[
 {
  "id": "99ccf506-6ffc-4033-8775-6988a850b13b",
  "name": "whispering-placid-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51354,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:43.140989+00:00",
  "ended_at": "2026-08-27T12:31:45.015186+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "c6734aa3-50aa-4019-b55a-52fb9955b1db",
  "name": "faded-distant-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51370,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:18.039550+00:00",
  "ended_at": "2026-08-27T12:31:19.732461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "49ccb497-05db-4148-8304-2c5d508b062b",
  "name": "curious-obsidian-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 60504,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:56:00.052498+00:00",
  "ended_at": "2026-08-27T11:56:01.489475+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2187
 },
 {
  "id": "321a4e61-26d0-43eb-8416-0d2a81490681",
  "name": "smoky-gritty-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 45726,
  "username": "tempuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:46.592587+00:00",
  "ended_at": "2026-08-27T11:55:47.218542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f7a2c39-139e-45a1-b693-7aeafc13bfd0",
  "name": "mindful-sleepy-rook",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 33268,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T03:07:43.621431+00:00",
  "ended_at": "2026-08-27T03:07:45.372000+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c60626b-aea4-4bc8-9bb9-5c44fda2f193",
  "name": "chilly-shaded-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50546,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:40.436587+00:00",
  "ended_at": "2026-08-27T03:07:45.372815+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "5be9c8d2-815e-46a4-986e-807f1e3f4d87",
  "name": "tender-mellow-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 42198,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:44:48.317080+00:00",
  "ended_at": "2026-08-26T13:44:51.743826+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bab6054-eafd-4216-bf82-24d343e97b78",
  "name": "early-graceful-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38654,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 789,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:44:43.250394+00:00",
  "ended_at": "2026-08-26T13:44:51.745877+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "d1617a28-ad1f-4c66-aa75-550dca592243",
  "name": "fierce-woven-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 45012,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:17:33.322541+00:00",
  "ended_at": "2026-08-26T06:17:35.359442+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81a65009-1c92-4314-a9dc-1d511912b1cf",
  "name": "chilly-wry-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43438,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:17:27.065677+00:00",
  "ended_at": "2026-08-26T06:17:35.361450+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "a9003a5c-3fef-4f11-8fb0-45b0cfe03f0a",
  "name": "clever-idle-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 47340,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:05:45.210689+00:00",
  "ended_at": "2026-08-25T01:05:47.106659+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc6bc8b6-c508-45d5-8e02-e1a17fc4ac61",
  "name": "candid-orderly-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37194,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:40.300857+00:00",
  "ended_at": "2026-08-25T01:05:47.107710+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "f32ff287-ae31-441a-bbe4-a4d490519bd9",
  "name": "lofty-prickly-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 36826,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:24:19.533524+00:00",
  "ended_at": "2026-08-24T09:24:22.889015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4b810300-74a7-45aa-99d7-2c9179c76eed",
  "name": "steady-stoic-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48936,
  "username": "tempuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:24:13.242160+00:00",
  "ended_at": "2026-08-24T09:24:22.901593+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 }
]