[
 {
  "id": "063ba4fa-f4f3-4a10-a2ca-0fedab92e42f",
  "name": "dappled-rugged-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54790,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:46.854372+00:00",
  "ended_at": "2026-08-27T12:31:48.487515+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "0124f9d0-8a1b-43ec-9dd4-603fcd0150f3",
  "name": "northern-fickle-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54804,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:25.421123+00:00",
  "ended_at": "2026-08-27T12:31:27.101355+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a0c22a29-a291-4eeb-887c-eee06b203738",
  "name": "thawing-vernal-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 33888,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 430,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T11:46:19.852718+00:00",
  "ended_at": "2026-08-27T11:46:20.387530+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 736
 },
 {
  "id": "5e05863a-0fc9-4ab3-bf13-5c9511d97cff",
  "name": "jolly-vaulted-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 59374,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T11:43:41.313724+00:00",
  "ended_at": "2026-08-27T11:43:42.360630+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 27
 },
 {
  "id": "c4dc9bf3-9c93-4748-810e-7da8a48122cd",
  "name": "slender-wooded-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58704,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:52:59.834443+00:00",
  "ended_at": "2026-08-27T10:53:00.554651+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2050
 },
 {
  "id": "75959a23-2619-4688-a2a9-be3c32f0a780",
  "name": "sooty-dusty-bunting",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58724,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:52:49.796965+00:00",
  "ended_at": "2026-08-27T10:52:51.363848+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35151245-03ed-4299-b915-b4f2763e50d0",
  "name": "graceful-grumpy-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36082,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:00:03.200814+00:00",
  "ended_at": "2026-08-27T03:00:09.228047+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "492a4f68-4a55-4a9d-a7c1-e7734d69c487",
  "name": "hushed-dappled-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48606,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 353,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:14.672947+00:00",
  "ended_at": "2026-08-27T02:57:17.791917+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce54a8e5-ffb6-4018-89ff-956b2f0e43f4",
  "name": "amber-nautical-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33768,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:23.038102+00:00",
  "ended_at": "2026-08-27T02:35:29.203468+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b24e5881-ed01-4ecb-b428-51407945607f",
  "name": "dusty-misty-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51372,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:10:23.005360+00:00",
  "ended_at": "2026-08-27T02:10:24.285779+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "041ac485-a07c-4ec4-84e4-c98db319f082",
  "name": "lawful-quaint-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 45820,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:29.742542+00:00",
  "ended_at": "2026-08-27T01:59:31.434031+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "59dd970f-65e0-4a95-9a81-d9ec3db260b0",
  "name": "smoky-orderly-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51054,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:59:24.564558+00:00",
  "ended_at": "2026-08-27T01:59:31.435061+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "c5b4666d-5a0c-4328-b270-76ca4be280e3",
  "name": "gloomy-calm-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 51454,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:04:35.276417+00:00",
  "ended_at": "2026-08-26T23:08:35.419112+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21b667d1-e233-49a3-a859-78174f9915d4",
  "name": "gritty-proud-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45050,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:24:28.152006+00:00",
  "ended_at": "2026-08-26T14:24:33.154236+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b58655b-746d-41e9-9ca1-2136efa0f98d",
  "name": "polar-sullen-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40044,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 660,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:59:48.266938+00:00",
  "ended_at": "2026-08-26T13:59:54.001878+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09687120-5c98-4b68-a6ae-27750ab1c027",
  "name": "muted-tawny-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35824,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:57:49.100229+00:00",
  "ended_at": "2026-08-26T13:57:53.910340+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d547babe-3adb-4bdd-b85b-ece8814c15d2",
  "name": "creaky-vaulted-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39910,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 464,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:48:16.160178+00:00",
  "ended_at": "2026-08-26T12:48:19.645009+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "563a0e25-b132-479e-b00f-07260f125ec8",
  "name": "plush-jovial-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 47802,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:28:10.000788+00:00",
  "ended_at": "2026-08-26T12:28:13.569118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2def5477-2bbd-444c-a7fc-414d7be9b174",
  "name": "gentle-misty-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46826,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:28:05.562927+00:00",
  "ended_at": "2026-08-26T12:28:13.567536+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "34ce6ba2-036f-4b3d-aa16-267c934353e0",
  "name": "crisp-arctic-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56002,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:16.673691+00:00",
  "ended_at": "2026-08-26T06:32:21.583347+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ecfe9a47-5206-4c89-a333-0c6a1fccd302",
  "name": "scarlet-twilight-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42866,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:29:29.747836+00:00",
  "ended_at": "2026-08-26T06:29:33.154652+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "25026f92-f18b-4254-a8bd-ea72e0d8007b",
  "name": "kindly-fleeting-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49752,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:28.434405+00:00",
  "ended_at": "2026-08-26T06:09:31.696340+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e4719e48-70f0-424b-94c4-2434546eccc5",
  "name": "early-rapid-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34446,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:08:53.310029+00:00",
  "ended_at": "2026-08-26T06:08:56.481605+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8585e5d6-a93c-404a-9564-6c4bb00c981f",
  "name": "supple-misty-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 55434,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:59:26.537077+00:00",
  "ended_at": "2026-08-26T05:59:29.026971+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d37daedb-dd3d-4715-938f-c74709326005",
  "name": "humble-rugged-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47940,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:22.197277+00:00",
  "ended_at": "2026-08-26T05:59:29.026008+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f2a485f5-0bc2-4716-aaa2-b406295aa045",
  "name": "blazing-honest-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 43960,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:34:26.385399+00:00",
  "ended_at": "2026-08-26T02:34:26.506202+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f74805e4-cc97-4d43-b6c6-ef6c6e07142e",
  "name": "rustic-balmy-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.152.221.206",
  "src_port": 18382,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:20:08.099192+00:00",
  "ended_at": "2026-08-25T07:20:09.087832+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c511403-54a1-4205-b1d0-e06a23529456",
  "name": "lanky-gloomy-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47272,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:17:05.022372+00:00",
  "ended_at": "2026-08-25T02:17:07.801641+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0fc6398f-882f-42ed-9c4e-3b6a527b2aea",
  "name": "western-pewter-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56656,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:02:45.300251+00:00",
  "ended_at": "2026-08-25T02:02:48.302694+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2d6b53b8-e310-4004-b887-ed989f46d4b6",
  "name": "weathered-lunar-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58682,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:00:44.437712+00:00",
  "ended_at": "2026-08-25T02:00:47.599312+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e64aec5d-c8e8-471d-84d2-70c7c84cd462",
  "name": "spirited-ruddy-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42610,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:49:08.499833+00:00",
  "ended_at": "2026-08-25T01:49:13.612149+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fe61bc19-04d2-4120-b6ae-c7f9ccb5f352",
  "name": "bold-amiable-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 59698,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:57:57.002907+00:00",
  "ended_at": "2026-08-25T00:57:58.811322+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "042b9ddf-9c5c-4ddd-afb3-f6550d97c75c",
  "name": "fabled-thorny-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42904,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:57:54.006210+00:00",
  "ended_at": "2026-08-25T00:57:58.812652+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "c280ec70-6b19-446c-8616-cd5a212d3823",
  "name": "crisp-supple-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56560,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:17:22.045668+00:00",
  "ended_at": "2026-08-24T10:17:28.229786+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "324bd384-f33e-493b-944a-0a197ad17c70",
  "name": "stoic-granite-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41846,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:30:25.038161+00:00",
  "ended_at": "2026-08-24T09:30:29.403258+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d55a249f-c04c-4318-bdf5-f6a940a6030b",
  "name": "crisp-jovial-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49954,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:55.086870+00:00",
  "ended_at": "2026-08-24T09:15:58.202956+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "258d8b0d-b3d7-4aa6-b1be-603116704159",
  "name": "sullen-keen-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46572,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:03.740919+00:00",
  "ended_at": "2026-08-24T09:15:08.850270+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5709ca24-7c1e-4176-a39d-b1d0190645f4",
  "name": "hearty-reedy-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 37006,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:56:59.121191+00:00",
  "ended_at": "2026-08-24T08:57:01.525215+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e089ef4b-0d65-4029-8199-e3fce2a4bc78",
  "name": "lively-amber-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58062,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:56:55.085400+00:00",
  "ended_at": "2026-08-24T08:57:01.523644+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "b7e91afe-6ba6-4e8c-a672-b053c3c3f0b3",
  "name": "lively-zealous-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 55554,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:33:39.125564+00:00",
  "ended_at": "2026-08-23T08:33:40.709123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2eb6a760-dff9-44ed-bfa9-e5d4de107cf4",
  "name": "earnest-coral-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42546,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:33:38.720068+00:00",
  "ended_at": "2026-08-23T08:33:40.710200+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "ed10d68a-a26a-4278-b353-cc336052890a",
  "name": "faded-quiet-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 38654,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-22T13:56:27.759574+00:00",
  "ended_at": "2026-08-22T13:56:27.900072+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 837
 },
 {
  "id": "7d2523ad-7763-4b80-a428-6c6de6ecb402",
  "name": "feathered-jaunty-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 34272,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-22T13:54:06.515078+00:00",
  "ended_at": "2026-08-22T13:54:06.657680+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 837
 },
 {
  "id": "f567bc26-6240-465f-9ae0-dff2f938b90b",
  "name": "creaky-painted-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.114.125.22",
  "src_port": 59710,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 736,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T01:33:33.265881+00:00",
  "ended_at": "2026-08-22T01:33:33.493883+00:00",
  "ended_reason": "exec complete",
  "commands": 26,
  "transcript_bytes": 3274
 },
 {
  "id": "0cda6086-702e-477c-af08-0110375aa556",
  "name": "golden-buoyant-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 44636,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:32:54.951416+00:00",
  "ended_at": "2026-08-22T01:32:55.287885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0480c99-485e-4f02-897e-d951c05d1906",
  "name": "lanky-murky-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.114.125.22",
  "src_port": 59728,
  "username": "server",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T01:32:36.820152+00:00",
  "ended_at": "2026-08-22T01:32:38.682137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e23b84c-37af-47d4-b941-fe3a74d96b94",
  "name": "dutiful-vernal-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 55994,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:07:38.592221+00:00",
  "ended_at": "2026-08-21T13:07:42.006385+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "952c988b-5dfa-4bff-89de-8fe79de8d5a2",
  "name": "tidal-distant-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 47616,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:54:23.736829+00:00",
  "ended_at": "2026-08-21T12:54:29.849921+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "a3fc3ff8-1fe3-4ba8-ac4b-5034c4590525",
  "name": "jovial-quiet-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45746,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 437,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:48:10.663288+00:00",
  "ended_at": "2026-08-21T12:48:14.477434+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "df964b87-6edd-4d4a-a898-78b55c513c2c",
  "name": "mindful-western-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 48912,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-21T10:56:37.960351+00:00",
  "ended_at": "2026-08-21T10:56:38.061434+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 836
 },
 {
  "id": "e657720d-7958-47b2-840b-43c827cd93a3",
  "name": "breezy-brazen-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 60380,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-21T10:54:18.791540+00:00",
  "ended_at": "2026-08-21T10:54:18.894921+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 835
 },
 {
  "id": "f4828ff8-39da-4bcc-8926-3816b549835a",
  "name": "rugged-autumn-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 58718,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:49:46.391547+00:00",
  "ended_at": "2026-08-20T19:49:50.881171+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "a156dd80-b63a-445a-a312-7750d16eb5b7",
  "name": "smoky-foggy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53442,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:40:42.979710+00:00",
  "ended_at": "2026-08-20T19:40:49.108263+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "be9833b0-85c8-4b40-b26a-8cba4410768a",
  "name": "primal-gentle-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53518,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:35:27.601177+00:00",
  "ended_at": "2026-08-20T19:35:31.283569+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "124fd5a4-e98e-401d-96e2-e7bb51f02ade",
  "name": "honest-pleasant-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 35652,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:20:48.551823+00:00",
  "ended_at": "2026-08-20T19:20:54.324365+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "371cd6b4-178e-4be8-9ddc-bda45e9ffa6d",
  "name": "russet-slender-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 35690,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:09:00.813058+00:00",
  "ended_at": "2026-08-20T19:09:02.301151+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0acd70d-a928-4ecf-be4d-7a24aa00598a",
  "name": "fierce-hidden-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 51162,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:08:56.647280+00:00",
  "ended_at": "2026-08-20T19:09:02.302193+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1650
 },
 {
  "id": "7a9c1f73-15f9-4a21-a5e1-8ac26f6f12dc",
  "name": "early-forlorn-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 49644,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:05:43.498681+00:00",
  "ended_at": "2026-08-20T11:05:44.176048+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 748
 },
 {
  "id": "10e35394-4cc6-4db7-915f-9a4fb8dac557",
  "name": "subtle-cunning-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 49130,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:53:28.731078+00:00",
  "ended_at": "2026-08-20T10:53:29.559464+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 801
 },
 {
  "id": "739a0466-b06d-4352-bd67-f20bdaed525f",
  "name": "faded-vernal-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 41310,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 432,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:32:47.149549+00:00",
  "ended_at": "2026-08-20T10:32:47.620243+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "90ba5db7-ad72-4669-bb7a-b99a647b63a3",
  "name": "alpine-placid-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 33786,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:24:45.187569+00:00",
  "ended_at": "2026-08-20T10:24:46.657341+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d2b90ba-3da7-44b7-9b41-e8e9012c50ff",
  "name": "autumn-coral-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 33630,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:24:44.737248+00:00",
  "ended_at": "2026-08-20T10:24:46.658074+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1664
 },
 {
  "id": "49c53968-c7a1-4d08-8705-21d1ccd2bea0",
  "name": "western-silent-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 34220,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:07:12.410755+00:00",
  "ended_at": "2026-08-20T10:07:13.404719+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 }
]