[
 {
  "id": "9aa59f74-258e-401b-8971-718724bf4120",
  "name": "gnarled-loyal-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44044,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:44.325244+00:00",
  "ended_at": "2026-08-27T03:02:49.081488+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "940f4440-7273-4972-b331-bcc27c0d6aea",
  "name": "tranquil-lunar-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40870,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 353,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:45:10.523669+00:00",
  "ended_at": "2026-08-27T02:45:14.489711+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aa1c8efe-28e7-4344-8523-46dd2c089a78",
  "name": "misty-cheerful-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57328,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:09:19.027732+00:00",
  "ended_at": "2026-08-27T02:09:19.113876+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "15882ddb-651f-4a33-9814-18dde8ff075d",
  "name": "coral-rambling-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 34036,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:04:59.153294+00:00",
  "ended_at": "2026-08-27T02:05:02.886913+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba1cc3b0-44e8-43cb-96df-062d99a9377a",
  "name": "tidal-tangled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52190,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:53.302413+00:00",
  "ended_at": "2026-08-27T02:05:02.878147+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "30267b78-69c4-4822-9b8f-7f1ef9c594ba",
  "name": "velvet-fearless-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47138,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 410,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:18:31.704830+00:00",
  "ended_at": "2026-08-26T14:18:37.100713+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e92cb958-fb8f-40cb-bd28-adcfbe718e80",
  "name": "jovial-wry-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51206,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 519,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:06:39.001129+00:00",
  "ended_at": "2026-08-26T14:06:43.250126+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6ca49213-7a95-4e68-9173-0f1dd1e48624",
  "name": "ginger-mossy-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44154,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 784,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:27:31.547669+00:00",
  "ended_at": "2026-08-26T12:27:35.119729+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "607680c1-cc91-43ee-9d56-d450d8337591",
  "name": "kindly-oaken-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 57238,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:52:57.785212+00:00",
  "ended_at": "2026-08-26T11:53:03.129786+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e21b6994-764e-456d-b2e3-bef3c34ab180",
  "name": "nimble-candid-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55634,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 404,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:52:52.469811+00:00",
  "ended_at": "2026-08-26T11:53:03.142065+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1663
 },
 {
  "id": "7084def8-c726-4939-9bbb-772badb64b12",
  "name": "ivory-grassy-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36630,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:34:14.967657+00:00",
  "ended_at": "2026-08-26T06:34:19.779349+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "284a8797-e844-4f3e-8a8e-68612b11dc65",
  "name": "opal-burly-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39936,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 339,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:09.807095+00:00",
  "ended_at": "2026-08-26T06:28:14.114227+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "588115fd-a640-48f1-b4d4-1c79e6d4d31c",
  "name": "gentle-civil-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59582,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:09.371039+00:00",
  "ended_at": "2026-08-26T06:11:13.457684+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "99813c95-84b1-4a12-a213-6cd0f237a125",
  "name": "crystal-painted-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 35572,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:08:32.360792+00:00",
  "ended_at": "2026-08-26T06:08:34.128387+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4011c23-c64b-4144-aa11-08dfcc481eb0",
  "name": "graceful-courtly-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47260,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:08:27.853946+00:00",
  "ended_at": "2026-08-26T06:08:34.127097+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a8e83eeb-6f2d-4f39-811f-9302d82963dc",
  "name": "vernal-creaky-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 56366,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:45:08.446637+00:00",
  "ended_at": "2026-08-26T02:45:08.579278+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "c72c6066-3a0b-45ff-9582-797fa577a4e0",
  "name": "creaky-candid-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.190.51.254",
  "src_port": 54534,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 80,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T23:54:45.005639+00:00",
  "ended_at": "2026-08-25T23:54:45.156423+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3266
 },
 {
  "id": "be48baa7-47c1-4acc-b8b6-9b4b9ff46a9d",
  "name": "hardy-nameless-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 60006,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:54:31.679768+00:00",
  "ended_at": "2026-08-25T23:54:31.818549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d9b80df-a659-4a8c-926a-30b0542bdb51",
  "name": "keen-snowy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.190.51.254",
  "src_port": 54554,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:54:24.080613+00:00",
  "ended_at": "2026-08-25T23:54:25.899021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d6da8855-69fe-4798-b318-d1430468e05b",
  "name": "jagged-lanky-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46038,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:53:42.452331+00:00",
  "ended_at": "2026-08-25T22:53:44.009532+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c98b46cf-75d3-42c3-9d1b-d288f050c59f",
  "name": "fickle-feral-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34512,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:24:12.157296+00:00",
  "ended_at": "2026-08-25T22:24:13.495953+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "89e92559-8662-48e5-81cc-7eee8446dd07",
  "name": "twilight-mellow-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33700,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:55.842114+00:00",
  "ended_at": "2026-08-25T22:14:57.009020+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "7999aa7d-9ce8-4b3d-8263-0784e20d00ea",
  "name": "pristine-pleasant-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 55334,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:14:25.023924+00:00",
  "ended_at": "2026-08-25T22:14:57.007762+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b53c60b8-45f3-48c5-af71-fc226570fb81",
  "name": "peaty-serene-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55524,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:10:21.793491+00:00",
  "ended_at": "2026-08-25T02:10:24.905136+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a5084f6c-da11-4d5b-8cc8-2ecdb5c42a4d",
  "name": "pewter-amber-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56190,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:08:30.904708+00:00",
  "ended_at": "2026-08-25T02:08:35.722706+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cdb19316-8304-43ca-8161-0ba9cba6a6a1",
  "name": "smooth-stormy-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48076,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:49:48.996773+00:00",
  "ended_at": "2026-08-25T01:49:52.921074+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "036b955c-1edd-4c0b-b0d9-728913f7d454",
  "name": "wry-sturdy-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 36070,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:36:04.710095+00:00",
  "ended_at": "2026-08-25T01:36:06.326044+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "193bcc62-3283-45f5-a0cd-ac48085a8f75",
  "name": "languid-coral-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45062,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:36:01.110209+00:00",
  "ended_at": "2026-08-25T01:36:06.324526+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1b3718ad-e66b-4079-87d2-3ff1b070eeb1",
  "name": "verdant-watchful-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 60596,
  "username": "mysql",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:29:05.126259+00:00",
  "ended_at": "2026-08-25T00:29:08.677127+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3999b14-c6b0-4376-ae1a-a4f464daaf05",
  "name": "snowy-ruddy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38114,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 163,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:18:46.745438+00:00",
  "ended_at": "2026-08-24T10:18:52.085271+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d1a85dbc-6d0b-4b73-93c8-305c883db6d3",
  "name": "upland-amber-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55608,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:46.994390+00:00",
  "ended_at": "2026-08-24T10:08:52.948015+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "95f94d06-482a-4916-838b-3638e59a4a04",
  "name": "blunt-wistful-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54862,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:30.933771+00:00",
  "ended_at": "2026-08-24T10:08:34.701817+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "366b4403-fbc4-43c4-a570-2c961fc7f82d",
  "name": "forlorn-mighty-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 40126,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:07:31.203204+00:00",
  "ended_at": "2026-08-24T09:07:33.107737+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "71eba652-a01a-4543-9c51-2d7bde0eed7c",
  "name": "inland-umber-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43760,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:07:25.754419+00:00",
  "ended_at": "2026-08-24T09:07:33.108501+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "8d575643-edbd-49b7-b23f-a68d2379e606",
  "name": "foggy-painted-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41908,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:26.841803+00:00",
  "ended_at": "2026-08-23T08:39:29.934438+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17e084f4-4d28-4fa3-b44c-dfd277ab58c3",
  "name": "merry-shifting-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 53886,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:34:03.275574+00:00",
  "ended_at": "2026-08-23T08:34:05.126348+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41e820bc-9f8f-424f-b2fa-241cf9ff1730",
  "name": "sleepy-wooded-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53842,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 174,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:34:02.081223+00:00",
  "ended_at": "2026-08-23T08:34:05.142444+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1663
 },
 {
  "id": "6f1757b8-03c5-4b96-9e68-786b13b3b049",
  "name": "inland-mighty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 55352,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 337,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:23:27.779865+00:00",
  "ended_at": "2026-08-22T12:23:31.630144+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6e6b532f-9815-4e33-9d12-f3b76219c4d9",
  "name": "reedy-bashful-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 56550,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:14:51.862372+00:00",
  "ended_at": "2026-08-22T12:14:56.702412+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aafe1467-7178-4e72-bcd6-bec12963a359",
  "name": "humble-freckled-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 43038,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:04:47.876825+00:00",
  "ended_at": "2026-08-22T12:04:49.876499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "809766ef-e4dc-467b-b104-bce5ef7d1d62",
  "name": "proud-fabled-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 53490,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 362,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:04:43.525161+00:00",
  "ended_at": "2026-08-22T12:04:49.879710+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "44050eff-2367-4647-839e-7c93e3a4f071",
  "name": "hardy-granite-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 58808,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:15:57.098371+00:00",
  "ended_at": "2026-08-21T13:16:01.350739+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "2e237095-47a4-455b-b3a8-fae885c5d0c4",
  "name": "granite-watchful-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 54022,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:11:22.830896+00:00",
  "ended_at": "2026-08-21T13:11:26.243776+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "2232dea2-e2e9-4209-a9e8-3c01c006df5f",
  "name": "diligent-glassy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 59904,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:55:36.446200+00:00",
  "ended_at": "2026-08-21T12:55:42.221364+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "04d050e0-ff4a-4cf1-a23f-83565b6dc458",
  "name": "frank-lively-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 59866,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T12:54:39.210882+00:00",
  "ended_at": "2026-08-21T12:54:41.730834+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0a8213aa-cfd4-4b52-b2f2-0c3c91b9f62f",
  "name": "pewter-fickle-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36224,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:32.961672+00:00",
  "ended_at": "2026-08-21T12:54:41.731968+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "77173d24-e7fb-487c-acde-eae19690b163",
  "name": "mindful-daring-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 49326,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:01:16.549448+00:00",
  "ended_at": "2026-08-20T19:01:21.502252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "05952c1e-df3e-45d0-9e1b-ce364df0c063",
  "name": "eager-reedy-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 49638,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:56:45.145645+00:00",
  "ended_at": "2026-08-20T18:56:47.898680+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "de672d4b-c7c1-4970-b710-e406c6f3eee2",
  "name": "painted-golden-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 60896,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:46:10.248917+00:00",
  "ended_at": "2026-08-20T18:46:14.089905+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "3bf540f6-882b-43ee-be08-39b80a6ce8dd",
  "name": "nimble-creaky-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 57656,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:44:45.372575+00:00",
  "ended_at": "2026-08-20T18:44:46.834125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3212bd3b-90c1-4cf8-af21-283c99efe2f4",
  "name": "wooded-inland-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 46084,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:44:39.852721+00:00",
  "ended_at": "2026-08-20T18:44:46.832913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "4dfc4e72-4ecb-489a-856d-0a02d2b5d1b9",
  "name": "seaward-curious-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 58772,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:03:51.665940+00:00",
  "ended_at": "2026-08-20T11:03:52.216356+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 849
 },
 {
  "id": "946cbc48-9f01-4114-80a9-f623eb365c91",
  "name": "keen-pleasant-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56006,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:43:23.161177+00:00",
  "ended_at": "2026-08-20T10:43:23.898052+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 769
 },
 {
  "id": "dc7e2262-284d-400b-a9fc-0b58ba6b2bf2",
  "name": "honest-hidden-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 37682,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:37:56.143100+00:00",
  "ended_at": "2026-08-20T10:37:56.730218+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 901
 },
 {
  "id": "5eb1c531-4b64-4943-8429-2e936aa65179",
  "name": "coral-sleepy-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 49850,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:20:31.112556+00:00",
  "ended_at": "2026-08-20T10:20:33.300454+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e26ca5e-88ce-4264-a8fd-214676a1ccc0",
  "name": "pewter-flinty-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 57692,
  "username": "mysql",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 179,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:20:30.673667+00:00",
  "ended_at": "2026-08-20T10:20:33.303044+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1594
 },
 {
  "id": "46a6fb2d-c1e1-45d9-afed-391cf16b1937",
  "name": "graceful-amber-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.148.121.204",
  "src_port": 55588,
  "username": "mysql",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:48:50.072410+00:00",
  "ended_at": "2026-08-20T05:48:51.344368+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]