[
 {
  "id": "fa1568be-eb2d-45fb-9e70-383548895a2d",
  "name": "nameless-faded-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52292,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 371,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:11:59.423501+00:00",
  "ended_at": "2026-08-27T03:12:07.681302+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5802bb6c-2bfb-477d-979b-446e456f3085",
  "name": "civil-upland-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46376,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:11:04.246696+00:00",
  "ended_at": "2026-08-27T03:11:13.080691+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "190ce66b-85a1-4954-b95a-51a6e35f4a28",
  "name": "ginger-thawing-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53138,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:10.125448+00:00",
  "ended_at": "2026-08-27T03:07:15.230771+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "436cb19a-b7bb-494c-80d4-aca4f59b88f9",
  "name": "eager-blunt-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39068,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 269,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:04.446948+00:00",
  "ended_at": "2026-08-27T03:05:14.732317+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c701fed0-4548-4fe0-a782-90c994c0e23a",
  "name": "fleeting-snowy-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38798,
  "username": "kingbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:50.819281+00:00",
  "ended_at": "2026-08-27T03:03:57.704270+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "727ddc7f-7e23-46fe-91bf-85391541e625",
  "name": "mossy-inland-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54044,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:48:19.004903+00:00",
  "ended_at": "2026-08-27T02:48:22.878884+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1e6fc620-ee17-4be3-a726-02c090115a3e",
  "name": "austere-patient-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60168,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:46:04.672528+00:00",
  "ended_at": "2026-08-27T02:46:11.187630+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f030d6a2-9371-49a7-a319-f87203af173f",
  "name": "zealous-indigo-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38440,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 492,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:45:11.541353+00:00",
  "ended_at": "2026-08-27T02:45:22.656993+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "bb5f733e-9c4e-47e8-9b69-c1ea0b05b016",
  "name": "ancient-sunlit-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35988,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:44:53.809904+00:00",
  "ended_at": "2026-08-27T02:45:02.260742+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "49e46ce3-962f-45cb-88f3-584f2f15271b",
  "name": "icy-blithe-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33094,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:18.772942+00:00",
  "ended_at": "2026-08-27T02:39:25.444010+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "57c4e1d6-7ba3-46fc-9350-4f8cdf34b5f0",
  "name": "weathered-boreal-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37330,
  "username": "webadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:37:02.162091+00:00",
  "ended_at": "2026-08-27T02:37:09.347355+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "13b65fa5-b8a3-4746-b85b-e4f762632974",
  "name": "silent-wry-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37042,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 339,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:26:18.360471+00:00",
  "ended_at": "2026-08-27T02:26:24.757842+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f4b85b0c-eac4-4dac-af52-e463944ef8e6",
  "name": "courtly-granite-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60954,
  "username": "sysupdate",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:25:18.764696+00:00",
  "ended_at": "2026-08-27T02:25:27.430389+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "581dc3e2-26c7-4365-845b-39eef2b85439",
  "name": "keen-diligent-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59272,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:23:38.727378+00:00",
  "ended_at": "2026-08-27T02:23:45.236963+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2286d37c-794f-4faa-bdbe-79f7e8cff612",
  "name": "watchful-leafy-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41204,
  "username": "trader",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 423,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:20:09.520258+00:00",
  "ended_at": "2026-08-27T02:20:17.778330+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d47f0ff4-b86a-45eb-9c0f-67b7c9d15f2d",
  "name": "ivory-autumn-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35086,
  "username": "opc",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:19:57.478479+00:00",
  "ended_at": "2026-08-27T02:20:04.882713+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "08493f28-e1bb-4bf5-b34d-fe483ccd7723",
  "name": "marbled-burly-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34656,
  "username": "hu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:18:58.470837+00:00",
  "ended_at": "2026-08-27T02:19:06.886667+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "af37deb0-9562-4876-b62d-36b08a92fbb0",
  "name": "sunlit-idle-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56722,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 315,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:17:08.840421+00:00",
  "ended_at": "2026-08-27T02:17:11.917839+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "09975e09-f1b2-409f-9fe3-ef5b6349349e",
  "name": "windswept-whispering-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41478,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:14:54.285632+00:00",
  "ended_at": "2026-08-27T02:14:58.904544+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e3af6fe6-6af6-46f5-a0dc-8bccf9220e61",
  "name": "upland-obsidian-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45742,
  "username": "vncuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:08:33.308612+00:00",
  "ended_at": "2026-08-27T02:08:40.386013+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2827f413-1f59-47ca-8929-4b71c7940d2d",
  "name": "lanky-blazing-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42804,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:26.762178+00:00",
  "ended_at": "2026-08-27T02:04:35.342864+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "22d9e57b-e313-48be-a96a-d65fb2aa7ce8",
  "name": "blazing-serene-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36740,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 426,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:19.808937+00:00",
  "ended_at": "2026-08-27T02:03:26.408687+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d12dd943-fd82-4131-9018-4795518e6814",
  "name": "russet-slender-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37008,
  "username": "testuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 378,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:02:55.011440+00:00",
  "ended_at": "2026-08-27T02:03:03.623610+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "489b542b-ff5e-46f0-a924-70f11eccb116",
  "name": "painted-flinty-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34998,
  "username": "root1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:01:04.964460+00:00",
  "ended_at": "2026-08-27T02:01:11.738156+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "683eba4b-5d14-49ed-99a4-0b28bff42b94",
  "name": "northern-reedy-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34286,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 339,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:59:58.195354+00:00",
  "ended_at": "2026-08-27T02:00:06.590722+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f68f468b-68cf-4a1d-b1e8-beede480d5e5",
  "name": "zealous-clever-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56828,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:59:54.236791+00:00",
  "ended_at": "2026-08-27T02:00:01.940490+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1e1441c8-3640-4b38-b98c-ea7b6482ae81",
  "name": "silent-eager-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43020,
  "username": "rdpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 344,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:58:33.937175+00:00",
  "ended_at": "2026-08-27T01:58:42.160117+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d670bcbf-90d5-4fbb-8d81-57ecd4d6fe77",
  "name": "meadow-hidden-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49912,
  "username": "dmdba",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 389,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:56:50.174386+00:00",
  "ended_at": "2026-08-27T01:56:57.764363+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "6ef28b1c-680b-459f-b487-17e29fb91cab",
  "name": "primal-wiry-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35080,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:33.557071+00:00",
  "ended_at": "2026-08-27T01:54:38.184355+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2d6bc292-5de0-4fdd-bd32-ac94c27cd299",
  "name": "stormy-feral-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41662,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:34:18.285414+00:00",
  "ended_at": "2026-08-26T14:34:24.840858+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "6118fd8d-bdea-40f5-9053-ebd4253607ce",
  "name": "frugal-russet-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58788,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 533,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:15:36.421092+00:00",
  "ended_at": "2026-08-26T14:15:48.812768+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1dffc5a8-d16d-4660-b3c5-bac177c6c11a",
  "name": "brisk-russet-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40600,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1119,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:08:43.803025+00:00",
  "ended_at": "2026-08-26T14:09:05.393994+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "fe002db5-31c1-489b-8858-f75cc6ad9998",
  "name": "icy-supple-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56382,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 687,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:43:43.541685+00:00",
  "ended_at": "2026-08-26T13:43:54.724048+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "56d1dda8-77de-4e70-b49a-793258a41342",
  "name": "sleepy-nameless-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58656,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 703,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:40:23.196144+00:00",
  "ended_at": "2026-08-26T13:40:37.311836+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "170b3dff-f567-40ce-ba41-c58a5bc6f0f2",
  "name": "mighty-thorny-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34250,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 501,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:38:00.013477+00:00",
  "ended_at": "2026-08-26T13:38:12.571768+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c393167e-70c5-4936-8004-f33366c3480b",
  "name": "mindful-freckled-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41452,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:37:14.744210+00:00",
  "ended_at": "2026-08-26T13:37:27.237382+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "282f8780-7747-4c48-ba6b-d54eae7a8928",
  "name": "creaky-bitter-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39950,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 521,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:25:02.827560+00:00",
  "ended_at": "2026-08-26T13:25:14.764618+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3f5edf80-1187-4378-91d2-6ccff36864b2",
  "name": "jagged-canny-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43710,
  "username": "root1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 645,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:57:35.269114+00:00",
  "ended_at": "2026-08-26T12:57:45.300535+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3eaae451-9733-46d7-9813-f691bdd3a350",
  "name": "jolly-freckled-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36764,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 439,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:56:04.271479+00:00",
  "ended_at": "2026-08-26T12:56:16.817695+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f52ec24c-44ad-4210-86b6-a5098234c4a0",
  "name": "velvet-downy-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34200,
  "username": "newuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 394,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:52:44.231784+00:00",
  "ended_at": "2026-08-26T12:52:52.772277+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1c6dadb6-3e03-46cd-bd81-285b63c9f8f0",
  "name": "mindful-primal-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57468,
  "username": "dmdba",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 576,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:44:20.041686+00:00",
  "ended_at": "2026-08-26T12:44:31.717212+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7a5034bc-439b-4bb8-815c-de3e09f99260",
  "name": "glassy-fringed-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42706,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 653,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:29:58.265661+00:00",
  "ended_at": "2026-08-26T12:30:11.579094+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "83c1f362-6885-4459-ba37-75cbbef41b55",
  "name": "gloomy-oaken-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56464,
  "username": "opc",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:28:55.423314+00:00",
  "ended_at": "2026-08-26T12:29:05.920944+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "70caa483-d8e2-4322-9107-5ae0ec5a6cd2",
  "name": "regal-rapid-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39506,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 623,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:27:06.742294+00:00",
  "ended_at": "2026-08-26T12:27:16.187331+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a587da40-b85a-40a8-949d-d1536c33a889",
  "name": "proud-lunar-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39092,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 659,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:10:01.073921+00:00",
  "ended_at": "2026-08-26T12:10:10.828232+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e9e2473f-8b4c-4914-a6c0-029a85ce2bbf",
  "name": "quiet-vigilant-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48092,
  "username": "minecraft",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 597,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:05:57.864929+00:00",
  "ended_at": "2026-08-26T12:06:14.006746+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "098dd574-c2c0-4571-b34d-1dcc31573416",
  "name": "cheerful-dutiful-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53150,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 489,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:01:20.251364+00:00",
  "ended_at": "2026-08-26T12:01:30.664395+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "48a056fe-3af9-448d-877b-acd45465f3e1",
  "name": "grassy-faded-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54396,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:56:22.742282+00:00",
  "ended_at": "2026-08-26T11:56:33.671754+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "250bd101-c6b0-4c84-8889-e29d91ec3abd",
  "name": "hazel-restless-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50184,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:55:13.289090+00:00",
  "ended_at": "2026-08-26T11:55:21.118787+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "90dda31b-d793-4663-8910-c649eee5d9da",
  "name": "gilded-dapper-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56134,
  "username": "kingbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 557,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:53:13.680106+00:00",
  "ended_at": "2026-08-26T11:53:25.562145+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "ffccd25c-f44c-4646-b1f9-bc346243c1f6",
  "name": "buoyant-wandering-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55696,
  "username": "webadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 678,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:48:06.648778+00:00",
  "ended_at": "2026-08-26T11:48:15.695438+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "0bedaaf2-d9c7-45a2-aa16-de92a0c47943",
  "name": "gleaming-ginger-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49392,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 684,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:47:42.874237+00:00",
  "ended_at": "2026-08-26T11:47:49.292440+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5c220ba3-5fa1-424e-89fb-955036535494",
  "name": "rapid-sincere-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50062,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:44:55.155227+00:00",
  "ended_at": "2026-08-26T06:45:00.776012+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "264031fc-0741-4c74-bb5d-59f03fea54e5",
  "name": "honest-fearless-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45026,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:31.820260+00:00",
  "ended_at": "2026-08-26T06:43:37.218639+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e0879117-1545-4bcb-ad93-536c3cba9568",
  "name": "woven-solemn-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47692,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:24.460537+00:00",
  "ended_at": "2026-08-26T06:43:29.656220+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3f486182-76fc-4a01-a171-9e2ac9fc552d",
  "name": "gritty-chilly-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50288,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:35.905400+00:00",
  "ended_at": "2026-08-26T06:39:41.737458+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5741300d-568b-4ceb-8e2f-d065281f6dcf",
  "name": "early-glacial-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38152,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:33:20.111711+00:00",
  "ended_at": "2026-08-26T06:33:27.044009+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "9b7c831b-64f2-4ce4-b887-ff6059c61d3b",
  "name": "solemn-primal-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40622,
  "username": "hu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:51.236718+00:00",
  "ended_at": "2026-08-26T06:32:57.813137+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7cd3b81c-5a35-47a6-a87d-fab4eccbad2c",
  "name": "gallant-vivid-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55306,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:23:00.828716+00:00",
  "ended_at": "2026-08-26T06:23:08.747839+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5208a298-e30d-4aa6-9b07-68f102467607",
  "name": "vernal-tender-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47568,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:21:28.642865+00:00",
  "ended_at": "2026-08-26T06:21:35.540734+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "bf143489-c4d3-431d-ac4d-980208d68602",
  "name": "gritty-cheerful-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59264,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:17:45.418482+00:00",
  "ended_at": "2026-08-26T06:17:51.242341+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e784768c-abb9-497a-924a-92440f952d8a",
  "name": "thawing-wooded-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52092,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:13:36.247692+00:00",
  "ended_at": "2026-08-26T06:13:44.657153+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e4011c23-c64b-4144-aa11-08dfcc481eb0",
  "name": "graceful-courtly-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47260,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:08:27.853946+00:00",
  "ended_at": "2026-08-26T06:08:34.127097+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1341acc4-b29f-4795-b25d-778ed0797fd6",
  "name": "balmy-spirited-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60162,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:07:37.737965+00:00",
  "ended_at": "2026-08-26T06:07:42.276638+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "063a6bd2-db32-4afa-9eeb-9c4b1af8680c",
  "name": "ginger-cheerful-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33190,
  "username": "opc",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:03:47.609534+00:00",
  "ended_at": "2026-08-26T06:03:56.146127+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a4cfa6d8-4478-41f9-b348-5265c4cdf71a",
  "name": "languid-restless-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44752,
  "username": "sysupdate",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:02:42.364362+00:00",
  "ended_at": "2026-08-26T06:02:50.717904+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2d8df6a5-49a9-4821-a9e9-64986bc6458f",
  "name": "dusty-vaulted-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47986,
  "username": "amir",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 200,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:09.705654+00:00",
  "ended_at": "2026-08-26T06:00:16.774540+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e2e3a9b8-a153-40b3-b2f4-7c43d09b02bd",
  "name": "vivid-bitter-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46774,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:42.232615+00:00",
  "ended_at": "2026-08-26T05:59:49.653071+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d37daedb-dd3d-4715-938f-c74709326005",
  "name": "humble-rugged-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47940,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:22.197277+00:00",
  "ended_at": "2026-08-26T05:59:29.026008+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2ce90a8d-9e5a-4c77-9778-af5e9e6c87f7",
  "name": "buoyant-cobalt-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52968,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:54:29.763010+00:00",
  "ended_at": "2026-08-26T05:54:35.066729+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e10f7bca-7a50-46f6-bdba-26900ddb7a92",
  "name": "emerald-dusty-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42940,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:49:34.495696+00:00",
  "ended_at": "2026-08-26T05:49:42.110749+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "497c27c1-ff94-41d9-b5e8-39e4233441bf",
  "name": "crisp-misty-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36990,
  "username": "kingbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:48:42.402694+00:00",
  "ended_at": "2026-08-26T05:48:47.648106+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "250e7e3c-a16a-4e70-8aff-ae4788cb9eb7",
  "name": "hidden-forlorn-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54214,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:48:01.205817+00:00",
  "ended_at": "2026-08-26T05:48:07.587175+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "616ab5be-ea0c-47f6-9561-abfdb69d7af7",
  "name": "hazy-craggy-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34106,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:47:02.099650+00:00",
  "ended_at": "2026-08-26T05:47:09.468834+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "21ac6372-f49e-48ef-9c83-9f37849b8245",
  "name": "graceful-nameless-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51364,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:43.991251+00:00",
  "ended_at": "2026-08-26T05:43:50.983807+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d93f2f53-6800-4e8b-a182-7ff66495167c",
  "name": "faded-languid-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40510,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:26.833597+00:00",
  "ended_at": "2026-08-26T05:43:34.983096+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "734acd6d-204c-45b2-b268-a83426ae521a",
  "name": "murky-cobalt-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55512,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:29.768351+00:00",
  "ended_at": "2026-08-26T05:42:36.655598+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "61f67c31-6c3b-4606-bc58-756c20cceade",
  "name": "tawny-meadow-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42560,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:13.983030+00:00",
  "ended_at": "2026-08-26T05:42:21.792041+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c48b7b97-7352-4ebf-a880-d14f15519665",
  "name": "kindly-dapper-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56534,
  "username": "node",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:40:15.179262+00:00",
  "ended_at": "2026-08-26T05:40:23.149708+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "ef48d493-bc9a-4704-ad1c-f05c04364185",
  "name": "alpine-ancient-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59944,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:39:47.389239+00:00",
  "ended_at": "2026-08-26T05:39:53.246913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "fbf34ca5-20a7-4e6e-9012-ec761c9a50e5",
  "name": "gilded-serene-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44654,
  "username": "debian",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:38:52.814143+00:00",
  "ended_at": "2026-08-26T05:38:59.792949+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d0b57348-aa21-46ad-9ade-8d6e23c72310",
  "name": "stoic-velvet-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51116,
  "username": "trader",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:37:05.775487+00:00",
  "ended_at": "2026-08-26T05:37:12.014933+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1d9d42c6-dfbd-4deb-955c-493c9751aa4d",
  "name": "calm-woven-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42496,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:23:59.709318+00:00",
  "ended_at": "2026-08-25T02:24:06.504900+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "bd0dd29e-0b33-496e-ade3-b64b733609e5",
  "name": "brisk-wandering-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49176,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:57:46.225209+00:00",
  "ended_at": "2026-08-25T01:57:52.604193+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8732435c-f810-4aba-8337-571011b8c5f8",
  "name": "frank-reedy-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54208,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:55:56.904286+00:00",
  "ended_at": "2026-08-25T01:56:02.904957+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "313773fd-fc11-444e-bd37-6160c08fa9f6",
  "name": "diligent-alpine-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48886,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:53:05.021604+00:00",
  "ended_at": "2026-08-25T01:53:10.602311+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "637ef547-a9e6-44ce-b908-e1af5ca087fb",
  "name": "languid-faded-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47434,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:49:12.705834+00:00",
  "ended_at": "2026-08-25T01:49:20.204216+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "caf9d667-2d91-4f0a-afce-0abe0c7537d1",
  "name": "subtle-loyal-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48508,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:37:23.103341+00:00",
  "ended_at": "2026-08-25T01:37:30.931480+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "6dba1621-d701-482f-a796-247b81db02d8",
  "name": "creaky-daring-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60974,
  "username": "vncuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 200,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:36:12.827386+00:00",
  "ended_at": "2026-08-25T01:36:17.904756+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "193bcc62-3283-45f5-a0cd-ac48085a8f75",
  "name": "languid-coral-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45062,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:36:01.110209+00:00",
  "ended_at": "2026-08-25T01:36:06.324526+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "064f552f-f44e-46dd-978c-02bf307719ef",
  "name": "lively-pristine-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54420,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:31:54.909543+00:00",
  "ended_at": "2026-08-25T01:32:01.899286+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "546932d4-53f8-44c1-aaa1-4a40bbe0c7a2",
  "name": "rustic-rapid-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51634,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:24:05.311580+00:00",
  "ended_at": "2026-08-25T01:24:10.915540+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "435963ea-8326-4cd3-8002-72b0b89ad0cc",
  "name": "fabled-obsidian-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44068,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:19:57.806523+00:00",
  "ended_at": "2026-08-25T01:20:05.827921+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8842157a-7de6-4845-9b20-865ad1e7c0cc",
  "name": "fabled-tranquil-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38570,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:18:03.211921+00:00",
  "ended_at": "2026-08-25T01:18:08.512094+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "796965cc-63b4-48a2-b77d-3353e3a5f486",
  "name": "cheerful-hidden-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43230,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:16:58.416173+00:00",
  "ended_at": "2026-08-25T01:17:06.301704+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "556ff795-5b74-4df6-a4f9-7044f25fb51a",
  "name": "breezy-hazy-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43434,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:07:38.212110+00:00",
  "ended_at": "2026-08-25T01:07:45.108066+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "28bca817-39ee-4c21-acca-5ee8c5227fb2",
  "name": "quartz-crimson-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54682,
  "username": "username",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:19.609451+00:00",
  "ended_at": "2026-08-25T01:05:24.929201+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8b86fbfc-1c40-4cac-ae59-9b0a38f51fdd",
  "name": "lucid-stoic-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40422,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 227,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:05.812816+00:00",
  "ended_at": "2026-08-25T01:05:12.404661+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f9588a5f-a7a6-4cbf-a77b-c88326fb6b12",
  "name": "somber-plush-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46850,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:58:50.504512+00:00",
  "ended_at": "2026-08-25T00:58:58.503327+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c8edf63d-eb71-48ff-9773-1dfceccdddb9",
  "name": "reedy-tranquil-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 32934,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:55.848172+00:00",
  "ended_at": "2026-08-25T00:56:01.431408+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "27ae847d-f81e-4647-8dc4-63364c73b4de",
  "name": "blunt-thorny-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38536,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:26.192774+00:00",
  "ended_at": "2026-08-25T00:55:31.201315+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c73eb2e9-8ef3-49cd-95ef-f81abcb6674a",
  "name": "jolly-loyal-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33326,
  "username": "chris",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:18.825540+00:00",
  "ended_at": "2026-08-25T00:55:25.710427+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "4850442b-04e8-4d35-9214-193567882e89",
  "name": "vaulted-emerald-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56326,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:58.209755+00:00",
  "ended_at": "2026-08-25T00:53:07.108291+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c1a717c3-427c-42c5-b4af-aa0e4a183444",
  "name": "blithe-hidden-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39850,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:01.307991+00:00",
  "ended_at": "2026-08-25T00:52:09.534491+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "dc3a4fb3-2f6f-49c2-801f-765138d64ff1",
  "name": "dewy-thrifty-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35998,
  "username": "opc",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:36.422299+00:00",
  "ended_at": "2026-08-25T00:51:42.404067+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "810f17ab-3d53-4815-bcdb-83c05dfc871c",
  "name": "bronzed-indigo-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46066,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:08.100341+00:00",
  "ended_at": "2026-08-25T00:51:14.216582+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e4ae4dca-8214-4d46-aa36-66ebb107f6f9",
  "name": "mottled-jovial-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46914,
  "username": "admin1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:40.207391+00:00",
  "ended_at": "2026-08-25T00:47:48.305108+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "45e72e6e-f71c-4657-82f6-0444f08017a3",
  "name": "watchful-quiet-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55886,
  "username": "deployer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:45:26.998598+00:00",
  "ended_at": "2026-08-25T00:45:30.914664+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "12146f26-c1c0-410b-966d-9b30582398be",
  "name": "pleasant-dewy-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54232,
  "username": "centos",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:15:11.209026+00:00",
  "ended_at": "2026-08-24T10:15:19.620222+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "91dcf51c-ebfd-4e8b-b336-2b918196f97a",
  "name": "nameless-thawing-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42598,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:14:11.334375+00:00",
  "ended_at": "2026-08-24T10:14:19.523122+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2c86bdcc-67be-4825-b02e-c75f2cc91cfc",
  "name": "rugged-gnarled-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46598,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:11:29.731484+00:00",
  "ended_at": "2026-08-24T10:11:36.510352+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "dadba46b-d2cb-4c7f-8f52-c2572d4a079f",
  "name": "graceful-reedy-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56440,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:42.284662+00:00",
  "ended_at": "2026-08-24T10:08:51.098245+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f0a41ab0-37f9-456b-91f1-e4b1e7a48a67",
  "name": "mindful-russet-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33254,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 286,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:47.621255+00:00",
  "ended_at": "2026-08-24T10:02:55.515436+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "4840c051-a0c0-42c7-91b2-f06dab6b3ccd",
  "name": "cheerful-gleaming-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57096,
  "username": "esuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:58:14.815821+00:00",
  "ended_at": "2026-08-24T09:58:22.016670+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "4fc1d680-7262-453e-b626-790d340b7cc0",
  "name": "airy-mottled-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57590,
  "username": "testuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 255,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:47:11.614953+00:00",
  "ended_at": "2026-08-24T09:47:20.604793+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f4067ce6-2865-45ba-90a9-eb2d91cb065d",
  "name": "northern-feral-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51122,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:46.186539+00:00",
  "ended_at": "2026-08-24T09:44:51.317865+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c5eb97fc-2ed6-4231-a48b-e4c9543bd074",
  "name": "gloomy-reedy-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59732,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:39:19.348255+00:00",
  "ended_at": "2026-08-24T09:39:27.008786+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3f9cf4be-35d3-439e-ac28-a349f29b7a11",
  "name": "fickle-golden-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34174,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:36:55.814223+00:00",
  "ended_at": "2026-08-24T09:37:02.942385+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3e6b16af-c3a4-4698-8144-0b928c26b6ad",
  "name": "hollow-stoic-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57420,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:37.731066+00:00",
  "ended_at": "2026-08-24T09:35:43.106462+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "88a296fa-ffbe-44c0-aa89-458bcfd12488",
  "name": "faded-frank-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59946,
  "username": "opc",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:30:38.218135+00:00",
  "ended_at": "2026-08-24T09:30:44.913184+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7fd1bd03-e44f-4942-b5d1-38c981b1a2d9",
  "name": "gallant-obsidian-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41622,
  "username": "sysupdate",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:20:54.028008+00:00",
  "ended_at": "2026-08-24T09:21:00.809702+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "aea0cd4b-6fbd-4110-9de7-9c10b7f0b6a8",
  "name": "early-gallant-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37036,
  "username": "root1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:18:57.829062+00:00",
  "ended_at": "2026-08-24T09:19:03.211561+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f729c0b5-fa11-4ece-a727-0dc5ad103eb9",
  "name": "wiry-ginger-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36776,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:17:17.817314+00:00",
  "ended_at": "2026-08-24T09:17:24.785072+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "659c3ec3-837f-411d-b136-8ab5cb6e8c28",
  "name": "watchful-merry-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 35024,
  "username": "minecraft",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:47.023666+00:00",
  "ended_at": "2026-08-24T09:15:53.101317+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "4e51d43e-e329-4683-9063-cb164973d925",
  "name": "graceful-wandering-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60710,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:11:24.734853+00:00",
  "ended_at": "2026-08-24T09:11:31.005120+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a2192ba7-c0d8-4cf5-857a-64465e6957cf",
  "name": "balmy-dapper-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34002,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:28.133326+00:00",
  "ended_at": "2026-08-24T09:08:33.931602+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1b426c71-7c60-4b05-9cc7-ed4d365e4958",
  "name": "lawful-flinty-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40128,
  "username": "rdpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:25.089282+00:00",
  "ended_at": "2026-08-24T09:08:30.881953+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "97485275-890b-41ca-baa9-19f879de0487",
  "name": "sleepy-sooty-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33626,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:09.797590+00:00",
  "ended_at": "2026-08-24T09:08:16.829798+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "52b16429-7940-4f56-ae95-d416bc569fdb",
  "name": "early-western-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33982,
  "username": "dmdba",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:05:26.327545+00:00",
  "ended_at": "2026-08-24T09:05:34.002929+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "939f443a-a10c-4f4c-85fa-fdaa9982b4a8",
  "name": "civil-fleeting-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46594,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:02:31.902918+00:00",
  "ended_at": "2026-08-24T09:02:39.510097+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a10c4e5e-7185-40b6-90a4-62263379357f",
  "name": "dutiful-dusky-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39216,
  "username": "deployer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:01:09.302431+00:00",
  "ended_at": "2026-08-24T09:01:14.797336+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "ffd8e4fd-59bf-4410-ae96-aa9a82ec01c1",
  "name": "jolly-fickle-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54314,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:01:03.314100+00:00",
  "ended_at": "2026-08-24T09:01:11.541616+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f4864e52-0a7e-4bbd-bdd8-4966844496bc",
  "name": "brazen-supple-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46578,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:00:39.252509+00:00",
  "ended_at": "2026-08-24T09:00:45.287432+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "62552bb6-1dd7-4353-b3cd-f3778725bc61",
  "name": "jaunty-brisk-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56662,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:52:10.066960+00:00",
  "ended_at": "2026-08-24T08:52:17.908041+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e22f8815-ed38-4c5a-b84e-8ac75cadf1ee",
  "name": "solemn-rugged-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41286,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1894,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:46:28.710592+00:00",
  "ended_at": "2026-08-24T08:46:37.394609+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "dcf91295-8f36-4be7-bd20-c5b6f3225834",
  "name": "craggy-tender-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48596,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:40:50.705486+00:00",
  "ended_at": "2026-08-23T08:40:56.557788+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "b636be18-dd65-4666-bfab-79092035ab95",
  "name": "lawful-coral-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34144,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 173,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:40:36.188093+00:00",
  "ended_at": "2026-08-23T08:40:43.922356+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a19d0b2e-36f7-445b-917b-78f72ebd01f8",
  "name": "eager-lively-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41818,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:25.269091+00:00",
  "ended_at": "2026-08-23T08:39:33.033746+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e4517cf5-3369-4f3c-864e-709a8ea78677",
  "name": "zealous-emerald-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53990,
  "username": "wang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:22.879086+00:00",
  "ended_at": "2026-08-23T08:39:29.665904+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1d7f21f2-7ee4-499d-a732-1fac5ad8580f",
  "name": "weathered-opal-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41824,
  "username": "newuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 174,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:17.944333+00:00",
  "ended_at": "2026-08-23T08:39:23.395607+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a3feb693-98f8-4d77-88dc-3352079fa18e",
  "name": "fleeting-gleaming-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56082,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:49.935179+00:00",
  "ended_at": "2026-08-23T08:38:52.824852+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "b52fe564-8e86-49c9-a8f0-124496a34029",
  "name": "twilight-stormy-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36178,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:37:16.706662+00:00",
  "ended_at": "2026-08-23T08:37:21.391885+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2c33e1fb-abdf-4dc3-9e9b-21500c0aa2bc",
  "name": "austere-plush-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56314,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:36:29.040857+00:00",
  "ended_at": "2026-08-23T08:36:37.061624+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d82ea62c-3678-4bc0-8e80-7751fb2640b4",
  "name": "leafy-crystal-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52312,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:49.231820+00:00",
  "ended_at": "2026-08-23T08:35:54.990890+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c427b111-ee9e-4067-9d9e-ae36985e4079",
  "name": "wiry-fickle-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58618,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:14.825929+00:00",
  "ended_at": "2026-08-23T08:35:18.637433+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7182d2ed-c331-4219-88d0-e4aae68451ee",
  "name": "valiant-meadow-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59112,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 173,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:00.986610+00:00",
  "ended_at": "2026-08-23T08:35:04.139390+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8cc06353-0e0b-48c3-98da-656aeb1bf1b5",
  "name": "humble-solar-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42330,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:34:40.400516+00:00",
  "ended_at": "2026-08-23T08:34:44.247185+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "347446d9-4c05-4ca5-9bbb-0145366b72da",
  "name": "hidden-drifting-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53780,
  "username": "student",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:33:56.136715+00:00",
  "ended_at": "2026-08-23T08:33:58.598228+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2eb6a760-dff9-44ed-bfa9-e5d4de107cf4",
  "name": "earnest-coral-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42546,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:33:38.720068+00:00",
  "ended_at": "2026-08-23T08:33:40.710200+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "756e6861-e25e-465c-af5e-c7f4efd01649",
  "name": "placid-faded-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 45582,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 827,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:38:57.933942+00:00",
  "ended_at": "2026-08-22T12:39:14.053024+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "6b730111-ceef-4af7-a5e6-f3a11143817a",
  "name": "craggy-misty-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 38456,
  "username": "ai",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 436,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:36:25.728769+00:00",
  "ended_at": "2026-08-22T12:36:39.627046+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f1253235-27a9-449b-a734-122d58e3aea3",
  "name": "blunt-jolly-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 43530,
  "username": "steam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:36:14.381699+00:00",
  "ended_at": "2026-08-22T12:36:22.471459+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "6abbec4e-523d-45d7-95b7-d01037408cfd",
  "name": "oaken-weathered-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 50514,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 578,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:35:49.993749+00:00",
  "ended_at": "2026-08-22T12:35:59.206734+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1c4fa62b-17f7-4d05-9455-964739a734ea",
  "name": "civil-barren-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 49730,
  "username": "ftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 826,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:32:44.023989+00:00",
  "ended_at": "2026-08-22T12:32:50.551696+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "015a32b3-9c3e-4301-9bb3-7355134a9ae6",
  "name": "buoyant-knotted-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 49034,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 878,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:32:35.442615+00:00",
  "ended_at": "2026-08-22T12:32:50.914446+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "b01c3989-3db4-4c24-ba41-e8e16e29142d",
  "name": "brazen-coral-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 49710,
  "username": "amir",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 378,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:13:30.408625+00:00",
  "ended_at": "2026-08-22T12:13:40.195097+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "34671b25-16c2-47ba-bad6-fdfc11451c3e",
  "name": "solemn-western-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 55352,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:12:13.540515+00:00",
  "ended_at": "2026-08-22T12:12:24.432328+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "868c1900-e11f-4a0c-b075-174fb5bf3fc7",
  "name": "frugal-wiry-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 44086,
  "username": "kingbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 378,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:11:39.970050+00:00",
  "ended_at": "2026-08-22T12:11:48.180313+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e75f58f1-e5d1-4b38-8daf-eed7dcaa1cc4",
  "name": "electric-ancient-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 48204,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:09:56.434997+00:00",
  "ended_at": "2026-08-22T12:10:04.099080+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "df14766f-c2dd-4539-98f1-c25565669bcc",
  "name": "western-painted-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 54086,
  "username": "testuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 521,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:06:23.633241+00:00",
  "ended_at": "2026-08-22T12:06:30.205473+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "bf3d50c0-1ec3-4393-92e1-0b366403a293",
  "name": "sincere-mossy-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 42984,
  "username": "username",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:05:53.187530+00:00",
  "ended_at": "2026-08-22T12:06:10.522244+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8a36cf57-5a84-4aa5-b9ae-3259f9efc587",
  "name": "proud-early-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50052,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:05:10.891083+00:00",
  "ended_at": "2026-08-22T12:05:19.782698+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "0bd4ea04-b042-4ad4-bf6f-9bbcb56d561e",
  "name": "wandering-coral-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 49410,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:03:34.020131+00:00",
  "ended_at": "2026-08-22T12:03:41.473405+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3476d722-5222-4d34-a9e4-3a998e95bd1e",
  "name": "icy-lucid-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 47094,
  "username": "sonar",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:03:26.105582+00:00",
  "ended_at": "2026-08-22T12:03:32.920787+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c759ba4a-2270-4c36-819b-34ff732a72b0",
  "name": "feral-sleepy-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 49258,
  "username": "zlm",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:03:12.695542+00:00",
  "ended_at": "2026-08-22T12:03:16.161099+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "864f4895-5c1a-4cf5-9e90-1a84569d9cb4",
  "name": "tender-loyal-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 40954,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 413,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:02:55.528295+00:00",
  "ended_at": "2026-08-22T12:03:02.362989+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "21babcea-6057-4e73-b529-b815a7b05067",
  "name": "wistful-western-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 60598,
  "username": "node",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 409,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:01:05.018096+00:00",
  "ended_at": "2026-08-22T12:01:14.555246+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f271b662-57ab-4b46-a15a-e7b7c0dd581a",
  "name": "leafy-pristine-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50286,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 611,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:59:50.438348+00:00",
  "ended_at": "2026-08-22T12:00:01.849399+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "070cfcc3-0234-41eb-b0e3-89d99c010a7f",
  "name": "wistful-northern-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 38962,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 470,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:59:08.419642+00:00",
  "ended_at": "2026-08-22T11:59:19.634660+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "dfca6872-8e52-46c5-9cc5-96fbc53542c1",
  "name": "airy-proud-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 36248,
  "username": "rdpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:57:46.038294+00:00",
  "ended_at": "2026-08-22T11:57:53.659154+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "69af5d58-3306-411c-9f98-38451e66cbc0",
  "name": "marine-brazen-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 45758,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 553,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:56:24.577065+00:00",
  "ended_at": "2026-08-22T11:56:28.534780+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "0520d4c4-571a-4122-bbd1-7c7852827755",
  "name": "courtly-pleasant-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 42758,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:54:20.686322+00:00",
  "ended_at": "2026-08-22T11:54:24.243931+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "cbe0b3c0-4fa1-44e5-a78f-16f50bd0fb8b",
  "name": "cobalt-curious-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 37478,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:37:47.164430+00:00",
  "ended_at": "2026-08-21T13:37:52.389328+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "ffac8d52-3b21-4d5d-a11c-960e03303666",
  "name": "grassy-opal-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45224,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:24:03.753511+00:00",
  "ended_at": "2026-08-21T13:24:09.691650+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "85555898-9fdc-4e4b-9202-edfc1004fa96",
  "name": "fleeting-distant-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 46492,
  "username": "hu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 344,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:18:30.527398+00:00",
  "ended_at": "2026-08-21T13:18:39.256090+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "26a5d50d-b51e-457d-9c05-72b7cde47a6e",
  "name": "downy-loyal-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 34948,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:14:14.405048+00:00",
  "ended_at": "2026-08-21T13:14:20.138036+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "3ae63dc6-0978-4f90-8329-f6f05a05e8c1",
  "name": "distant-ruddy-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 40784,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 397,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:11:39.886397+00:00",
  "ended_at": "2026-08-21T13:11:47.659539+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "f1100677-5e13-4cd4-8848-091923bf1824",
  "name": "flinty-buoyant-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 33756,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:07:24.147766+00:00",
  "ended_at": "2026-08-21T13:07:29.409925+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "149bd13f-cc4d-400c-9470-d369584adbf1",
  "name": "sterling-grumpy-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 52120,
  "username": "chenxi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:04:48.774264+00:00",
  "ended_at": "2026-08-21T13:04:56.054429+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "d103d079-3b31-4678-9888-779ff9eae37f",
  "name": "ashen-creaky-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 57824,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 408,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:03:33.074687+00:00",
  "ended_at": "2026-08-21T13:03:37.312251+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "2af1e89a-c1a9-42c2-afb0-142d2c140120",
  "name": "idle-golden-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 38832,
  "username": "newuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:01:59.975070+00:00",
  "ended_at": "2026-08-21T13:02:07.955077+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "d727642f-4a60-4901-93ff-ae2bb7826267",
  "name": "indigo-sooty-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 38916,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 353,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:01:56.553633+00:00",
  "ended_at": "2026-08-21T13:02:02.174704+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "b22d9c80-775f-4a62-9396-59e0f189904f",
  "name": "rambling-boreal-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41982,
  "username": "tactical",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 354,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:58:24.063315+00:00",
  "ended_at": "2026-08-21T12:58:32.731715+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "0a8213aa-cfd4-4b52-b2f2-0c3c91b9f62f",
  "name": "pewter-fickle-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36224,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:32.961672+00:00",
  "ended_at": "2026-08-21T12:54:41.731968+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "e3d13101-b35a-4752-b911-36928f87be3d",
  "name": "jaunty-vernal-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36302,
  "username": "ai",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:20.054759+00:00",
  "ended_at": "2026-08-21T12:54:26.741189+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "0b1251db-edd1-48c6-a208-2789cd678973",
  "name": "quartz-western-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 46014,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:02.239095+00:00",
  "ended_at": "2026-08-21T12:54:09.166443+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "4e7969a7-cd6a-41e2-90fb-b8b9dcb74789",
  "name": "kindly-gentle-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 34138,
  "username": "openclaw",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:53:14.784729+00:00",
  "ended_at": "2026-08-21T12:53:22.230378+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "fafb6800-08e4-4dc0-8d66-71b01d902bea",
  "name": "thawing-lawful-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 52368,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:51:17.236120+00:00",
  "ended_at": "2026-08-21T12:51:23.435209+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "b13f8c07-cb51-4513-a302-9f315deef0f6",
  "name": "grumpy-russet-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 53216,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 255,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:50:56.133313+00:00",
  "ended_at": "2026-08-21T12:51:04.482366+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "3020d3d8-84d0-4b07-8d6f-3dab7b315103",
  "name": "scarlet-mighty-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39346,
  "username": "teamspeak",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:49:49.577071+00:00",
  "ended_at": "2026-08-21T12:49:55.874384+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "61bfd946-763d-4fcb-8bca-50bac0c64857",
  "name": "blazing-sandy-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36616,
  "username": "trade",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:49:21.388789+00:00",
  "ended_at": "2026-08-21T12:49:26.950550+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "ecd1f45c-32df-45f2-be78-cbc714b0ef1e",
  "name": "brisk-hazy-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 59894,
  "username": "sysupdate",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:47:11.114638+00:00",
  "ended_at": "2026-08-21T12:47:14.232404+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "e7bdbed1-912f-438d-987a-73a39ca69bfd",
  "name": "bashful-russet-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41898,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:46:35.113353+00:00",
  "ended_at": "2026-08-21T12:46:38.245811+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "39e52f77-a7d0-44da-8647-5e0c0dab7256",
  "name": "obsidian-indigo-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36220,
  "username": "runner",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:45:58.221700+00:00",
  "ended_at": "2026-08-21T12:46:03.855964+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "8950adc5-8001-4399-9465-e5dadcfc9fec",
  "name": "honest-mottled-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 54038,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1964,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:43:11.962113+00:00",
  "ended_at": "2026-08-21T12:43:28.776392+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "a0aeffef-8263-4a18-be5e-f9a675934b1e",
  "name": "muted-dappled-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 57964,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:43:23.531468+00:00",
  "ended_at": "2026-08-20T19:43:28.791513+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "0aa0e85e-3bc4-44c2-adac-f5f3bfeb1ea4",
  "name": "bitter-diligent-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 57356,
  "username": "chenxi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:09:38.411118+00:00",
  "ended_at": "2026-08-20T19:09:44.254736+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "55a58c4f-bb24-4ea8-a74f-629ce704f079",
  "name": "tender-thorny-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47620,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:09:17.223701+00:00",
  "ended_at": "2026-08-20T19:09:22.691476+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "92ec9c38-ddab-467c-b0e1-c1721aceff1d",
  "name": "gnarled-rapid-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 54750,
  "username": "trade",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:03:02.767335+00:00",
  "ended_at": "2026-08-20T19:03:09.226029+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "c129c8b2-b4b6-4cc5-b292-7ced83d57176",
  "name": "amiable-feathered-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 38822,
  "username": "martin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:59:56.432490+00:00",
  "ended_at": "2026-08-20T19:00:04.166645+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "dedb4c28-bc05-47ef-99ee-3cc26cbb523d",
  "name": "tidal-fabled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53206,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:57:36.353954+00:00",
  "ended_at": "2026-08-20T18:57:41.044752+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "b7f31c10-4387-46e3-9898-e03d3d67890a",
  "name": "blithe-dewy-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40304,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:55:31.929290+00:00",
  "ended_at": "2026-08-20T18:55:39.379819+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "86f9d0e1-78a4-4ef2-930d-896e39a23461",
  "name": "rapid-leafy-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37296,
  "username": "root1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:55:09.282919+00:00",
  "ended_at": "2026-08-20T18:55:13.784563+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "561606f2-e173-48e8-a823-dd392839f34e",
  "name": "whispering-brave-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 58694,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:54:11.674721+00:00",
  "ended_at": "2026-08-20T18:54:19.055972+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "38050141-f3bb-47a2-b54f-de08fed8eabb",
  "name": "northern-scarlet-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 36202,
  "username": "aaa",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:49:49.236910+00:00",
  "ended_at": "2026-08-20T18:49:55.831928+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "57a7290e-1ba4-4003-8989-a6852eca550c",
  "name": "gritty-cunning-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50894,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:48:52.460992+00:00",
  "ended_at": "2026-08-20T18:48:56.856554+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "a1dd2947-b132-43be-ac52-530352aa7461",
  "name": "whispering-verdant-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 43840,
  "username": "newuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:47:02.457634+00:00",
  "ended_at": "2026-08-20T18:47:09.235134+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "1fff3819-671d-4c97-ba52-d7a8b38098ea",
  "name": "wistful-frugal-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 59238,
  "username": "bot",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:46:42.624074+00:00",
  "ended_at": "2026-08-20T18:46:47.503228+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "1d9a33ac-8569-4265-b440-26b98f1fe1e1",
  "name": "hearty-jaunty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 33476,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:43:15.395237+00:00",
  "ended_at": "2026-08-20T18:43:22.534217+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "01f630b3-743c-4e39-8604-900922c08e4b",
  "name": "marine-ancient-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 44230,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:40:54.804116+00:00",
  "ended_at": "2026-08-20T18:41:01.255844+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "86793086-c689-40be-94ee-2509cb7d5615",
  "name": "lofty-umber-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 57662,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:40:41.298668+00:00",
  "ended_at": "2026-08-20T18:40:47.445507+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "f3b41bbf-e030-4fa7-9f4f-a16b11355611",
  "name": "silent-orderly-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42110,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:38:14.791571+00:00",
  "ended_at": "2026-08-20T18:38:20.545493+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "7f206484-921d-419e-8914-f5635fd0d627",
  "name": "gloomy-woven-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37098,
  "username": "elastic",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:35:47.935655+00:00",
  "ended_at": "2026-08-20T18:35:55.073022+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "0eb2984d-77a5-421f-a048-bfe9d92b7097",
  "name": "gentle-distant-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 58284,
  "username": "sysupdate",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:33:05.728625+00:00",
  "ended_at": "2026-08-20T18:33:13.118063+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "71f1fc3d-f957-43cb-8f31-d27dd5b1d3fa",
  "name": "merry-nimble-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 55446,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:31:11.861333+00:00",
  "ended_at": "2026-08-20T18:31:17.611718+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "5f8e11ac-1126-4a31-b7ea-fd8d4abb5705",
  "name": "gilded-pristine-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 33524,
  "username": "username",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:30:37.273768+00:00",
  "ended_at": "2026-08-20T18:30:42.641883+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "f71bbc2d-4678-49cf-a055-4feead1c1e6a",
  "name": "plucky-cheerful-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 35878,
  "username": "ai",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:29:26.228614+00:00",
  "ended_at": "2026-08-20T18:29:31.592728+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "7d1f91ec-5dae-4fe6-b21f-1e292608c25a",
  "name": "verdant-gilded-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50950,
  "username": "lin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:28:44.679758+00:00",
  "ended_at": "2026-08-20T18:28:51.300242+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "7dcb41df-89a0-46e2-bc42-e9bd783c2b07",
  "name": "alpine-smooth-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 57286,
  "username": "user2",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:28:31.047723+00:00",
  "ended_at": "2026-08-20T18:28:37.939718+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "35937f55-1b66-4cff-b833-fd14b1726d5b",
  "name": "stoic-eager-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 59946,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:28:04.731886+00:00",
  "ended_at": "2026-08-20T18:28:11.203828+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "c7d2f477-8e52-47f0-b428-89bcd88fbb97",
  "name": "hollow-graceful-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37360,
  "username": "student",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:25:21.502899+00:00",
  "ended_at": "2026-08-20T18:25:24.619608+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "ea877242-af34-4c37-8d30-14a4922e93b5",
  "name": "gloomy-freckled-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50382,
  "username": "hu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:24:43.310779+00:00",
  "ended_at": "2026-08-20T18:24:45.360787+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "e228b7fb-708e-43cd-b1bd-3e799ad3fdbd",
  "name": "rugged-fickle-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 54430,
  "username": "coder",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:09:00.469234+00:00",
  "ended_at": "2026-08-20T11:09:02.630968+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1557
 },
 {
  "id": "141e2811-0ec3-429f-885c-596fabad8718",
  "name": "primal-mottled-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 35638,
  "username": "ftpuser1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:02:12.849509+00:00",
  "ended_at": "2026-08-20T11:02:14.741489+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1547
 },
 {
  "id": "8577d2c2-f9d2-4756-aed0-69ec97eb4c3f",
  "name": "glacial-fleeting-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 34772,
  "username": "es",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:57:22.693723+00:00",
  "ended_at": "2026-08-20T10:57:24.846556+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1626
 },
 {
  "id": "c40b04ed-2071-48d7-b35b-b422b3047e3f",
  "name": "lofty-icy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 53292,
  "username": "niaoyun",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:56:04.804162+00:00",
  "ended_at": "2026-08-20T10:56:07.244872+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1608
 },
 {
  "id": "17345dbd-b88a-4801-80ba-c15e6877f5f4",
  "name": "icy-sunlit-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44858,
  "username": "liyang",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:51:35.317571+00:00",
  "ended_at": "2026-08-20T10:51:37.825070+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1564
 },
 {
  "id": "0be9aead-7761-43a7-a04d-a87ba5a8e3b9",
  "name": "dusty-shaded-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 59134,
  "username": "vbox",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:50:10.252470+00:00",
  "ended_at": "2026-08-20T10:50:12.526620+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1587
 },
 {
  "id": "20a44e09-a6a1-4ee4-8388-6c600838062c",
  "name": "emerald-civil-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51736,
  "username": "chenxi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:40:18.381114+00:00",
  "ended_at": "2026-08-20T10:40:20.495991+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1539
 },
 {
  "id": "33946bd2-66fb-4d29-85b4-49deb84662bc",
  "name": "sleepy-polar-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43434,
  "username": "john",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:35:36.061292+00:00",
  "ended_at": "2026-08-20T10:35:38.004856+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1624
 },
 {
  "id": "be3eafb4-528f-47ea-8e23-7a70a7ae13df",
  "name": "clever-loyal-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44788,
  "username": "student",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 171,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:30:52.974094+00:00",
  "ended_at": "2026-08-20T10:30:56.121504+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1552
 },
 {
  "id": "6dfea4da-5a40-4621-842a-b09d32c8439e",
  "name": "emerald-courtly-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42572,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:29:28.777577+00:00",
  "ended_at": "2026-08-20T10:29:30.979323+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1596
 },
 {
  "id": "6a98a9c3-11f9-4cc6-ab2f-c1042b4812c9",
  "name": "misty-primal-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56556,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:26:28.716592+00:00",
  "ended_at": "2026-08-20T10:26:30.770371+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1592
 },
 {
  "id": "e0c787d7-e9fe-439a-9fad-e97016617242",
  "name": "jolly-murky-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 38654,
  "username": "kingbase",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:24:28.011369+00:00",
  "ended_at": "2026-08-20T10:24:30.133591+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1484
 },
 {
  "id": "7882cb84-aef4-424d-9ba8-54f1c16fa8e7",
  "name": "grassy-supple-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 38576,
  "username": "minecraft",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:22:07.715427+00:00",
  "ended_at": "2026-08-20T10:22:09.757753+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1589
 },
 {
  "id": "c8b3b1ba-5c68-4ca8-8453-1f55d906c3db",
  "name": "scarlet-silent-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 48910,
  "username": "devops",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:20:53.386223+00:00",
  "ended_at": "2026-08-20T10:20:55.449019+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1683
 },
 {
  "id": "fd565059-4408-4e85-a25d-e71159a7f984",
  "name": "autumn-brisk-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 38764,
  "username": "adminuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:14:55.515483+00:00",
  "ended_at": "2026-08-20T10:14:58.125772+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1610
 },
 {
  "id": "88bfcf72-d4e1-4105-8c61-ee44c7ad61d4",
  "name": "lawful-tawny-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 37400,
  "username": "david",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:12:26.050736+00:00",
  "ended_at": "2026-08-20T10:12:28.196586+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1764
 },
 {
  "id": "d928cf22-683d-4b0e-80ca-862dc7458770",
  "name": "austere-eager-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 58938,
  "username": "openclaw",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 207,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:08:37.124345+00:00",
  "ended_at": "2026-08-20T10:08:39.656322+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1555
 },
 {
  "id": "e0d04294-1849-4362-99bf-93f4e0ab8799",
  "name": "primal-muted-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44138,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:05:26.862420+00:00",
  "ended_at": "2026-08-20T10:05:29.385913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1580
 },
 {
  "id": "4c0654dc-ca5b-4e2f-a8aa-f9ad3297f686",
  "name": "downy-grassy-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 50184,
  "username": "ai",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:04:50.247003+00:00",
  "ended_at": "2026-08-20T10:04:52.686301+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1536
 },
 {
  "id": "bda152fd-7c5c-49ee-b3fc-31d47f1b960a",
  "name": "rustic-downy-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42236,
  "username": "hu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:04:20.789051+00:00",
  "ended_at": "2026-08-20T10:04:22.574195+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1517
 },
 {
  "id": "712104e6-a905-4f33-a0ab-cc1b566dacbf",
  "name": "hearty-knotted-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 59592,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:03:09.292109+00:00",
  "ended_at": "2026-08-20T10:03:11.248082+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1752
 },
 {
  "id": "e5b2e659-4d61-4e92-983b-b2b34606a53e",
  "name": "gnarled-fabled-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 45462,
  "username": "root1",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:01:02.346608+00:00",
  "ended_at": "2026-08-20T10:01:04.872751+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1591
 }
]