[
 {
  "id": "bb6850c9-3610-49ea-a531-8970c147c7ab",
  "name": "foggy-alpine-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 37220,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:17:14.435360+00:00",
  "ended_at": "2026-08-27T11:17:15.792348+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2134
 },
 {
  "id": "80588f09-5b45-433c-a7ba-5bcf10e4eeba",
  "name": "marbled-bitter-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38824,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:16:52.602182+00:00",
  "ended_at": "2026-08-27T11:16:54.497596+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "77608f33-c01d-44ce-bba6-fec8bce21a5a",
  "name": "dutiful-tranquil-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58746,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 455,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:59:12.587881+00:00",
  "ended_at": "2026-08-27T10:59:14.024809+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2068
 },
 {
  "id": "82481a4e-058d-419a-af81-90f806e8139a",
  "name": "brisk-early-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58768,
  "username": "sftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:59.457266+00:00",
  "ended_at": "2026-08-27T10:59:01.362318+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa5772ba-4495-4f74-8285-1931da8666b8",
  "name": "windswept-obsidian-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57354,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:39.240930+00:00",
  "ended_at": "2026-08-27T02:58:42.440546+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b50fd477-871a-4e19-a9df-5aa0e2fe2002",
  "name": "grassy-woven-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 47054,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:54:15.726997+00:00",
  "ended_at": "2026-08-27T02:54:19.493795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "85376a51-df34-45d3-8625-c3278aafee68",
  "name": "shaded-jaunty-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43794,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:54:11.975080+00:00",
  "ended_at": "2026-08-27T02:54:19.495352+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "ec51c693-298e-48b2-96e4-a6ef273e7082",
  "name": "wiry-brisk-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60690,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 595,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:00:28.600251+00:00",
  "ended_at": "2026-08-26T13:00:34.854002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f6671e8c-ecfd-491d-812a-1908b230389b",
  "name": "lawful-verdant-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 60998,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:35:11.468186+00:00",
  "ended_at": "2026-08-26T12:35:15.513611+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a12b502-2055-40f5-b317-12f602d8b107",
  "name": "rugged-bashful-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45138,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 648,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:35:05.737703+00:00",
  "ended_at": "2026-08-26T12:35:15.514877+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "9aec6d6f-62c9-474b-b1d1-837e00fdd548",
  "name": "hushed-bronzed-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35796,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:25:48.554475+00:00",
  "ended_at": "2026-08-26T06:25:52.123399+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c504054f-1a6f-42d7-b169-5e4f09c6f43e",
  "name": "boreal-smoky-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 51620,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:05:39.873056+00:00",
  "ended_at": "2026-08-26T06:05:42.212664+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "58691fdd-c18d-40b2-abd2-9e37a04e8287",
  "name": "glassy-early-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43512,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:33.296270+00:00",
  "ended_at": "2026-08-26T06:05:42.211340+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "04109869-980f-47e8-9c40-f52bc59840ff",
  "name": "frank-shaded-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53244,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:53:16.697961+00:00",
  "ended_at": "2026-08-25T01:53:19.723722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "904eb72a-2563-4874-a7ec-720e7c508da0",
  "name": "hushed-austere-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 43626,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:38:13.333436+00:00",
  "ended_at": "2026-08-25T01:38:15.435568+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c349b88-9dd6-475c-93b3-cf8d11869652",
  "name": "whispering-upland-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43424,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:38:07.707197+00:00",
  "ended_at": "2026-08-25T01:38:15.408874+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "8adee150-49ff-477e-a959-77d673b067fe",
  "name": "cheerful-indigo-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48966,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:24:07.809423+00:00",
  "ended_at": "2026-08-24T09:24:14.081060+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b21bb193-c5c4-43b1-9d24-00ddd038375d",
  "name": "umber-wry-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 34146,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:51:39.442620+00:00",
  "ended_at": "2026-08-24T08:51:41.549493+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15bb9f98-d48c-435f-88ab-21d4f5601f8b",
  "name": "dusky-amber-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43500,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:35.610390+00:00",
  "ended_at": "2026-08-24T08:51:41.550577+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "64221bbd-3855-4676-8836-90cc11b9e4d4",
  "name": "breezy-rapid-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.124",
  "src_port": 38908,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:31:50.197942+00:00",
  "ended_at": "2026-08-22T12:31:54.545033+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad5cbdcd-8ed9-4078-9dd0-86a12fe59587",
  "name": "valiant-hearty-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 34968,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1805,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:31:45.332882+00:00",
  "ended_at": "2026-08-22T12:31:54.546198+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "8a811f6f-4990-4f13-858f-775e9f531d8d",
  "name": "fickle-blunt-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50688,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 270,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:22:11.032481+00:00",
  "ended_at": "2026-08-22T12:22:16.379243+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b184852c-17e1-4e42-9f2e-28f90ff49946",
  "name": "subtle-pleasant-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 40138,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:21:42.788662+00:00",
  "ended_at": "2026-08-22T12:21:45.458701+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0ff5a790-09cb-4d1e-885b-89386ad3dacd",
  "name": "vigilant-sincere-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 49924,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:21:37.292969+00:00",
  "ended_at": "2026-08-22T12:21:45.459671+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "ddd4a9f5-3042-44a8-982a-d863a5c5a808",
  "name": "snowy-smoky-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 38374,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:10:12.228550+00:00",
  "ended_at": "2026-08-21T13:10:15.381588+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "522403c5-ea3c-4b4d-8d15-50131303efd0",
  "name": "thrifty-brisk-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 50632,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:46:11.459368+00:00",
  "ended_at": "2026-08-21T12:46:14.436099+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1655
 },
 {
  "id": "7c48c9c9-27f5-4729-8a73-e8db7008f21e",
  "name": "verdant-primal-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42016,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:21:09.525191+00:00",
  "ended_at": "2026-08-20T19:21:14.963317+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "134896da-46c1-4a05-be85-99ccd57f1813",
  "name": "fearless-barren-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 41702,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:26:27.042513+00:00",
  "ended_at": "2026-08-20T18:26:28.457894+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b829435c-fa46-4829-86cc-26c18a787e57",
  "name": "prickly-gnarled-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47076,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:26:25.010589+00:00",
  "ended_at": "2026-08-20T18:26:28.456662+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "ca4a15bb-779b-40ed-83a2-dc994f650fd0",
  "name": "rapid-solemn-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 33856,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 164,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:44:44.506144+00:00",
  "ended_at": "2026-08-20T10:44:44.738366+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "3c754652-9d3b-4b31-ad5f-0ff5846e7b47",
  "name": "freckled-mindful-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 42828,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:35:46.847348+00:00",
  "ended_at": "2026-08-20T10:35:48.447899+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c17cd4eb-b77b-4ad6-aa0c-0927b1977951",
  "name": "solar-canny-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56464,
  "username": "sftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:35:46.442526+00:00",
  "ended_at": "2026-08-20T10:35:48.448946+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1740
 }
]