[
 {
  "id": "e459aab7-715e-4c52-b6dd-107de585f86b",
  "name": "primal-mindful-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33190,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:08:27.564637+00:00",
  "ended_at": "2026-08-27T03:08:33.595280+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "01420f38-7078-4dd8-8bcd-0b1cac1cfe54",
  "name": "sooty-murky-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44096,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:56.234121+00:00",
  "ended_at": "2026-08-27T03:02:59.319884+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad0a6ba7-0d80-46f9-b60d-8d1ad3a00f71",
  "name": "breezy-restless-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52524,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:37:16.716415+00:00",
  "ended_at": "2026-08-27T02:37:21.754945+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17728af3-0823-446d-8291-267e7b94acda",
  "name": "hardy-drifting-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 57194,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:54:35.853810+00:00",
  "ended_at": "2026-08-27T01:54:38.185695+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ef28b1c-680b-459f-b487-17e29fb91cab",
  "name": "primal-wiry-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35080,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:33.557071+00:00",
  "ended_at": "2026-08-27T01:54:38.184355+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2d90b873-3f56-424f-ad44-104913f07bb8",
  "name": "clever-verdant-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56776,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 466,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:21:44.978764+00:00",
  "ended_at": "2026-08-26T14:21:49.932664+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8169a100-759c-4a0d-b015-05dfb35ab9b0",
  "name": "leafy-mighty-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34454,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 864,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:18:12.873037+00:00",
  "ended_at": "2026-08-26T13:18:17.279162+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "88dd2059-7d1a-48ad-b90c-a637db8f1886",
  "name": "marine-mighty-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37304,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:12:28.131609+00:00",
  "ended_at": "2026-08-26T13:12:34.319861+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea634161-4d47-4ccf-8bb2-cf69d0f8c6b8",
  "name": "gallant-wooded-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 37716,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:47:57.631101+00:00",
  "ended_at": "2026-08-26T12:48:02.223105+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "725546df-f7ba-4da8-a5e4-799b54d831b6",
  "name": "sturdy-spirited-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36102,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 822,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:47:52.580879+00:00",
  "ended_at": "2026-08-26T12:48:02.224326+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "2feaf874-9b6c-492d-b1e0-e108544c7e75",
  "name": "thawing-vernal-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37138,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:48.801194+00:00",
  "ended_at": "2026-08-26T06:28:52.115570+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "45939c5d-7fa7-43c9-9ca6-45bb3ceeb16d",
  "name": "clever-noble-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43686,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:24:37.597847+00:00",
  "ended_at": "2026-08-26T06:24:42.744954+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8cd6cf43-a992-4ed5-95d6-de83cf1cc751",
  "name": "courtly-craggy-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50806,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:26.157378+00:00",
  "ended_at": "2026-08-26T06:05:30.588248+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "58d1889d-1e33-49b8-bf04-6ff670c60296",
  "name": "verdant-tangled-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 53736,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:36:29.215698+00:00",
  "ended_at": "2026-08-26T05:36:30.954793+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14a0d4f2-2c3e-442e-87e9-07cdd74cc58b",
  "name": "glassy-candid-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35872,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:36:26.056521+00:00",
  "ended_at": "2026-08-26T05:36:30.955841+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "829db887-f85c-4734-925e-84ce30031233",
  "name": "plucky-twilight-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 45504,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:36:04.831869+00:00",
  "ended_at": "2026-08-26T02:36:04.957546+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "32e71fbb-6332-46e2-bac0-3259968a4a9f",
  "name": "crystal-pristine-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59746,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:32:35.064535+00:00",
  "ended_at": "2026-08-25T23:32:36.676025+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6ce679a9-dfa8-4ba8-8d0f-203a1922ace4",
  "name": "mindful-oaken-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47310,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:01:08.692687+00:00",
  "ended_at": "2026-08-25T23:01:10.281373+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "638bc828-59ec-4a84-baf4-f2f116506e98",
  "name": "ashen-kindly-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36606,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:56:03.744382+00:00",
  "ended_at": "2026-08-25T22:56:06.073057+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "70fddfbb-601f-4c7b-8fa4-2bdbbf1a3667",
  "name": "buoyant-western-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43142,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:12:33.424223+00:00",
  "ended_at": "2026-08-25T22:12:34.623901+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "81c95edb-b67a-4f04-a1e1-3205ea4f7a9a",
  "name": "lofty-zealous-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 41768,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:12:02.595220+00:00",
  "ended_at": "2026-08-25T22:12:34.625200+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d03e3767-10a4-419b-b8d6-71c4e5ccd256",
  "name": "lanky-humble-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.24.211.204",
  "src_port": 19335,
  "username": "hadoop",
  "client_version": "SSH-2.0-libssh2_1.11.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T02:50:35.968087+00:00",
  "ended_at": "2026-08-25T02:50:37.052013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "583248af-0871-449a-89e0-1066858d36e5",
  "name": "brave-sunlit-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53568,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:21:13.605668+00:00",
  "ended_at": "2026-08-25T02:21:17.523783+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bc1646ed-b1f6-49bc-afb5-21a4487bba1a",
  "name": "gallant-tidal-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54076,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:09:15.619350+00:00",
  "ended_at": "2026-08-25T02:09:21.123947+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5896f55-d05f-46e7-99b4-35c6c12f4ad0",
  "name": "candid-polar-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54298,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:57:46.328471+00:00",
  "ended_at": "2026-08-25T01:57:49.001041+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "071f7281-cd23-42a2-be97-c726c548d95e",
  "name": "painted-sandy-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 51616,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:23:09.404138+00:00",
  "ended_at": "2026-08-25T01:23:11.610987+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "13c7cafe-9ec6-4b5f-bfd4-07d7cb1409d7",
  "name": "hushed-windswept-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49040,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:23:04.605281+00:00",
  "ended_at": "2026-08-25T01:23:11.614050+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e5a4d9be-8931-41fd-acbc-1338a4510e6d",
  "name": "graceful-autumn-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 40674,
  "username": "hadoop",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:03:03.464927+00:00",
  "ended_at": "2026-08-24T20:03:04.864493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "099bf3ef-863b-456e-852a-1bef42096563",
  "name": "granite-vaulted-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40966,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:51:01.623995+00:00",
  "ended_at": "2026-08-24T09:51:05.608576+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "42e78b66-ea32-421b-9dae-05d9a6ab7e66",
  "name": "rambling-frosty-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59552,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:51.604627+00:00",
  "ended_at": "2026-08-24T09:38:54.815260+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f754107c-2737-4cd4-b9b2-403783082298",
  "name": "gallant-orderly-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37976,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:17:33.361507+00:00",
  "ended_at": "2026-08-24T09:17:38.286337+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c742a06b-c3c2-46f2-a6f1-57ebd54f4531",
  "name": "jovial-bashful-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 36782,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:16:19.731709+00:00",
  "ended_at": "2026-08-24T09:16:21.798049+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "660c36cd-2093-43c5-a2de-a8857eea56c4",
  "name": "merry-bitter-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49164,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:16.013413+00:00",
  "ended_at": "2026-08-24T09:16:21.799329+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "731335a0-8b11-45d4-a691-6d0c6b088085",
  "name": "fierce-stoic-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55530,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:41:58.438728+00:00",
  "ended_at": "2026-08-23T08:42:00.634082+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "b6424098-3e77-4dc1-a46e-3f4789833969",
  "name": "amber-lonesome-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.124",
  "src_port": 45796,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:31:06.998759+00:00",
  "ended_at": "2026-08-22T12:31:17.180109+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "83b5de12-46f3-4dd7-ae42-6d87e3216684",
  "name": "graceful-obsidian-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 60936,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1128,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:31:01.368430+00:00",
  "ended_at": "2026-08-22T12:31:17.181629+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "581519e7-deb3-4653-b4c7-623de4d4019a",
  "name": "subtle-obsidian-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 59448,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:15:00.735761+00:00",
  "ended_at": "2026-08-22T12:15:02.790029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29ab226a-04c1-454e-b75d-c2248558b7cf",
  "name": "cunning-orderly-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 53432,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 465,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:14:54.714783+00:00",
  "ended_at": "2026-08-22T12:15:02.788360+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "688fe824-e778-45fc-9105-7cef68e70e8a",
  "name": "frank-dewy-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 56548,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:27:23.879101+00:00",
  "ended_at": "2026-08-21T13:27:28.199692+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "0bc46254-60a7-400c-9e9a-5dc62dff6b30",
  "name": "meadow-dappled-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 37592,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:14:40.455126+00:00",
  "ended_at": "2026-08-21T13:14:44.600476+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "632eb36a-0793-4cf4-8008-93e8f5de431e",
  "name": "somber-lawful-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 50952,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T12:54:47.985829+00:00",
  "ended_at": "2026-08-21T12:54:50.893030+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39fb0928-4412-4919-813d-dd7afd7f573a",
  "name": "gleaming-autumn-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 54720,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:42.498294+00:00",
  "ended_at": "2026-08-21T12:54:50.892027+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "bc4a32d7-a129-4fdd-a0d0-99841e3a5ed7",
  "name": "blazing-brazen-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47376,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:47:48.768106+00:00",
  "ended_at": "2026-08-20T19:47:53.651141+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "6877b210-1b01-41b2-830a-ed125cedc28c",
  "name": "restless-lonesome-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 46578,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:01:50.261045+00:00",
  "ended_at": "2026-08-20T19:01:55.948455+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "1e6ab1b4-838e-4dfa-8752-bcfd25f1e5d9",
  "name": "hushed-burly-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53440,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:31:02.424555+00:00",
  "ended_at": "2026-08-20T18:31:07.374332+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1648
 },
 {
  "id": "2c7e5bb2-523e-48f9-88c7-d0c4fb84bbaa",
  "name": "lofty-amiable-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 36400,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:47:37.950181+00:00",
  "ended_at": "2026-08-20T10:47:39.043968+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 874
 },
 {
  "id": "de0619a1-c48c-44a4-8df9-3c7da857e843",
  "name": "placid-lanky-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56364,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:31:02.545773+00:00",
  "ended_at": "2026-08-20T10:31:03.293061+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 757
 },
 {
  "id": "3e5100d9-e437-4aa8-b5bb-24ff79c390d2",
  "name": "windswept-eager-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 60416,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:04:27.182261+00:00",
  "ended_at": "2026-08-20T10:04:28.633578+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b9fefab9-2fd5-4446-bf56-1d6a59cd0802",
  "name": "noble-fringed-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51272,
  "username": "hadoop",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:04:26.725550+00:00",
  "ended_at": "2026-08-20T10:04:28.635182+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1517
 }
]