[
 {
  "id": "b607e4b1-8409-4bbe-90a7-89d5b6021f89",
  "name": "fearless-lawful-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57194,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 570,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:02:22.655548+00:00",
  "ended_at": "2026-08-26T12:02:35.295764+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "c4ad6233-1d32-43f4-b72a-f3b43dd8bd71",
  "name": "diligent-gnarled-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37718,
  "username": "student",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:31:46.604937+00:00",
  "ended_at": "2026-08-25T01:31:52.217601+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "d3075879-b261-4873-9c5f-9791ecd79372",
  "name": "obsidian-sunlit-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56798,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:13:37.907570+00:00",
  "ended_at": "2026-08-25T01:13:42.808523+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "d652d09f-a022-4f74-a39e-63308a73a8b9",
  "name": "quartz-jovial-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38832,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:53:27.059628+00:00",
  "ended_at": "2026-08-25T00:53:35.418369+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "d330b0aa-ffca-47a9-9ac5-b760b9eb75c0",
  "name": "breezy-wandering-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39130,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:50:10.729370+00:00",
  "ended_at": "2026-08-24T09:50:17.901358+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "8e1331f6-aad9-4056-be39-2b685062ef18",
  "name": "lonesome-gloomy-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 34816,
  "username": "postgres",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:13:02.300024+00:00",
  "ended_at": "2026-08-22T12:13:10.249465+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "db199646-e1a5-425c-96dc-7f0fadaf4b6a",
  "name": "pleasant-nameless-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50652,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:55:49.585558+00:00",
  "ended_at": "2026-08-22T11:55:57.221005+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "08b53acf-f098-42ce-a213-41f185f62901",
  "name": "blunt-gleaming-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 35892,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:33:30.923204+00:00",
  "ended_at": "2026-08-21T13:33:40.435887+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "ec4cc281-d46e-42e4-a8f4-4db639a5efe8",
  "name": "stoic-brazen-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45194,
  "username": "cloud-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 303,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:28:57.378114+00:00",
  "ended_at": "2026-08-21T13:29:04.746634+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "86e30d91-b82a-4428-a94e-37dddf31b35c",
  "name": "fabled-rustic-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 49564,
  "username": "jellyfin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:07:42.159962+00:00",
  "ended_at": "2026-08-21T13:07:48.890061+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "d2ac3c8c-c549-462b-be5f-778c2c0ad4aa",
  "name": "lofty-tawny-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39852,
  "username": "minecraft",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 348,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:01:47.951409+00:00",
  "ended_at": "2026-08-21T13:01:56.513376+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "23929881-b77b-48ff-bd99-5ec06159468c",
  "name": "shaded-burly-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 59314,
  "username": "vncuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:57:13.969461+00:00",
  "ended_at": "2026-08-21T12:57:21.167497+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "5784ed69-e274-4c98-8757-322215c4d951",
  "name": "pristine-glassy-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 59054,
  "username": "vncuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:26:25.634219+00:00",
  "ended_at": "2026-08-20T19:26:32.669598+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "89fd7694-aeb5-45ad-9c57-d3a7e37946d0",
  "name": "jagged-snowy-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 34272,
  "username": "cloud-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:13:55.334534+00:00",
  "ended_at": "2026-08-20T19:14:01.970901+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "3f430081-9b2f-4e79-93aa-5eadffdcd9db",
  "name": "murky-blithe-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 41296,
  "username": "jellyfin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:57:47.304963+00:00",
  "ended_at": "2026-08-20T18:57:52.773070+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "727c6169-aa7b-42ea-89ed-f65993b76754",
  "name": "humble-wry-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 52668,
  "username": "fivem",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:33:47.696139+00:00",
  "ended_at": "2026-08-20T18:33:54.573863+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "3f300d0a-43ec-4006-bd13-228772122784",
  "name": "prickly-painted-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50406,
  "username": "ubuntu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:24:57.506148+00:00",
  "ended_at": "2026-08-20T18:25:00.065644+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "35f3340c-c16f-4c62-b4c1-3edd2027f896",
  "name": "eager-nautical-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 53704,
  "username": "vncuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:46:34.510223+00:00",
  "ended_at": "2026-08-20T10:46:36.839122+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1565
 },
 {
  "id": "c0068c07-c308-48f4-9e94-d53d453f20a2",
  "name": "valiant-cheerful-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 60616,
  "username": "cloud-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:46:06.955421+00:00",
  "ended_at": "2026-08-20T10:46:08.807515+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1675
 },
 {
  "id": "3d29e8cf-8a54-4c1c-b168-5e2ab5f57abe",
  "name": "thawing-silent-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 37744,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:38:04.967233+00:00",
  "ended_at": "2026-08-20T10:38:08.165419+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1697
 },
 {
  "id": "8d240b26-91f0-4430-a6c8-3262dc97b166",
  "name": "regal-fleeting-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 36322,
  "username": "dev",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:02:46.494824+00:00",
  "ended_at": "2026-08-20T10:02:48.686744+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 }
]