",
  "name": "sullen-crimson-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:03:07.907067+00:00",
  "ended_at": "2026-08-25T23:03:09.384906+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "76d14686-e95c-4f9b-9bb2-3931019ff9d3",
  "name": "fickle-gentle-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:02:42.821463+00:00",
  "ended_at": "2026-08-25T23:02:44.628803+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a3bc1398-f368-4b5d-896b-fcf73a8da5aa",
  "name": "crimson-airy-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48234,
  "username": "www",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:02:19.271102+00:00",
  "ended_at": "2026-08-25T23:02:20.361143+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0293fb81-e291-4a5e-89d1-d58bea830676",
  "name": "golden-flinty-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50020,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:01:54.453092+00:00",
  "ended_at": "2026-08-25T23:01:56.122899+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "660ae658-0c80-4915-a036-00f9fde51ccb",
  "name": "forlorn-patient-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53912,
  "username": "tools",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:01:33.629398+00:00",
  "ended_at": "2026-08-25T23:01:35.239935+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6ce679a9-dfa8-4ba8-8d0f-203a1922ace4",
  "name": "mindful-oaken-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47310,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:01:08.692687+00:00",
  "ended_at": "2026-08-25T23:01:10.281373+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "fddc5223-0013-48fe-958e-663900614d54",
  "name": "solemn-rambling-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:00:45.587392+00:00",
  "ended_at": "2026-08-25T23:00:47.145456+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "581331c5-8699-48be-8131-823d10e42ed9",
  "name": "feathered-hushed-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57768,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:00:20.677297+00:00",
  "ended_at": "2026-08-25T23:00:22.602738+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "24745256-d9ec-42c3-8b42-37ffa1fd2906",
  "name": "diligent-brisk-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49126,
  "username": "default",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:00:07.143151+00:00",
  "ended_at": "2026-08-25T23:00:08.697206+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "da260d66-0411-4cce-9086-131110068031",
  "name": "seaward-tender-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48356,
  "username": "tomcat",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:59:58.416453+00:00",
  "ended_at": "2026-08-25T22:59:59.995959+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "2e0f0d0d-548a-4931-b00e-5b352c3103b5",
  "name": "buoyant-barren-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45636,
  "username": "default",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:59:36.391438+00:00",
  "ended_at": "2026-08-25T23:00:08.698324+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f27b182d-caf9-4bef-8682-de9a16dbd7ae",
  "name": "steady-brazen-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55560,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:59:12.156932+00:00",
  "ended_at": "2026-08-25T22:59:14.500413+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c9f2a910-903e-4c13-b4b5-9cf03e1261a6",
  "name": "thorny-plush-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:58:47.893711+00:00",
  "ended_at": "2026-08-25T22:58:49.435843+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "050fb188-567a-4f79-b55e-7346a7f619a4",
  "name": "kindly-northern-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52976,
  "username": "elastic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:58:24.774287+00:00",
  "ended_at": "2026-08-25T22:58:27.057137+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6f5eb11a-ff73-4e26-ba7e-57d8ca541a74",
  "name": "fleeting-prairie-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34330,
  "username": "ftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:58:01.764803+00:00",
  "ended_at": "2026-08-25T22:58:04.179175+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "745d9813-8f01-4e53-8de3-1bcdeb060a99",
  "name": "quiet-rugged-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42082,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:57:38.172715+00:00",
  "ended_at": "2026-08-25T22:57:39.372036+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "87772c80-63c1-4ceb-b841-a7cb1e15dbf6",
  "name": "gleaming-dewy-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35954,
  "username": "debianuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:57:23.139154+00:00",
  "ended_at": "2026-08-25T22:57:24.195840+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "94ca28bd-a222-44a6-88eb-29197253cff0",
  "name": "golden-regal-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39090,
  "username": "ranger",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:57:12.625781+00:00",
  "ended_at": "2026-08-25T22:57:14.474022+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4ad2821c-d2c1-4f69-8120-c7c5a7957200",
  "name": "twilight-jovial-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57450,
  "username": "bot",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:56:59.272450+00:00",
  "ended_at": "2026-08-25T22:57:00.683764+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "3daf0a44-c84b-49d7-9fa1-eeda03feefce",
  "name": "glacial-nimble-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39088,
  "username": "debianuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:56:52.273722+00:00",
  "ended_at": "2026-08-25T22:57:24.195088+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a929196-3260-4457-8df4-9093bff67605",
  "name": "crystal-mottled-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55060,
  "username": "bot",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:56:28.345544+00:00",
  "ended_at": "2026-08-25T22:57:00.684991+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "638bc828-59ec-4a84-baf4-f2f116506e98",
  "name": "ashen-kindly-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36606,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:56:03.744382+00:00",
  "ended_at": "2026-08-25T22:56:06.073057+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "015ab64a-1de0-4744-bb3f-e4b620de7a06",
  "name": "crisp-prickly-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55100,
  "username": "kubernetes",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:55:49.576628+00:00",
  "ended_at": "2026-08-25T22:55:51.875941+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "bbae8cf0-107c-4bab-aeca-a2673986fd4a",
  "name": "silent-knotted-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54268,
  "username": "observer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:55:39.274644+00:00",
  "ended_at": "2026-08-25T22:55:40.758050+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b4c51f1a-cd5b-4b52-9152-d69890cfa5e4",
  "name": "kindly-candid-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 51842,
  "username": "kubernetes",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:55:18.749160+00:00",
  "ended_at": "2026-08-25T22:55:51.873062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21135fcd-5816-4bb2-b89b-5bc43836d929",
  "name": "tawny-hushed-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50474,
  "username": "zabbix",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:54:53.468678+00:00",
  "ended_at": "2026-08-25T22:54:54.968000+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "184dae14-0953-48f9-900e-1ad58f770beb",
  "name": "muted-candid-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:54:29.233103+00:00",
  "ended_at": "2026-08-25T22:54:30.727557+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "dc61c859-19b1-4194-94fb-e09df5e5fa40",
  "name": "cheerful-wooded-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:54:08.770461+00:00",
  "ended_at": "2026-08-25T22:54:09.945409+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5284bc49-d3fd-4077-bdea-f1fae6c41d67",
  "name": "jolly-velvet-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34102,
  "username": "tomcat",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:53:50.001759+00:00",
  "ended_at": "2026-08-25T22:53:51.507051+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "d6da8855-69fe-4798-b318-d1430468e05b",
  "name": "jagged-lanky-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46038,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:53:42.452331+00:00",
  "ended_at": "2026-08-25T22:53:44.009532+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1a2190a9-64e9-40fd-9218-28c2bde9fc4b",
  "name": "craggy-coastal-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52416,
  "username": "tomcat",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:53:19.229998+00:00",
  "ended_at": "2026-08-25T22:53:51.506052+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94264fd1-e0be-4e3d-8337-1a977d74e9bc",
  "name": "icy-gleaming-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36980,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:52:51.908354+00:00",
  "ended_at": "2026-08-25T22:52:54.323611+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6736e623-32fe-49dd-b69a-ef9841b25099",
  "name": "glassy-nautical-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:52:30.158660+00:00",
  "ended_at": "2026-08-25T22:52:32.010479+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "28b38217-6c45-4424-ad65-5c303c3fbfd8",
  "name": "quartz-icy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59142,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:52:06.762481+00:00",
  "ended_at": "2026-08-25T22:52:08.096069+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a622daf7-6fa5-4afa-965d-c55ec733338c",
  "name": "ancient-mottled-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47122,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:51:44.560529+00:00",
  "ended_at": "2026-08-25T22:51:46.692186+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a3ff6fac-8ecd-4a40-a92a-43f64124f888",
  "name": "slender-whispering-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41676,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:51:25.479419+00:00",
  "ended_at": "2026-08-25T22:51:27.559740+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b08bb404-10e6-4c06-b31c-a3687badda8c",
  "name": "western-jovial-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36548,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:51:21.019656+00:00",
  "ended_at": "2026-08-25T22:51:23.123064+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e5551569-a392-47cc-b432-c2fbb66d5235",
  "name": "courtly-fabled-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59918,
  "username": "weblogic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:51:05.077246+00:00",
  "ended_at": "2026-08-25T22:51:06.617358+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "073f372c-0df8-4719-9a9a-6e0e0696fc99",
  "name": "smooth-woven-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45322,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:50:54.675430+00:00",
  "ended_at": "2026-08-25T22:51:27.558478+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a68b11e1-77dd-42ab-ab7d-ca096d789522",
  "name": "dusty-smoky-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 41660,
  "username": "weblogic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:50:34.155592+00:00",
  "ended_at": "2026-08-25T22:51:06.618833+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e95df60c-0e8a-45df-baa3-4708346b5f5e",
  "name": "lanky-placid-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35044,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:50:11.633545+00:00",
  "ended_at": "2026-08-25T22:50:13.779053+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7aa12222-71b2-4ea8-bb06-1a61ee0c87c3",
  "name": "barren-stormy-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33864,
  "username": "jenkins",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:49:56.710580+00:00",
  "ended_at": "2026-08-25T22:49:58.950299+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b0ad22ce-a782-4f37-ac82-d13805892a97",
  "name": "patient-regal-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:49:45.675115+00:00",
  "ended_at": "2026-08-25T22:49:46.916405+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ec81b6da-cd36-435c-af5f-e5ba171f49db",
  "name": "snowy-knotted-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55866,
  "username": "jenkins",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:49:25.794834+00:00",
  "ended_at": "2026-08-25T22:49:58.947018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1df02353-cfc6-4504-bf54-8504d6cc8550",
  "name": "smooth-early-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36494,
  "username": "testuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:49:08.124714+00:00",
  "ended_at": "2026-08-25T22:49:10.246962+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "64f3a2ef-f2f7-4b86-bbf6-9bca98a53f96",
  "name": "rapid-mottled-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53938,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:48:57.319835+00:00",
  "ended_at": "2026-08-25T22:48:59.458453+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1ee62b9c-bf15-4e69-a2d0-139813fafb19",
  "name": "fierce-humble-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 53932,
  "username": "testuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:48:37.271516+00:00",
  "ended_at": "2026-08-25T22:49:10.245705+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d7b7ca62-50a7-4f8b-aef3-7c628e90648d",
  "name": "pristine-peaty-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46498,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:48:11.239717+00:00",
  "ended_at": "2026-08-25T22:48:13.212635+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e8d13cbe-6512-4bb3-b72a-97e990316a1d",
  "name": "watchful-wandering-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59852,
  "username": "flask",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:47:46.240855+00:00",
  "ended_at": "2026-08-25T22:47:48.077097+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "19c3c6b7-7761-4683-9434-0edb5018f8e8",
  "name": "gloomy-slender-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43594,
  "username": "zabbix",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:47:34.508822+00:00",
  "ended_at": "2026-08-25T22:47:36.103306+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "e04cd55c-2956-447f-a348-27a16874c4f0",
  "name": "wry-woven-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:47:24.409267+00:00",
  "ended_at": "2026-08-25T22:47:25.490334+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ad0ce054-1310-4b19-a3b6-358d89304857",
  "name": "kindly-hidden-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36654,
  "username": "gpuadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:47:07.754459+00:00",
  "ended_at": "2026-08-25T22:47:10.113282+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "84403ae1-4741-4515-9e54-4ddd55d7f44a",
  "name": "gloomy-plush-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 50762,
  "username": "zabbix",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:47:03.607348+00:00",
  "ended_at": "2026-08-25T22:47:36.104403+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "87b113cc-14e3-49a9-81ff-c181ca9cdad9",
  "name": "chilly-downy-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52704,
  "username": "gpuadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:46:36.837842+00:00",
  "ended_at": "2026-08-25T22:47:10.114803+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba70839e-5ac5-4344-a4fc-7bd44f9ad181",
  "name": "hollow-russet-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46266,
  "username": "worker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:46:23.460590+00:00",
  "ended_at": "2026-08-25T22:46:25.260609+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "6707ae1d-361e-439b-9f8f-a89bf4248eee",
  "name": "sincere-ashen-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42312,
  "username": "flask",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:46:12.328860+00:00",
  "ended_at": "2026-08-25T22:46:13.561450+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c3857977-032f-4909-95fe-bc83b6a43b12",
  "name": "somber-keen-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 42298,
  "username": "worker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:45:52.553499+00:00",
  "ended_at": "2026-08-25T22:46:25.259290+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d39c5b6-7b8c-4607-9b18-3abc2c0d6968",
  "name": "spirited-crimson-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 32822,
  "username": "guest",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:45:25.059903+00:00",
  "ended_at": "2026-08-25T22:45:27.442342+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1c475719-b626-4605-829f-0a8f977d4504",
  "name": "windswept-gritty-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56304,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:45:01.310036+00:00",
  "ended_at": "2026-08-25T22:45:03.690649+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6ea55022-a3dc-4574-893c-107371b398da",
  "name": "brave-tender-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49618,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:48.960877+00:00",
  "ended_at": "2026-08-25T22:44:51.110774+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "6ff0cbb2-5374-4832-886d-6cc9f4b20593",
  "name": "sleepy-hollow-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36574,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:39.947086+00:00",
  "ended_at": "2026-08-25T22:44:42.018665+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e1e71ff2-5e67-4629-80e0-3b37fe524cb3",
  "name": "serene-amiable-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 36366,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:44:18.108051+00:00",
  "ended_at": "2026-08-25T22:44:51.109597+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20f331ff-e0f2-4c26-85c7-eac8ce0cfe26",
  "name": "amber-jagged-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58348,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:02.833517+00:00",
  "ended_at": "2026-08-25T22:44:04.195386+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1d4505f1-ae7b-4653-8fb3-e8e7c7c429a7",
  "name": "velvet-lawful-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:43:52.336809+00:00",
  "ended_at": "2026-08-25T22:43:54.557723+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "48571ac4-916b-4277-ac76-83635c805d0a",
  "name": "alpine-keen-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39990,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:43:32.030629+00:00",
  "ended_at": "2026-08-25T22:44:04.194094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c10740b8-41e9-4725-afcf-1f6ce9fe46ce",
  "name": "verdant-windswept-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60030,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:43:06.111706+00:00",
  "ended_at": "2026-08-25T22:43:07.664818+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b6959116-24e6-4bc7-88dd-27ebdd16c659",
  "name": "plush-vaulted-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45736,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:42:42.832094+00:00",
  "ended_at": "2026-08-25T22:42:44.854466+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c54430fb-6908-41af-b648-686919855684",
  "name": "frosty-hollow-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38644,
  "username": "elastic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:42:17.792046+00:00",
  "ended_at": "2026-08-25T22:42:18.906971+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "386e4798-2d59-46a5-ba26-80e8772fa703",
  "name": "thawing-boreal-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35476,
  "username": "docker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:42:03.482269+00:00",
  "ended_at": "2026-08-25T22:42:05.783153+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1eed7fda-fd9f-49b7-82f7-b34b817dc41b",
  "name": "forlorn-solemn-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46938,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:41:54.265687+00:00",
  "ended_at": "2026-08-25T22:41:55.481016+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "eefdff33-bdfc-4b02-947d-3216495495c1",
  "name": "drifting-frank-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50176,
  "username": "observer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:41:39.057150+00:00",
  "ended_at": "2026-08-25T22:41:41.424898+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "69cda3dd-2d50-44e4-bffb-32923c122760",
  "name": "hazel-western-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 46900,
  "username": "docker",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:41:32.692592+00:00",
  "ended_at": "2026-08-25T22:42:05.781734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29e822e5-6480-48dd-a9f1-6c3f40ecb438",
  "name": "wandering-burly-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 43610,
  "username": "observer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:41:08.228012+00:00",
  "ended_at": "2026-08-25T22:41:41.423493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f9d3f09-1103-4abf-a430-c454bc4321f5",
  "name": "cheerful-lawful-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50052,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:40:54.412455+00:00",
  "ended_at": "2026-08-25T22:40:56.284368+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "53c11ccf-82e1-4a42-aa1e-3001fa457df9",
  "name": "pleasant-ivory-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54528,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:40:45.459129+00:00",
  "ended_at": "2026-08-25T22:40:46.786055+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0dc20881-c068-4237-a9bc-306d7e75a584",
  "name": "sincere-tangled-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 54526,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:40:23.626677+00:00",
  "ended_at": "2026-08-25T22:40:56.285652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ebd00cf-3fb9-48da-b057-d9d7a0b21136",
  "name": "freckled-dusty-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38688,
  "username": "plex",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:39:55.986695+00:00",
  "ended_at": "2026-08-25T22:39:57.179955+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d16578d9-182b-4b0f-936b-9c2d0de300a4",
  "name": "marine-icy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57722,
  "username": "bigdata",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:39:42.839230+00:00",
  "ended_at": "2026-08-25T22:39:45.217167+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "4bad3a25-0cbb-497c-9636-5727300f122f",
  "name": "scarlet-smooth-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40264,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:39:31.332989+00:00",
  "ended_at": "2026-08-25T22:39:33.244845+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c9f686bb-1105-4402-8774-08f00f2d7e60",
  "name": "patient-nameless-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37658,
  "username": "data",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:39:20.085077+00:00",
  "ended_at": "2026-08-25T22:39:21.375495+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "610ecae8-fce6-4e9e-98fa-47e042884d85",
  "name": "snowy-brazen-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 40256,
  "username": "bigdata",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:39:12.002795+00:00",
  "ended_at": "2026-08-25T22:39:45.216115+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04a79344-6711-472f-98f2-e654011aa2fe",
  "name": "tidal-earnest-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33286,
  "username": "uftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:38:58.966705+00:00",
  "ended_at": "2026-08-25T22:39:01.167272+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "58bb0910-46ff-4a58-b712-19669dcd7bdf",
  "name": "brave-early-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45528,
  "username": "data",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:38:49.310783+00:00",
  "ended_at": "2026-08-25T22:39:21.374097+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e276eda-23e6-4a88-b539-3680758f91c6",
  "name": "smoky-dappled-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 37652,
  "username": "uftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:38:28.154371+00:00",
  "ended_at": "2026-08-25T22:39:01.165797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "207272d3-5843-4ba3-a8cc-7e201363f851",
  "name": "sooty-peaty-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:37:56.573361+00:00",
  "ended_at": "2026-08-25T22:37:58.098106+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "56157b66-dff2-4f5b-83f5-a8a86fbdcc89",
  "name": "coral-merry-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38270,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:37:35.120028+00:00",
  "ended_at": "2026-08-25T22:37:36.991576+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f8b99659-8fdd-4b9a-a44f-2afc68c7ad8d",
  "name": "thrifty-canny-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:37:13.638948+00:00",
  "ended_at": "2026-08-25T22:37:15.788940+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7154ed7d-f070-43c4-b020-0fb4e4a3ee2a",
  "name": "sincere-drifting-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35402,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:36:49.343509+00:00",
  "ended_at": "2026-08-25T22:36:51.683664+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "fb69bc53-6db7-46dd-90ee-fbc3c2b329af",
  "name": "thawing-mottled-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57928,
  "username": "rancher",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:36:25.412224+00:00",
  "ended_at": "2026-08-25T22:36:26.742124+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b284992f-208f-43f8-b9d9-206bfb009285",
  "name": "coral-hardy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57170,
  "username": "rancher",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:36:11.274199+00:00",
  "ended_at": "2026-08-25T22:36:13.487151+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "22406936-4871-4056-812d-b79b1c9f1259",
  "name": "whispering-stormy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:36:00.038135+00:00",
  "ended_at": "2026-08-25T22:36:01.509739+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7e0dab03-679d-40e4-8582-70643da54a33",
  "name": "twilight-austere-bonobo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 40882,
  "username": "rancher",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:35:40.502674+00:00",
  "ended_at": "2026-08-25T22:36:13.485413+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab71b7d7-b538-4b20-bebf-fbf3f1d4285b",
  "name": "hidden-fierce-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40346,
  "username": "elsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:35:25.849581+00:00",
  "ended_at": "2026-08-25T22:35:27.561266+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "3272298f-c71e-4b40-9938-acc4f4844c4f",
  "name": "crystal-ivory-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60136,
  "username": "nginx",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:35:14.361345+00:00",
  "ended_at": "2026-08-25T22:35:16.704520+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0e566557-972c-4baa-8168-190fb350d358",
  "name": "electric-icy-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46794,
  "username": "ubuntu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:35:00.045991+00:00",
  "ended_at": "2026-08-25T22:35:02.072374+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "12619c87-68df-457b-9510-161f1b19b7c0",
  "name": "supple-shifting-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 60132,
  "username": "elsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:34:55.076490+00:00",
  "ended_at": "2026-08-25T22:35:27.560057+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9d19183-1f80-42f1-a727-a91d41a3c735",
  "name": "austere-foggy-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52936,
  "username": "ubuntu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:34:29.131587+00:00",
  "ended_at": "2026-08-25T22:35:02.071060+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "924ea7a3-ea29-4ba4-927d-214c9ff8fb50",
  "name": "dusty-tawny-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:34:06.482757+00:00",
  "ended_at": "2026-08-25T22:34:07.671595+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "994886e6-0844-46c9-b956-2c09c31512b3",
  "name": "opal-wry-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48114,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:33:49.565836+00:00",
  "ended_at": "2026-08-25T22:33:51.120635+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "62c9b57d-ca0b-426b-a2c7-fc8774266a35",
  "name": "lively-sunlit-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54966,
  "username": "tom",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:33:39.917713+00:00",
  "ended_at": "2026-08-25T22:33:41.996621+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "95349468-0761-45c8-b5c7-0441c74d554c",
  "name": "brisk-feral-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 32902,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:33:18.777698+00:00",
  "ended_at": "2026-08-25T22:33:51.121927+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a6de18d-ba3b-4bc9-a257-166d2fa2acf1",
  "name": "cobalt-dewy-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38816,
  "username": "ranger",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:33:02.119307+00:00",
  "ended_at": "2026-08-25T22:33:03.432710+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1be70e1d-98ac-47db-b496-9ea41a056881",
  "name": "flinty-marine-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:32:52.166935+00:00",
  "ended_at": "2026-08-25T22:32:53.370704+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bdaea1c6-f74d-47fb-b996-0a99183430f3",
  "name": "daring-drifting-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 37230,
  "username": "ranger",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:32:31.258803+00:00",
  "ended_at": "2026-08-25T22:33:03.431511+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d607b5e9-637e-4478-a067-1788a2078d12",
  "name": "stormy-gnarled-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37888,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:32:06.837811+00:00",
  "ended_at": "2026-08-25T22:32:08.468007+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9dff8ee0-5675-48b1-94bb-7b9171aea0eb",
  "name": "tender-amiable-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:31:40.613573+00:00",
  "ended_at": "2026-08-25T22:31:41.715534+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b3515301-062f-4ab7-9561-f6c0311d66e9",
  "name": "vaulted-restless-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36630,
  "username": "jumpserver",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:31:30.956011+00:00",
  "ended_at": "2026-08-25T22:31:32.396089+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "c19344bf-731f-485f-901d-972f428af6bf",
  "name": "mindful-coastal-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52282,
  "username": "tom",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:31:15.816954+00:00",
  "ended_at": "2026-08-25T22:31:17.370424+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f3d7a3b1-a201-4dba-bdf5-fdb187b181cc",
  "name": "jolly-lonesome-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 35668,
  "username": "jumpserver",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:31:00.028670+00:00",
  "ended_at": "2026-08-25T22:31:32.397502+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c717c7a-80b7-401b-a093-e64e7bf451d7",
  "name": "alpine-nimble-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58064,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:30:32.131093+00:00",
  "ended_at": "2026-08-25T22:30:34.332046+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9ed95d55-0a03-47b7-a316-eb83687549ca",
  "name": "pleasant-cobalt-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38140,
  "username": "guest",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:30:18.497025+00:00",
  "ended_at": "2026-08-25T22:30:19.758234+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "07650efb-1630-4fe1-90b0-49d6eee9e957",
  "name": "scarlet-regal-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:30:08.426826+00:00",
  "ended_at": "2026-08-25T22:30:10.534833+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "574fb5f5-acc1-41f4-9bd7-050aeda42d1d",
  "name": "polar-dutiful-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 60878,
  "username": "guest",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:29:47.654012+00:00",
  "ended_at": "2026-08-25T22:30:19.759674+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "806dbfb8-265c-4f64-a92b-b3a8ee24356a",
  "name": "painted-brazen-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41846,
  "username": "elastic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:29:30.184758+00:00",
  "ended_at": "2026-08-25T22:29:32.501900+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "dced8a57-a7a0-473e-a13e-5c1730e0941b",
  "name": "fleeting-ruddy-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:29:19.757740+00:00",
  "ended_at": "2026-08-25T22:29:21.444017+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1d924816-82ba-41fd-8a77-ae976d53dd4e",
  "name": "watchful-hollow-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 50964,
  "username": "elastic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:28:59.339729+00:00",
  "ended_at": "2026-08-25T22:29:32.503334+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e167d20-e2c2-4d3b-a0fc-f0f10e47e373",
  "name": "polar-coastal-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55104,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:28:33.445154+00:00",
  "ended_at": "2026-08-25T22:28:34.951863+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "41c51f59-4c2c-45df-9e98-d40fe105fcb6",
  "name": "daring-stormy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50452,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:28:20.884827+00:00",
  "ended_at": "2026-08-25T22:28:22.426400+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "a5a78cd3-abd9-4c63-aa1c-7753f8a571ae",
  "name": "hushed-ivory-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:28:09.742908+00:00",
  "ended_at": "2026-08-25T22:28:11.806653+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "216767dc-a18d-4390-8459-c49e15662150",
  "name": "airy-honest-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 48460,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:27:49.974436+00:00",
  "ended_at": "2026-08-25T22:28:22.427695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f97c2541-41a6-4394-b9eb-2d48eaad2105",
  "name": "plucky-whispering-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42784,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:27:21.894240+00:00",
  "ended_at": "2026-08-25T22:27:24.229892+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5c28dff0-5360-42ca-8794-6fa9af44424d",
  "name": "distant-oaken-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41540,
  "username": "oscar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:26:58.588120+00:00",
  "ended_at": "2026-08-25T22:27:00.715421+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "10b38927-fe1e-4f6e-b068-a90148a11236",
  "name": "somber-feathered-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41342,
  "username": "www",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:26:43.490017+00:00",
  "ended_at": "2026-08-25T22:26:45.297006+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "a021f4a2-a7c5-4340-89e6-1e952433f813",
  "name": "emerald-supple-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:26:34.428169+00:00",
  "ended_at": "2026-08-25T22:26:35.727058+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "16440a15-efaa-44a9-acdb-47fe0cf7eda5",
  "name": "tangled-wandering-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55472,
  "username": "www",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:26:12.641027+00:00",
  "ended_at": "2026-08-25T22:26:45.295787+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "714d1e77-8f74-4da6-b643-e5968420d854",
  "name": "hazel-fearless-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:25:47.417706+00:00",
  "ended_at": "2026-08-25T22:25:49.053257+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7dce3b21-d3bf-48d2-9b9d-a3e5abc26158",
  "name": "western-thrifty-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46316,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:25:24.051016+00:00",
  "ended_at": "2026-08-25T22:25:26.476435+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b9998c00-d6b1-4b99-bff5-d6f8ff4e9a97",
  "name": "faded-spirited-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43082,
  "username": "gpadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:25:03.384103+00:00",
  "ended_at": "2026-08-25T22:25:05.264850+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6e97a013-1b24-4bac-8dd8-ab3897aa8959",
  "name": "polar-painted-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:24:37.697084+00:00",
  "ended_at": "2026-08-25T22:24:39.207885+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c98b46cf-75d3-42c3-9d1b-d288f050c59f",
  "name": "fickle-feral-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34512,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:24:12.157296+00:00",
  "ended_at": "2026-08-25T22:24:13.495953+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a12b0c4b-05f9-41e1-af99-30864cce785a",
  "name": "indigo-ginger-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45126,
  "username": "tools",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:23:58.615788+00:00",
  "ended_at": "2026-08-25T22:24:00.738873+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "398e2fc8-5b19-42b0-a6c0-fd1e020bf20b",
  "name": "grumpy-wry-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48720,
  "username": "lighthouse",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:23:50.762837+00:00",
  "ended_at": "2026-08-25T22:23:53.000821+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "2a43eef2-9496-4d59-9f25-cdf6fda962f3",
  "name": "daring-downy-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47528,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:23:32.472045+00:00",
  "ended_at": "2026-08-25T22:23:34.005708+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1c746bf2-655a-4fbb-a6b8-d246faf1c87c",
  "name": "mottled-craggy-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 54884,
  "username": "tools",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:23:27.732553+00:00",
  "ended_at": "2026-08-25T22:24:00.740344+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75e2ea7f-660f-42fe-b414-98e7e6b715b3",
  "name": "lawful-coastal-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38596,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:23:10.108678+00:00",
  "ended_at": "2026-08-25T22:23:12.297878+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b62d00c4-6512-4cba-9cde-90d41b3c81f8",
  "name": "primal-solemn-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55940,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:23:01.611602+00:00",
  "ended_at": "2026-08-25T22:23:34.004349+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1860e5ec-4b0a-4281-9fc9-b257f98ef837",
  "name": "vernal-western-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52064,
  "username": "plexserver",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:22:49.210462+00:00",
  "ended_at": "2026-08-25T22:22:50.523018+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "02b4abe2-a757-43f4-9731-a443afc6fd3d",
  "name": "dutiful-mottled-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52432,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:22:39.178276+00:00",
  "ended_at": "2026-08-25T22:23:12.296490+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0e7a9771-a3a5-4ed5-8c3b-95dfba492fc4",
  "name": "twilight-curious-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 38586,
  "username": "plexserver",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:22:18.340526+00:00",
  "ended_at": "2026-08-25T22:22:50.521776+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54b037dc-6cfd-4463-bd09-775fe42050fd",
  "name": "frank-salty-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36536,
  "username": "dolphinscheduler",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:22:02.908823+00:00",
  "ended_at": "2026-08-25T22:22:04.372732+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1b024e74-7acf-4960-887f-170b3cc1b22c",
  "name": "crimson-mindful-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:21:53.130947+00:00",
  "ended_at": "2026-08-25T22:21:55.457181+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8153f8e4-767d-473b-a2ee-a0b4e5f4afd2",
  "name": "crimson-dapper-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45828,
  "username": "svnuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:21:38.419673+00:00",
  "ended_at": "2026-08-25T22:21:39.805576+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "2d82201c-b5d1-4b5a-9ce6-011245b20a6a",
  "name": "arctic-vernal-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 34138,
  "username": "dolphinscheduler",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:21:32.111281+00:00",
  "ended_at": "2026-08-25T22:22:04.371414+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a3356dad-ba2e-4200-80a9-03e2aba76fcf",
  "name": "earnest-steady-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42086,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:21:12.296904+00:00",
  "ended_at": "2026-08-25T22:21:14.245561+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "5e041e2f-6714-4d12-a365-44ba3c97be77",
  "name": "eager-prairie-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 36520,
  "username": "svnuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:21:07.496508+00:00",
  "ended_at": "2026-08-25T22:21:39.806786+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2958fce-d601-4582-a510-ceeacd805bef",
  "name": "knotted-granite-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 48958,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:20:41.438240+00:00",
  "ended_at": "2026-08-25T22:21:14.244380+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fca26d3c-6b07-4b52-9558-9abdcf5ff522",
  "name": "sullen-gleaming-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57412,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:20:16.813188+00:00",
  "ended_at": "2026-08-25T22:20:18.156940+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0fd04087-fc97-4f90-971d-480ce8da56ab",
  "name": "rustic-peaty-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51012,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:20:04.200226+00:00",
  "ended_at": "2026-08-25T22:20:06.011798+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "b4fca60b-71e9-4689-ad27-7ae3195b23b2",
  "name": "gallant-merry-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:19:53.307124+00:00",
  "ended_at": "2026-08-25T22:19:55.580718+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f265f054-b052-4236-ac45-31a2f82fd7cb",
  "name": "salty-airy-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 35556,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:19:33.424304+00:00",
  "ended_at": "2026-08-25T22:20:06.010128+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6fc8e561-466c-46a7-b4b4-b8ba9146baa7",
  "name": "mighty-loyal-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35062,
  "username": "nginx",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:19:05.272370+00:00",
  "ended_at": "2026-08-25T22:19:07.464704+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5081d3e7-dbb4-49be-839d-883556530523",
  "name": "alpine-restless-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 44926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:18:41.134038+00:00",
  "ended_at": "2026-08-25T22:18:43.210167+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "79bc682a-6f05-4109-9346-d538c25a6b7a",
  "name": "stoic-windswept-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53024,
  "username": "flink",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:18:27.991962+00:00",
  "ended_at": "2026-08-25T22:18:30.313833+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "6e609137-f5b2-4fca-be36-f40c1437a928",
  "name": "fabled-gallant-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54274,
  "username": "apache",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:18:20.002270+00:00",
  "ended_at": "2026-08-25T22:18:22.410717+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ee49581c-5199-4eed-8188-22eeda8430d6",
  "name": "fierce-polar-dingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 41410,
  "username": "flink",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:17:57.228607+00:00",
  "ended_at": "2026-08-25T22:18:30.312550+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4950acf3-c047-4cc1-bb5b-9be42c239bd7",
  "name": "kindly-pristine-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:17:31.072714+00:00",
  "ended_at": "2026-08-25T22:17:32.799035+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7432cad2-6572-4758-a873-1696f2a0630d",
  "name": "boreal-sooty-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40804,
  "username": "user1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:17:07.813663+00:00",
  "ended_at": "2026-08-25T22:17:09.983068+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "20ec1718-f3b1-4a39-9b26-a333dcb109b1",
  "name": "earnest-sunlit-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:16:45.204006+00:00",
  "ended_at": "2026-08-25T22:16:46.237761+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a5e1f44e-f9ed-4eab-b397-8c1b3405d219",
  "name": "seaward-fickle-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39084,
  "username": "oscar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:16:31.719082+00:00",
  "ended_at": "2026-08-25T22:16:33.224564+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "c890048d-fe81-4d69-8af3-f6bcafc26966",
  "name": "flinty-restless-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:16:19.146394+00:00",
  "ended_at": "2026-08-25T22:16:20.610947+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8d9addbe-6761-4e8d-8d5a-218ef20e8e7a",
  "name": "tranquil-kindly-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 48330,
  "username": "oscar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:16:00.919784+00:00",
  "ended_at": "2026-08-25T22:16:33.226041+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "96082378-a88e-49b2-8d7b-2f5d7dfcfdb9",
  "name": "fearless-lucid-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46566,
  "username": "tom",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:15:45.032032+00:00",
  "ended_at": "2026-08-25T22:15:47.325065+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "18f2163f-b021-4a5f-920d-06fa231b1d0a",
  "name": "dusty-somber-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:15:32.386440+00:00",
  "ended_at": "2026-08-25T22:15:34.702113+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ae93c4d8-28a7-4c95-b404-380286722a5a",
  "name": "ruddy-bitter-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 45482,
  "username": "tom",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:15:14.165887+00:00",
  "ended_at": "2026-08-25T22:15:47.323273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89e92559-8662-48e5-81cc-7eee8446dd07",
  "name": "twilight-mellow-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33700,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:55.842114+00:00",
  "ended_at": "2026-08-25T22:14:57.009020+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "8c61c92f-d795-4d00-ae8f-97d4b601076a",
  "name": "dewy-proud-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:46.191994+00:00",
  "ended_at": "2026-08-25T22:14:48.404023+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7999aa7d-9ce8-4b3d-8263-0784e20d00ea",
  "name": "pristine-pleasant-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55334,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:14:25.023924+00:00",
  "ended_at": "2026-08-25T22:14:57.007762+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0221c51-04c8-4e49-9257-8cc4a98def6a",
  "name": "keen-flinty-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58572,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:09.368283+00:00",
  "ended_at": "2026-08-25T22:14:10.607122+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "ee7bf61f-f523-4697-aae2-a6c247d4ac1b",
  "name": "chilly-brazen-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39732,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:58.392291+00:00",
  "ended_at": "2026-08-25T22:13:59.935320+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5fe2d493-517a-4346-b8c9-ecfe2a0255ac",
  "name": "vivid-jolly-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39724,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:13:38.570352+00:00",
  "ended_at": "2026-08-25T22:14:10.608504+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "df527205-46ba-458e-a5e3-1265cf968d78",
  "name": "autumn-merry-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46496,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:18.054435+00:00",
  "ended_at": "2026-08-25T22:13:19.972463+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "d55378da-5c49-441c-9f79-117026b658ef",
  "name": "dutiful-forlorn-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:08.873273+00:00",
  "ended_at": "2026-08-25T22:13:10.661293+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c94fa1e4-37b7-414b-8399-3768424d48ff",
  "name": "dusty-freckled-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56244,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:12:47.259470+00:00",
  "ended_at": "2026-08-25T22:13:19.970997+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70fddfbb-601f-4c7b-8fa4-2bdbbf1a3667",
  "name": "buoyant-western-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43142,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:12:33.424223+00:00",
  "ended_at": "2026-08-25T22:12:34.623901+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1728f8f3-e79e-42ba-915c-0679f5dba144",
  "name": "gilded-serene-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41770,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:12:21.893310+00:00",
  "ended_at": "2026-08-25T22:12:23.388567+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a6002e75-6ca4-4d41-a97d-50e82974c54e",
  "name": "proud-amiable-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52150,
  "username": "user1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:12:09.195752+00:00",
  "ended_at": "2026-08-25T22:12:11.310892+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "81c95edb-b67a-4f04-a1e1-3205ea4f7a9a",
  "name": "lofty-zealous-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 41768,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:12:02.595220+00:00",
  "ended_at": "2026-08-25T22:12:34.625200+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "705a32fe-b643-49ed-8428-a8819ee8e40e",
  "name": "lawful-painted-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48804,
  "username": "flask",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:11:45.291904+00:00",
  "ended_at": "2026-08-25T22:11:47.172394+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "df2fdf70-606c-4c9c-a5a0-2f8939768657",
  "name": "candid-rugged-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 37254,
  "username": "user1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:11:38.407786+00:00",
  "ended_at": "2026-08-25T22:12:11.309649+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d3d9e7c-7979-494b-874b-fd09878fc8a0",
  "name": "rustic-nimble-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35070,
  "username": "lighthouse",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:11:22.438065+00:00",
  "ended_at": "2026-08-25T22:11:23.899663+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "75da1071-7e15-4706-9141-7776f08679aa",
  "name": "jovial-creaky-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 52134,
  "username": "flask",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:11:14.497408+00:00",
  "ended_at": "2026-08-25T22:11:47.173752+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d1aab394-e59f-402b-aff1-2a858a3e568a",
  "name": "glacial-lucid-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 48314,
  "username": "lighthouse",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:10:51.668714+00:00",
  "ended_at": "2026-08-25T22:11:23.901405+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cad32e71-662b-4688-bdde-ef6c146aa02b",
  "name": "tranquil-drifting-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54162,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:10:26.690244+00:00",
  "ended_at": "2026-08-25T22:10:28.636320+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d2ccf448-cf95-4aaa-af1c-3a2868501cbb",
  "name": "ruddy-bold-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:10:01.588098+00:00",
  "ended_at": "2026-08-25T22:10:03.595831+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "256a4516-3c2b-428d-a296-3004ea68fb42",
  "name": "blithe-jaunty-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33734,
  "username": "apache",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:09:48.783147+00:00",
  "ended_at": "2026-08-25T22:09:50.161919+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "bb17a0cb-984a-47e4-a7a4-3edfff41ef91",
  "name": "thrifty-downy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35732,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:09:38.228607+00:00",
  "ended_at": "2026-08-25T22:09:39.764730+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f6442426-2687-47df-84b5-af52cea31b32",
  "name": "muted-kindly-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41280,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:09:24.406014+00:00",
  "ended_at": "2026-08-25T22:09:25.651221+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "4297f00a-eb17-4513-a7e0-286fd3bcdd3d",
  "name": "humble-lawful-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 35730,
  "username": "apache",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:09:17.869933+00:00",
  "ended_at": "2026-08-25T22:09:50.160833+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "da5f53b2-7791-4e84-bc9c-55d6ad3d7a9e",
  "name": "blazing-shaded-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33756,
  "username": "esroot",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:09:00.689255+00:00",
  "ended_at": "2026-08-25T22:09:01.990658+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "922c4cc9-ffe0-44fe-8ac5-1fd6718e12b8",
  "name": "velvet-hazy-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 33720,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:08:53.615679+00:00",
  "ended_at": "2026-08-25T22:09:25.648943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18cfe3f3-21c5-4349-90b7-27e4bcfd2408",
  "name": "airy-creaky-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 38490,
  "username": "esroot",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:08:29.936601+00:00",
  "ended_at": "2026-08-25T22:09:01.987810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "216f0a0b-d6e5-4b92-968d-5464937f9cd5",
  "name": "craggy-hearty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35230,
  "username": "gpadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:08:15.283092+00:00",
  "ended_at": "2026-08-25T22:08:17.241577+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "e7bbb7dc-3457-44d9-b00c-8a17259fad56",
  "name": "kindly-painted-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 32888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:08:04.636448+00:00",
  "ended_at": "2026-08-25T22:08:06.625574+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7c4ca960-3e73-45e4-a50f-b969a9f06c17",
  "name": "blithe-craggy-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 32866,
  "username": "gpadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:07:44.436873+00:00",
  "ended_at": "2026-08-25T22:08:17.236719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60ef47e0-2836-429a-bd8c-c25a12d1ed5f",
  "name": "lucid-reedy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48882,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:07:41.516292+00:00",
  "ended_at": "2026-08-25T22:07:42.932902+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "ca64b978-792c-4766-af86-01435e1706ad",
  "name": "dutiful-airy-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39624,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:07:19.225211+00:00",
  "ended_at": "2026-08-25T22:07:20.195223+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "56027d7b-96a0-452e-ad09-e7e8ee791b8f",
  "name": "spirited-gritty-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 38814,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:07:10.556379+00:00",
  "ended_at": "2026-08-25T22:07:42.931859+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5844150c-205f-4575-9fec-814903bad768",
  "name": "fearless-placid-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58340,
  "username": "mongo",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:06:55.488491+00:00",
  "ended_at": "2026-08-25T22:06:56.615422+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "fff9c52f-66b1-4186-acf5-295928bf7894",
  "name": "glacial-gentle-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 38664,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:06:48.252512+00:00",
  "ended_at": "2026-08-25T22:07:20.193174+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2caf2b92-8f59-448c-820c-0da13eeea735",
  "name": "granite-rambling-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42728,
  "username": "nginx",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:06:31.584686+00:00",
  "ended_at": "2026-08-25T22:06:32.478402+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "8d3f3897-fca8-4ce1-b40a-3f1c6a612fb0",
  "name": "oaken-weathered-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 43928,
  "username": "mongo",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:06:24.709075+00:00",
  "ended_at": "2026-08-25T22:06:56.614466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2d879878-7a16-4c0e-b35b-db039ec644a2",
  "name": "genial-feral-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48290,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:06:06.630198+00:00",
  "ended_at": "2026-08-25T22:06:07.709209+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "1ecbb7d8-c122-4c78-a902-2bd1e5c27a54",
  "name": "dewy-cobalt-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 47968,
  "username": "nginx",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:06:00.710776+00:00",
  "ended_at": "2026-08-25T22:06:32.476301+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "222becad-df09-4d0d-86f0-3225349ee5ea",
  "name": "diligent-barren-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56218,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:05:38.561696+00:00",
  "ended_at": "2026-08-25T22:05:39.646362+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "7e6a1d5c-c0c5-46fd-adda-2f5734565ef6",
  "name": "genial-stoic-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 37228,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:05:35.750196+00:00",
  "ended_at": "2026-08-25T22:06:07.707805+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd290d6c-873c-4e6d-8ebc-9200091cf1a1",
  "name": "honest-nimble-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41258,
  "username": "hive",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 459,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:05:15.300004+00:00",
  "ended_at": "2026-08-25T22:05:15.540067+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "289c9f66-f0af-4684-8359-49450570e663",
  "name": "dusty-plucky-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56230,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:05:07.730536+00:00",
  "ended_at": "2026-08-25T22:05:39.644883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e6549b8-30c5-4e98-b3c5-1dafaa34fff8",
  "name": "salty-upland-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35296,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:04:52.203610+00:00",
  "ended_at": "2026-08-25T22:04:52.454453+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "99a2f330-2ddf-4d40-8060-84a5ae74ad3c",
  "name": "indigo-valiant-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56172,
  "username": "hive",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:04:44.446654+00:00",
  "ended_at": "2026-08-25T22:05:15.541025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "386a6838-f30c-4c9d-82fe-e65e35dd9b0f",
  "name": "hearty-breezy-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:04:28.685097+00:00",
  "ended_at": "2026-08-25T22:04:28.929096+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "eab240ed-b8e9-4baa-8c1e-b1a3e5ccf3d0",
  "name": "plush-proud-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 35300,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:04:21.272126+00:00",
  "ended_at": "2026-08-25T22:04:52.453416+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63af7c2a-90e4-4cae-8d6d-602f5002e3fb",
  "name": "forlorn-sleepy-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 42928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:03:57.814109+00:00",
  "ended_at": "2026-08-25T22:04:28.930634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]