[
 {
  "id": "b35078f3-5fb4-43f6-b112-bf371f237986",
  "name": "lawful-amber-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42784,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:59.205091+00:00",
  "ended_at": "2026-08-27T11:54:00.212862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2162
 },
 {
  "id": "ef161ab2-affa-4bce-8dd8-79016202d584",
  "name": "russet-gentle-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 46244,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:33.524936+00:00",
  "ended_at": "2026-08-27T11:53:34.884327+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fede980d-dd7e-465c-aa04-702f917a7a06",
  "name": "sunlit-crystal-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59174,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:47.943883+00:00",
  "ended_at": "2026-08-27T11:51:49.768626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2162
 },
 {
  "id": "7edbeb5d-62bd-45e8-bac5-d4f4ad3fc70c",
  "name": "bold-wiry-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59192,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:33.388854+00:00",
  "ended_at": "2026-08-27T11:51:35.139562+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "976c541a-e9a4-44e6-807c-35a486a51cf9",
  "name": "deft-weathered-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42158,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:06:10.277587+00:00",
  "ended_at": "2026-08-27T08:06:11.370164+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "fa4cb4a6-7c6e-4a37-9682-394989f02721",
  "name": "jagged-buoyant-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43802,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:05:55.420327+00:00",
  "ended_at": "2026-08-27T08:05:56.861871+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0625676f-e8b6-45ee-8c12-575b162587e3",
  "name": "courtly-fringed-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 39868,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:53:40.033002+00:00",
  "ended_at": "2026-08-27T04:53:41.077618+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "e83547c0-2414-4b73-80d7-06a92ebbc97c",
  "name": "whispering-mindful-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 39890,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:53:24.408503+00:00",
  "ended_at": "2026-08-27T04:53:26.175558+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5cf5de7-ea65-4d4e-a690-176b58bf379c",
  "name": "polar-crimson-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52546,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 310,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:00:38.134671+00:00",
  "ended_at": "2026-08-27T03:00:41.244428+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8bd5933b-4047-49e6-9d80-bb181d770ba7",
  "name": "gleaming-tawny-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50786,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:12.351080+00:00",
  "ended_at": "2026-08-27T02:50:15.606618+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4fe361bc-8b87-4a93-8119-6b2a724ad512",
  "name": "clever-sunlit-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60934,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:43.601266+00:00",
  "ended_at": "2026-08-27T02:41:47.440834+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3544b180-42c0-49b8-9954-b4434151a259",
  "name": "hazy-meadow-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55848,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:21:56.763363+00:00",
  "ended_at": "2026-08-27T02:22:02.364599+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0a32be25-0c3d-451e-acc9-65b2ad2813ce",
  "name": "distant-pewter-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 47948,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:23.899513+00:00",
  "ended_at": "2026-08-27T02:03:26.407174+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "22d9e57b-e313-48be-a96a-d65fb2aa7ce8",
  "name": "blazing-serene-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36740,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 426,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:19.808937+00:00",
  "ended_at": "2026-08-27T02:03:26.408687+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "3df4f059-c34b-4115-a3aa-bcd9be781bf6",
  "name": "prairie-icy-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34544,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:53:49.922814+00:00",
  "ended_at": "2026-08-27T01:53:51.302086+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "a3106420-1547-4953-b012-71c18236bf9c",
  "name": "dapper-mossy-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36492,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:30.721810+00:00",
  "ended_at": "2026-08-27T01:53:31.469011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2395d7d-8e0a-4245-a4ee-98dd507e1dd3",
  "name": "restless-regal-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.27",
  "src_port": 58650,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:17:32.426391+00:00",
  "ended_at": "2026-08-26T22:17:32.757023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee9c165a-8941-4fd6-b5b2-2dbcae3a4df2",
  "name": "daring-tangled-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 45582,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:08:34.614534+00:00",
  "ended_at": "2026-08-26T22:12:34.628411+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "230be448-d7ac-4cab-a2af-d2e1925932c1",
  "name": "noble-tender-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47614,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 340,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:33:58.365597+00:00",
  "ended_at": "2026-08-26T14:34:03.225851+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5959ec85-c565-4cb4-8b3b-617f97346060",
  "name": "brisk-flinty-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51284,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:23:25.691851+00:00",
  "ended_at": "2026-08-26T14:23:29.691769+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "634d2bd0-35c9-404c-a395-afab209d7a51",
  "name": "nimble-cunning-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35744,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:09:56.304320+00:00",
  "ended_at": "2026-08-26T14:10:00.460395+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "58273d2a-146c-41b5-8a1c-c9ed8612ee8d",
  "name": "lawful-humble-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60588,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 585,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:05:52.524187+00:00",
  "ended_at": "2026-08-26T14:05:58.407584+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d6d0bed7-188d-4aad-a6f6-17906736e7c4",
  "name": "lawful-murky-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41116,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 346,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:34:20.107571+00:00",
  "ended_at": "2026-08-26T12:34:24.080035+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6520eaaa-8d4f-4fc7-a608-29726bc40df5",
  "name": "golden-ginger-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40604,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 822,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:19:47.575025+00:00",
  "ended_at": "2026-08-26T12:19:51.605835+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "33f53130-2244-448b-a647-4ef6efe00ae3",
  "name": "stoic-solar-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 45730,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:32:40.368925+00:00",
  "ended_at": "2026-08-26T10:32:42.587422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2177
 },
 {
  "id": "337fe35f-4dde-4272-a95a-ab5a3adb673a",
  "name": "windswept-nimble-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 45744,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:32:19.120103+00:00",
  "ended_at": "2026-08-26T10:32:20.406871+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eb63bda6-373f-49f3-b28f-f19f0f439d3a",
  "name": "sandy-slender-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56664,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:20:44.866115+00:00",
  "ended_at": "2026-08-26T06:20:49.317397+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "74180c04-56b1-4247-9f06-919fd2fbc99c",
  "name": "graceful-indigo-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52660,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:01:18.272951+00:00",
  "ended_at": "2026-08-26T06:01:21.929999+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ebf5f0e2-910b-451d-9997-cec90305a63e",
  "name": "vaulted-arctic-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50206,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:53.417664+00:00",
  "ended_at": "2026-08-26T06:00:56.202921+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a3d1a006-ae86-4661-9418-4e0a0aca9b03",
  "name": "breezy-downy-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45488,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:47:19.549882+00:00",
  "ended_at": "2026-08-26T05:47:24.811305+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d2350562-7cb5-4852-9b7b-fdb70ffed129",
  "name": "sleepy-forlorn-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45962,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:47.413013+00:00",
  "ended_at": "2026-08-26T05:42:52.366618+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7bce6a9e-3c15-4222-96c9-bcd5dee15a03",
  "name": "curious-russet-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 55344,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:41:36.228144+00:00",
  "ended_at": "2026-08-26T05:41:38.315243+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d6e405e-4e50-4f91-a908-be818b85bc04",
  "name": "salty-fringed-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51342,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:41:31.521310+00:00",
  "ended_at": "2026-08-26T05:41:38.314073+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "812171e8-50f6-4dcf-ae81-d6bdfb3d52e3",
  "name": "austere-upland-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45926,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:26:19.355094+00:00",
  "ended_at": "2026-08-25T23:26:21.048818+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4fe84a25-3e56-42cf-84c1-d9ff2e216288",
  "name": "sleepy-hazel-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48628,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:17:39.547895+00:00",
  "ended_at": "2026-08-25T23:17:41.083541+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "476c3bb6-f301-443c-bec0-9d00f04a3f44",
  "name": "prairie-meadow-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52318,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:16:04.958248+00:00",
  "ended_at": "2026-08-25T23:16:06.918698+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6ea55022-a3dc-4574-893c-107371b398da",
  "name": "brave-tender-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 49618,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:48.960877+00:00",
  "ended_at": "2026-08-25T22:44:51.110774+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "e1e71ff2-5e67-4629-80e0-3b37fe524cb3",
  "name": "serene-amiable-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 36366,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:44:18.108051+00:00",
  "ended_at": "2026-08-25T22:44:51.109597+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee9d9728-bdcb-4943-b9e5-368e21f93454",
  "name": "whispering-hazy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "98.70.50.166",
  "src_port": 41214,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:52:46.484465+00:00",
  "ended_at": "2026-08-25T08:52:46.663187+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3815
 },
 {
  "id": "1081446a-cf30-4337-8a33-37358b3eaa7d",
  "name": "gleaming-solemn-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 38154,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:27.664502+00:00",
  "ended_at": "2026-08-25T08:52:27.933723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc0916da-ba0c-4382-b02c-2ba65d8121fa",
  "name": "early-sunlit-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 41228,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:10.433909+00:00",
  "ended_at": "2026-08-25T08:52:11.568785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93e5e373-92dd-4353-b1a2-b62f2860c092",
  "name": "inland-prairie-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51534,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:18:29.709781+00:00",
  "ended_at": "2026-08-25T02:18:33.825624+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "190c2346-1583-4157-b22b-aa3a96a78c04",
  "name": "muted-vigilant-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51798,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:09:33.489063+00:00",
  "ended_at": "2026-08-25T02:09:36.292457+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "814f960c-4dd6-43b3-bde5-009e01d5fc74",
  "name": "sturdy-sleepy-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38454,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:06:04.711770+00:00",
  "ended_at": "2026-08-25T02:06:08.826008+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a04e56b-054a-4993-a1cc-13685e39351d",
  "name": "lucid-frugal-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40250,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:28:57.421466+00:00",
  "ended_at": "2026-08-25T01:29:00.299324+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f623ea00-6b59-476e-b79d-44ab277c5b65",
  "name": "flinty-cunning-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56300,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:24.914693+00:00",
  "ended_at": "2026-08-25T00:55:30.519026+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "485ad492-daf1-4ec8-b47b-d200cd4a29ba",
  "name": "mottled-dewy-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 39848,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:50:51.295941+00:00",
  "ended_at": "2026-08-25T00:50:53.203606+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f475b6c-5b75-495f-baa8-320b80a70f21",
  "name": "electric-supple-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58168,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:50:47.909891+00:00",
  "ended_at": "2026-08-25T00:50:53.202048+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1663
 },
 {
  "id": "0ef7211e-3a13-4e22-a03a-25e4ab727f18",
  "name": "jaunty-diligent-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 29554,
  "username": "ftpuser",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:51:49.123907+00:00",
  "ended_at": "2026-08-24T20:51:53.620461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89043c31-8f5a-47c1-849a-7c476392be5e",
  "name": "ruddy-shifting-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48378,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:56.088076+00:00",
  "ended_at": "2026-08-24T10:17:01.718084+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca0d2ac8-4b93-4238-ba2a-9c442853be50",
  "name": "gnarled-dapper-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45320,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:55:50.337889+00:00",
  "ended_at": "2026-08-24T09:55:53.516070+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ee1cce53-7cdf-470e-b128-a23c8db3dc2b",
  "name": "ginger-western-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51694,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:35.901187+00:00",
  "ended_at": "2026-08-24T09:41:40.533125+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3b8a697a-9071-4ea2-93be-c377dbfdd0a0",
  "name": "hushed-proud-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56230,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:27:01.418870+00:00",
  "ended_at": "2026-08-24T09:27:06.139768+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "680ade13-4b98-4407-8b54-d5cc38203d8f",
  "name": "proud-jolly-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46334,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:23:19.295405+00:00",
  "ended_at": "2026-08-24T09:23:23.195772+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "625edf47-9c57-48e0-b853-896a0d86efbf",
  "name": "electric-placid-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 42228,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:11:28.784538+00:00",
  "ended_at": "2026-08-24T09:11:31.003787+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e51d43e-e329-4683-9063-cb164973d925",
  "name": "graceful-wandering-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60710,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:11:24.734853+00:00",
  "ended_at": "2026-08-24T09:11:31.005120+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d0f2fa9b-54a0-4c6f-aea5-ff3d7ab1d051",
  "name": "sleepy-smoky-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44108,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:29:25.293610+00:00",
  "ended_at": "2026-08-23T21:29:25.915547+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc24c732-24c6-48e0-bb86-23859419fd24",
  "name": "wiry-austere-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 50036,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 612,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:10:49.760102+00:00",
  "ended_at": "2026-08-23T16:10:50.485027+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 704
 },
 {
  "id": "1cfc70a3-1591-4264-883f-db0022b95f90",
  "name": "airy-brave-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 37932,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:10:46.655586+00:00",
  "ended_at": "2026-08-23T16:10:48.342413+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a414ce77-d95d-4f32-b3a9-52939322dfd9",
  "name": "distant-vernal-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 27134,
  "username": "ftpuser",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T04:07:43.672222+00:00",
  "ended_at": "2026-08-23T04:07:47.348926+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a0c9132-6dee-4f72-9d68-d4faa24a1033",
  "name": "gleaming-placid-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.25.158.70",
  "src_port": 57626,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 373,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:58:21.019162+00:00",
  "ended_at": "2026-08-23T00:58:21.109836+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3397
 },
 {
  "id": "740f17d6-58db-44a4-8699-b90eb4629f3a",
  "name": "misty-quiet-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 52390,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:58:06.895674+00:00",
  "ended_at": "2026-08-23T00:58:07.292565+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e7c95fb-1b24-4f54-86a6-6ab7f884741f",
  "name": "earnest-tender-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.25.158.70",
  "src_port": 57652,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T00:57:56.412337+00:00",
  "ended_at": "2026-08-23T00:57:58.001315+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a044c3c-2ee6-4775-9c8f-221b441fc155",
  "name": "weathered-painted-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 59526,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 344,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:16:05.250805+00:00",
  "ended_at": "2026-08-22T12:16:09.196393+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c2881651-20b4-4e40-8f26-c79a103d9080",
  "name": "cheerful-earnest-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 53134,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:09:34.593260+00:00",
  "ended_at": "2026-08-22T12:09:39.900965+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3100842a-def4-47f9-8a76-811d9f38d955",
  "name": "diligent-languid-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 41978,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:54:21.496824+00:00",
  "ended_at": "2026-08-22T11:54:24.247690+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0520d4c4-571a-4122-bbd1-7c7852827755",
  "name": "courtly-pleasant-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 42758,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:54:20.686322+00:00",
  "ended_at": "2026-08-22T11:54:24.243931+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "cc026bcb-8f37-418f-a853-ad13d79e6f45",
  "name": "slender-northern-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.230.18.133",
  "src_port": 57384,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T18:12:23.831896+00:00",
  "ended_at": "2026-08-21T18:12:23.919344+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3758
 },
 {
  "id": "a0d2f1b2-6ba6-45fb-84de-6b3aba8f772b",
  "name": "coastal-steady-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 56616,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:12:09.298766+00:00",
  "ended_at": "2026-08-21T18:12:09.561949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79b4673c-ccfa-4cb9-b3ca-67c263469d33",
  "name": "foggy-vernal-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.230.18.133",
  "src_port": 57390,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T18:11:58.259989+00:00",
  "ended_at": "2026-08-21T18:11:59.667874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b00eda4f-224e-46eb-9490-4d27d5f3ada6",
  "name": "gleaming-hidden-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41284,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:51:21.438012+00:00",
  "ended_at": "2026-08-21T13:51:26.651499+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "e3a89c91-549c-4ea8-a333-b096716be701",
  "name": "peaty-crimson-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 42462,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 356,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:48:54.570229+00:00",
  "ended_at": "2026-08-21T13:48:58.979989+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "ef954610-2332-4475-97e6-7664c2c14226",
  "name": "humble-tawny-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 50386,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:41:18.442762+00:00",
  "ended_at": "2026-08-21T13:41:21.621813+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "941ed1ce-2bb2-41db-8413-073ab72a8fda",
  "name": "sturdy-supple-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 55002,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:12:56.169139+00:00",
  "ended_at": "2026-08-21T13:13:00.253641+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "8c906b60-50b1-4f08-a010-7492d99f28b4",
  "name": "dapper-gilded-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 58834,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:56:07.508811+00:00",
  "ended_at": "2026-08-21T12:56:12.796788+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "f085311a-5725-4b52-aa2b-78eb2f1c8d3d",
  "name": "grumpy-noble-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 50674,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T12:45:18.255649+00:00",
  "ended_at": "2026-08-21T12:45:20.048634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52ada1e2-6899-49c8-b31c-e2c09c9d0684",
  "name": "frugal-peaty-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 50836,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:45:14.346472+00:00",
  "ended_at": "2026-08-21T12:45:20.049260+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "bea26401-1576-4016-be67-e72720b341a9",
  "name": "verdant-calm-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47154,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 173,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:44:37.286559+00:00",
  "ended_at": "2026-08-20T19:44:40.317499+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "5c8fb925-0702-42ac-a529-ae33fbeea00f",
  "name": "blazing-crystal-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 34518,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:44:20.295592+00:00",
  "ended_at": "2026-08-20T19:44:26.322916+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "9cdd6f2f-bea1-4196-91ad-f5b40544e66e",
  "name": "watchful-silent-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42094,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:35:55.845842+00:00",
  "ended_at": "2026-08-20T19:35:59.859218+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "a7cec2f5-9811-430e-bcfc-56bf41533aa1",
  "name": "sullen-dapper-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47106,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:21:29.097969+00:00",
  "ended_at": "2026-08-20T19:21:32.975086+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "6e7611ba-b7ee-4dec-b8cc-25e6f98759d7",
  "name": "keen-coral-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53858,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:30:22.889041+00:00",
  "ended_at": "2026-08-20T18:30:28.454199+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "84a9d54c-de6e-4469-a3c0-9eba3238206b",
  "name": "bold-placid-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 58664,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:27:54.965505+00:00",
  "ended_at": "2026-08-20T18:27:56.181804+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2fda8a57-74bd-4501-a83c-79b04c4bc010",
  "name": "crimson-lucid-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 34274,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:27:51.645844+00:00",
  "ended_at": "2026-08-20T18:27:56.183055+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "23e9b4bc-bee5-4abb-a1d9-84fa52844e97",
  "name": "idle-gentle-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 40502,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:13:20.824516+00:00",
  "ended_at": "2026-08-20T14:13:23.196035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a6397f6-35bd-4081-b7f5-d2d24dc5f3ad",
  "name": "crystal-kindly-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.50.51.198",
  "src_port": 60018,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:01:24.606426+00:00",
  "ended_at": "2026-08-20T14:01:25.818626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f78dcb28-2f70-45bc-acf1-823c7ab0d380",
  "name": "nautical-airy-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 58276,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:01:12.304743+00:00",
  "ended_at": "2026-08-20T14:05:14.524184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "917ae668-ac6e-4a9b-a480-af5e91e993eb",
  "name": "rustic-twilight-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 57774,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:09:58.123596+00:00",
  "ended_at": "2026-08-20T11:09:58.954419+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 754
 },
 {
  "id": "a252dcf4-9095-434c-af87-d02a056775fa",
  "name": "sturdy-muted-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 36768,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:01:45.466118+00:00",
  "ended_at": "2026-08-20T11:01:46.272289+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 738
 },
 {
  "id": "f03e3bd3-8514-4354-9fac-e075dec3a6ab",
  "name": "marine-orderly-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 38844,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:54:43.650274+00:00",
  "ended_at": "2026-08-20T10:54:44.264363+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 855
 },
 {
  "id": "d3f2a916-e237-4bb9-b244-1387bbb65eae",
  "name": "buoyant-plush-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43250,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:25:51.276536+00:00",
  "ended_at": "2026-08-20T10:25:52.178233+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 878
 },
 {
  "id": "582fb6a6-db8e-408e-add0-0ff2bb7205bb",
  "name": "wandering-icy-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 39570,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:18:19.037921+00:00",
  "ended_at": "2026-08-20T10:18:20.567999+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 766
 },
 {
  "id": "6dde7753-9bcf-4f90-a85a-b93b61934ac3",
  "name": "cheerful-merry-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 56102,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:02:18.593638+00:00",
  "ended_at": "2026-08-20T10:02:20.470709+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "757dbfd4-49ee-4008-8baf-de5e6cf5ba80",
  "name": "curious-marbled-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 49728,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:02:18.108702+00:00",
  "ended_at": "2026-08-20T10:02:20.471538+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1608
 },
 {
  "id": "501abf1b-e382-4fce-bf5b-0b18c42eafdc",
  "name": "velvet-solar-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.75.247.232",
  "src_port": 48428,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:07:18.342778+00:00",
  "ended_at": "2026-08-20T06:07:20.193022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]