[
 {
  "id": "1609ea5b-d2dc-4f1e-96b4-c9b871295286",
  "name": "ruddy-humble-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 38402,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:42.393155+00:00",
  "ended_at": "2026-08-27T12:29:44.480765+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "14aa3042-67a4-4881-b2b1-8310bb7ba4d7",
  "name": "airy-humble-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38420,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:15.453202+00:00",
  "ended_at": "2026-08-27T12:29:16.861202+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2f2acf93-459d-4ad4-b3b2-a666f3f3f304",
  "name": "dappled-wry-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 35920,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 296,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:15.331459+00:00",
  "ended_at": "2026-08-27T12:29:17.343007+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2257
 },
 {
  "id": "b386ba73-81c9-43ef-843b-c14566f34d7f",
  "name": "thorny-muted-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 35938,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:00.192414+00:00",
  "ended_at": "2026-08-27T12:29:01.049726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb1cf88d-956b-478c-8b56-58bf2ccaa813",
  "name": "arctic-distant-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 60522,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:33.027216+00:00",
  "ended_at": "2026-08-27T12:21:34.490931+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2253
 },
 {
  "id": "a0ad5f92-56bf-4336-afe4-a229c3791956",
  "name": "painted-cunning-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 47886,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:16.996512+00:00",
  "ended_at": "2026-08-27T12:21:18.796645+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35d65587-5e48-476d-b292-410e632ac2a8",
  "name": "brisk-vernal-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 52084,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:58.000327+00:00",
  "ended_at": "2026-08-27T11:43:59.549429+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2118
 },
 {
  "id": "d11858f1-3fc6-41f1-b66f-9341a91633db",
  "name": "nameless-solemn-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 52098,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:43.276350+00:00",
  "ended_at": "2026-08-27T11:43:44.285001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24937af2-096c-4ff1-a67d-f286b6990457",
  "name": "dusky-shaded-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 33868,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 678,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T11:40:30.965289+00:00",
  "ended_at": "2026-08-27T11:40:31.315707+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 737
 },
 {
  "id": "aabbf096-4217-4e17-88bf-ed63e4672b81",
  "name": "thrifty-umber-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 33370,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:37:15.360384+00:00",
  "ended_at": "2026-08-27T11:37:16.737688+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "a113cc95-582b-4d2c-814c-e29448ae829b",
  "name": "lanky-civil-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46048,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:57.295595+00:00",
  "ended_at": "2026-08-27T11:36:59.200707+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5531d1f4-4ae0-4882-b90a-ee45724daa62",
  "name": "solemn-humble-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46440,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:59.705901+00:00",
  "ended_at": "2026-08-27T03:11:04.280487+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd405267-01a1-4e38-a374-0dc0af03896f",
  "name": "polar-shaded-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45654,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 340,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:53:43.032636+00:00",
  "ended_at": "2026-08-27T02:53:48.513742+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e14dd366-dd76-486d-b256-c58fa634b604",
  "name": "hidden-placid-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48306,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 465,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:45:27.189497+00:00",
  "ended_at": "2026-08-27T02:45:33.089297+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0d811079-6990-4a4c-9106-9a161da541e0",
  "name": "honest-supple-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53820,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 387,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:44:12.948564+00:00",
  "ended_at": "2026-08-27T02:44:17.281870+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "252403aa-8b19-4cff-a746-dcf29507f053",
  "name": "sturdy-crystal-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44954,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:40:06.669716+00:00",
  "ended_at": "2026-08-27T02:40:12.108050+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bd0d7739-37bc-4378-85d6-7d9adc7860a4",
  "name": "leafy-bold-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34490,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:18.142754+00:00",
  "ended_at": "2026-08-27T02:39:23.210291+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d99cdd30-24c6-4085-95bd-17e30e745fb5",
  "name": "lofty-jaunty-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46440,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 345,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:26:58.005602+00:00",
  "ended_at": "2026-08-27T02:27:03.119218+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df2d8977-c5d5-47df-bb3c-0366bd79b30a",
  "name": "plucky-creaky-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39918,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:18:52.923503+00:00",
  "ended_at": "2026-08-27T02:18:58.634613+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eeb0a382-f411-490d-829f-1a9cb14279b0",
  "name": "umber-kindly-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33070,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:12:29.732687+00:00",
  "ended_at": "2026-08-27T02:12:35.043930+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "788f715c-e0f8-4ead-a737-d4f816b5986f",
  "name": "diligent-buoyant-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44578,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:08:09.771494+00:00",
  "ended_at": "2026-08-27T02:08:14.978031+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6d2c32ca-28f4-479b-917e-d124ebe22a5b",
  "name": "sleepy-misty-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57964,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:26.511141+00:00",
  "ended_at": "2026-08-27T02:04:29.730936+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7027ebb4-629d-4df6-92cc-ed3cbfd870a6",
  "name": "oaken-sandy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55324,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:23.416948+00:00",
  "ended_at": "2026-08-27T02:03:26.979401+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "739c72fe-797f-45b9-80d8-6afd1b33575f",
  "name": "seaward-opal-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52684,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:01:50.009658+00:00",
  "ended_at": "2026-08-27T02:01:54.263627+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "69c3c0c7-9992-47fe-bc33-bf0c6de221dc",
  "name": "emerald-sullen-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58248,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 374,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:51.713888+00:00",
  "ended_at": "2026-08-27T01:54:56.500761+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "90ed254b-24e9-408c-b88b-de592baf747f",
  "name": "crystal-hearty-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 46342,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:24:55.820855+00:00",
  "ended_at": "2026-08-26T22:28:56.000023+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a01ebf23-53e2-419a-b24c-1b9744d6ebd1",
  "name": "graceful-ivory-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 50344,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:11:50.194529+00:00",
  "ended_at": "2026-08-26T22:15:50.573940+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79f7ac4d-90e9-48c0-970f-f9867fa65fd3",
  "name": "western-bronzed-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 35534,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 511,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:34:46.894710+00:00",
  "ended_at": "2026-08-26T17:34:48.125503+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "07f0c14a-38ff-431a-9dcd-ca020fad57b2",
  "name": "frugal-obsidian-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35540,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:34:30.363623+00:00",
  "ended_at": "2026-08-26T17:34:31.363838+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0afc9505-9009-4d23-8b78-1a69a0f6866c",
  "name": "sunlit-coral-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53024,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 494,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:17:29.067775+00:00",
  "ended_at": "2026-08-26T14:17:34.386047+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2489171e-e757-466b-9b39-4c81f7353a5f",
  "name": "wooded-brisk-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56130,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:05:33.591848+00:00",
  "ended_at": "2026-08-26T14:05:35.149922+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "10af6320-60f0-4525-a6eb-41a3a0db32f8",
  "name": "jaunty-lanky-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56382,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:05:06.279074+00:00",
  "ended_at": "2026-08-26T14:05:07.802007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ee9ad9d-ec9a-4ba6-9a91-9a213d48597c",
  "name": "balmy-sincere-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53678,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 765,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:59:12.477519+00:00",
  "ended_at": "2026-08-26T13:59:17.880428+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f090a379-d2d0-40f0-bef9-0e44b690685f",
  "name": "golden-restless-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40754,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:55:28.789041+00:00",
  "ended_at": "2026-08-26T13:55:34.767627+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "99ff4e51-66da-43a2-af85-8972f8c0b911",
  "name": "painted-lunar-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34232,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 354,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:53:17.353382+00:00",
  "ended_at": "2026-08-26T13:53:22.338450+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "215ced8a-5754-4c1e-aa4e-f93dfd2d660b",
  "name": "frugal-supple-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40609,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:52:26.025846+00:00",
  "ended_at": "2026-08-26T13:52:27.685370+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2109
 },
 {
  "id": "7569605e-2a35-4a98-bb95-eb682bbb282a",
  "name": "scarlet-weathered-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40611,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:52:04.407947+00:00",
  "ended_at": "2026-08-26T13:52:05.741560+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e3e8ab8-3f0e-4545-85b3-1b1841d28993",
  "name": "sturdy-primal-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57390,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 619,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:49:17.874212+00:00",
  "ended_at": "2026-08-26T13:49:21.032455+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd15fe3f-84ad-4f77-8459-173f84229507",
  "name": "merry-subtle-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40520,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 397,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:43:51.586149+00:00",
  "ended_at": "2026-08-26T13:43:56.266003+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "39442dc8-58e1-4445-9fb1-c3bb5766a4a1",
  "name": "arctic-distant-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50178,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:41:46.161037+00:00",
  "ended_at": "2026-08-26T13:41:52.098249+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "18540208-2653-4b61-9092-7a1ce0734aea",
  "name": "valiant-frugal-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.55.45.217",
  "src_port": 54538,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 66,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:38:24.493888+00:00",
  "ended_at": "2026-08-26T13:38:25.078452+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "dc4b9a5e-d001-43a0-b5d6-d2fc79466520",
  "name": "ruddy-marbled-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.55.45.217",
  "src_port": 54560,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:38:20.486104+00:00",
  "ended_at": "2026-08-26T13:38:21.891181+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3447fa55-b032-48e5-8c4e-16877de5804e",
  "name": "valiant-sleepy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60874,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 733,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:36:08.960147+00:00",
  "ended_at": "2026-08-26T13:36:13.208656+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a9e5907-b083-4677-9360-f1714958b5f8",
  "name": "woven-obsidian-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60636,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 668,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:27:04.560390+00:00",
  "ended_at": "2026-08-26T13:27:10.304018+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8f2517a8-9b81-4627-a2b1-25e12ce9fbb1",
  "name": "curious-hushed-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52070,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 475,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:03:49.409514+00:00",
  "ended_at": "2026-08-26T13:03:55.064198+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "568e2664-807a-4ca6-bca6-3e2ede3a72c2",
  "name": "quiet-emerald-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42324,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 623,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:52:13.591495+00:00",
  "ended_at": "2026-08-26T12:52:17.945784+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1ad3ceb3-df8a-4600-b02e-4c87140fd06f",
  "name": "vaulted-sterling-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52994,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 802,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:45:15.807212+00:00",
  "ended_at": "2026-08-26T12:45:21.410926+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2d0080dd-fd0c-48b8-896c-0520095fbe2d",
  "name": "leafy-windswept-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43250,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 519,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:24:43.715570+00:00",
  "ended_at": "2026-08-26T12:24:48.329529+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7a14dae9-a68f-40d8-a72b-69a49774981e",
  "name": "hushed-crisp-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39678,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 415,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:21:39.700390+00:00",
  "ended_at": "2026-08-26T12:21:43.368441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0556758b-b912-4552-9a8f-7aa8ce8e3e64",
  "name": "slender-buoyant-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 59828,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:03:30.111131+00:00",
  "ended_at": "2026-08-26T12:03:33.688854+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5af0a729-8289-4eb6-92cc-2b78d1f4bfb8",
  "name": "creaky-sleepy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41838,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 761,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:03:25.523895+00:00",
  "ended_at": "2026-08-26T12:03:33.695424+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "cb59183a-5bca-49a1-8223-53960a98c1b9",
  "name": "crystal-watchful-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44894,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 875,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:01:41.488922+00:00",
  "ended_at": "2026-08-26T12:01:43.152346+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2188
 },
 {
  "id": "b12ee411-3333-40ca-a4de-4a7ddd3d66b8",
  "name": "smoky-peaty-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44912,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:01:16.952990+00:00",
  "ended_at": "2026-08-26T12:01:18.934028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7f028fb-d911-408f-b135-ad3ba4ac0643",
  "name": "gnarled-bold-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48856,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:36.803212+00:00",
  "ended_at": "2026-08-26T06:47:40.456165+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f6228185-67b0-4938-94c3-1c96d564f328",
  "name": "dusty-burly-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49746,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:14.144254+00:00",
  "ended_at": "2026-08-26T06:47:19.295797+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ab15fb91-33cb-429a-941d-00602f8b735c",
  "name": "dapper-lunar-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 41708,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:44:56.259852+00:00",
  "ended_at": "2026-08-26T06:45:01.428267+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4e4c3bd5-86e8-4c82-b724-e1a9d59351a5",
  "name": "sunlit-sooty-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55378,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:45.837836+00:00",
  "ended_at": "2026-08-26T06:39:49.758160+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a9c538b-c53f-4d0a-a490-791830769a5b",
  "name": "snowy-placid-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34892,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:25:02.449622+00:00",
  "ended_at": "2026-08-26T06:25:07.815057+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2e7dc63a-3730-4058-be0b-3319b1dd4676",
  "name": "tawny-pristine-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53246,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:20:19.949213+00:00",
  "ended_at": "2026-08-26T06:20:25.531544+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fa83dd81-274c-4431-a9f6-0227e2c10021",
  "name": "drifting-muted-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47428,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:20:10.856575+00:00",
  "ended_at": "2026-08-26T06:20:14.230600+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1bd00c71-3b46-4a5d-8280-d8fad43bb22b",
  "name": "brazen-granite-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47216,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:15:03.977864+00:00",
  "ended_at": "2026-08-26T06:15:05.962722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1e9e1ca9-ed53-4ba7-8e9f-120ff5e08339",
  "name": "hardy-pewter-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44664,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:12.858526+00:00",
  "ended_at": "2026-08-26T06:12:16.563846+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "33396b11-a861-4823-8522-e71a0ec58ff6",
  "name": "lunar-sooty-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36274,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:34.688275+00:00",
  "ended_at": "2026-08-26T06:11:38.510690+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5aba0fe3-230b-4c69-a2b6-673bb4400e19",
  "name": "buoyant-slender-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33032,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:18.841193+00:00",
  "ended_at": "2026-08-26T06:06:23.943406+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4569ee24-a474-4e14-a87b-6027ad7f2d4b",
  "name": "gnarled-drifting-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45806,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:02:11.839365+00:00",
  "ended_at": "2026-08-26T06:02:14.627051+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "94250d52-062c-449a-98d5-923a5cddfbc0",
  "name": "sullen-honest-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49482,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:56:40.337511+00:00",
  "ended_at": "2026-08-26T05:56:44.499899+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "19597fdb-6c0d-4cc0-9242-850eb1cf073f",
  "name": "coral-early-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 32988,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:46:01.673778+00:00",
  "ended_at": "2026-08-26T05:46:05.589504+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "446448a2-28f5-431a-ae10-900c531dccdd",
  "name": "fabled-quiet-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 50194,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:40:35.326465+00:00",
  "ended_at": "2026-08-26T02:40:35.454711+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "28b38217-6c45-4424-ad65-5c303c3fbfd8",
  "name": "quartz-icy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59142,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:52:06.762481+00:00",
  "ended_at": "2026-08-25T22:52:08.096069+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a622daf7-6fa5-4afa-965d-c55ec733338c",
  "name": "ancient-mottled-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47122,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:51:44.560529+00:00",
  "ended_at": "2026-08-25T22:51:46.692186+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6ff0cbb2-5374-4832-886d-6cc9f4b20593",
  "name": "sleepy-hollow-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36574,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:39.947086+00:00",
  "ended_at": "2026-08-25T22:44:42.018665+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f97c2541-41a6-4394-b9eb-2d48eaad2105",
  "name": "plucky-whispering-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42784,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:27:21.894240+00:00",
  "ended_at": "2026-08-25T22:27:24.229892+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "df527205-46ba-458e-a5e3-1265cf968d78",
  "name": "autumn-merry-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46496,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:18.054435+00:00",
  "ended_at": "2026-08-25T22:13:19.972463+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "c94fa1e4-37b7-414b-8399-3768424d48ff",
  "name": "dusty-freckled-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56244,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:12:47.259470+00:00",
  "ended_at": "2026-08-25T22:13:19.970997+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89ed9bf7-e844-4446-94f9-5db027bfc14a",
  "name": "tangled-plush-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39504,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 227,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:19:02.099197+00:00",
  "ended_at": "2026-08-25T02:19:05.602654+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9502f5f2-9c8c-4ea8-be2b-a322f85385e0",
  "name": "nautical-sincere-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34288,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:05.904016+00:00",
  "ended_at": "2026-08-25T02:16:10.617187+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0f962dae-0870-41f9-9abb-bf101f6d0967",
  "name": "indigo-rustic-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53582,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:58.806146+00:00",
  "ended_at": "2026-08-25T02:13:03.283770+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fdfc8148-dede-41d1-b89b-7fdd27dc146f",
  "name": "dewy-sterling-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60130,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:01:14.604177+00:00",
  "ended_at": "2026-08-25T02:01:19.007875+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b057bdf2-6de8-4818-aa62-92b70c7d2b21",
  "name": "verdant-brave-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42322,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:59:45.029307+00:00",
  "ended_at": "2026-08-25T01:59:48.691027+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d46fd50-3ee9-4bf4-8c8c-fc34042d0f5d",
  "name": "jolly-mottled-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56810,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:55:00.598407+00:00",
  "ended_at": "2026-08-25T01:55:05.311850+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3cb7c2ff-3423-4495-a224-eb1aeb053de5",
  "name": "solar-fleeting-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37274,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:39:56.410503+00:00",
  "ended_at": "2026-08-25T01:40:01.313519+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "064ff918-f29f-4705-8002-bfb61245f9eb",
  "name": "brazen-whispering-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37664,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:24:26.509799+00:00",
  "ended_at": "2026-08-25T01:24:30.216379+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d91f8712-2a56-4132-829e-f00879d00ba6",
  "name": "arctic-hazy-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58946,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:14:19.606282+00:00",
  "ended_at": "2026-08-25T01:14:24.111648+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "592e6562-26f3-46ad-aed3-4cb65a017a8c",
  "name": "humble-feathered-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49688,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:10:30.827072+00:00",
  "ended_at": "2026-08-25T01:10:34.221837+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eff1ab11-cf37-4ce5-9b4a-e71815c75191",
  "name": "gloomy-shaded-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42826,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:06:23.499945+00:00",
  "ended_at": "2026-08-25T01:06:29.596785+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "54fe77c3-8aaf-4ecb-8b54-4ea29e4f712b",
  "name": "ginger-mossy-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39250,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:51.408616+00:00",
  "ended_at": "2026-08-25T01:05:55.125691+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "67fe527d-3ac2-4b11-a821-61487d3c4d75",
  "name": "cosmic-thorny-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42894,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:57:36.504037+00:00",
  "ended_at": "2026-08-25T00:57:40.912481+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "847211e5-f6c7-485f-9bde-21c85bd4a4fe",
  "name": "mottled-courtly-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54798,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:56:10.804682+00:00",
  "ended_at": "2026-08-25T00:56:16.705461+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef272692-4c14-4b9f-9b31-4ef6ee01230b",
  "name": "jovial-smooth-kea",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 59272,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:55:29.502417+00:00",
  "ended_at": "2026-08-25T00:55:31.202378+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "27ae847d-f81e-4647-8dc4-63364c73b4de",
  "name": "blunt-thorny-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38536,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:26.192774+00:00",
  "ended_at": "2026-08-25T00:55:31.201315+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "dbc15ced-aaf9-49fa-87da-d24b8edba61f",
  "name": "arctic-frugal-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 16092,
  "username": "test",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T12:15:36.656501+00:00",
  "ended_at": "2026-08-24T12:15:39.678020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2388173c-85a6-47ad-8dbf-0e71514139a9",
  "name": "nautical-seaward-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46638,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:28.432039+00:00",
  "ended_at": "2026-08-24T10:16:32.007014+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d1276048-e7d9-4a10-94ca-30eb4d265cce",
  "name": "coral-seaward-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59114,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:10:28.808877+00:00",
  "ended_at": "2026-08-24T10:10:34.608061+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7dbab3c6-5275-476e-8aa1-ed2e9886659c",
  "name": "civil-misty-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55784,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:07:38.236889+00:00",
  "ended_at": "2026-08-24T10:07:44.150386+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "55063d83-6a15-44dc-9822-611e0a8bc703",
  "name": "meadow-tidal-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58240,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:03:18.422955+00:00",
  "ended_at": "2026-08-24T10:03:23.206184+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4ecbb5d4-df74-4778-b38c-40bed870f263",
  "name": "frosty-gnarled-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60806,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:57:45.722005+00:00",
  "ended_at": "2026-08-24T09:57:49.223075+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4bc20a7b-85fc-4bf3-9cb2-d0600b3e54f2",
  "name": "dusky-gallant-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53614,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:14.613376+00:00",
  "ended_at": "2026-08-24T09:44:19.284291+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "67831fa7-f458-4bd2-8950-038a0cabf207",
  "name": "crystal-woven-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42560,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:42:26.085494+00:00",
  "ended_at": "2026-08-24T09:42:30.105916+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "120e0897-8f89-4bbe-8caa-ce9a117e299d",
  "name": "genial-sunlit-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52074,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 380,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:11.607730+00:00",
  "ended_at": "2026-08-24T09:41:17.487095+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a93d8f29-9020-4d4f-820e-b884a1d8f403",
  "name": "electric-mottled-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53694,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:48.311842+00:00",
  "ended_at": "2026-08-24T09:35:53.201247+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "665063a6-233f-4984-96f5-c62f3a087271",
  "name": "shaded-frosty-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53702,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:31:07.688964+00:00",
  "ended_at": "2026-08-24T09:31:11.117006+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11bbb591-6d7d-4d19-bb9e-4a9c2d3896bf",
  "name": "lucid-bronzed-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60372,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 276,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:21:06.696109+00:00",
  "ended_at": "2026-08-24T09:21:09.709728+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "161a94f0-6fe1-46dd-b367-e67ae33aca33",
  "name": "restless-hushed-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57000,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:13:28.210883+00:00",
  "ended_at": "2026-08-24T09:13:33.189583+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "27d48b01-52a3-415a-9257-169a91dc3148",
  "name": "curious-downy-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33144,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:57:20.210530+00:00",
  "ended_at": "2026-08-24T08:57:24.201261+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5c937334-e05d-4bd2-8aec-28b90465957c",
  "name": "brisk-jolly-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48456,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:39.049095+00:00",
  "ended_at": "2026-08-24T08:51:43.990434+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1f764aa9-79fc-4fac-99c7-d5c59d0c2674",
  "name": "steady-whispering-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 46736,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:49:23.048080+00:00",
  "ended_at": "2026-08-24T08:49:25.713272+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44fcb851-2595-4802-b84d-01cad5d1778f",
  "name": "brisk-somber-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54084,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:49:17.127638+00:00",
  "ended_at": "2026-08-24T08:49:25.711548+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "daef5961-0d32-4c7a-a459-aa51791b8647",
  "name": "ginger-icy-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "27.79.44.16",
  "src_port": 33930,
  "username": "test",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T23:50:27.593044+00:00",
  "ended_at": "2026-08-23T23:51:23.828088+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f6a3acc-c8a8-46e4-b593-895aafc98a90",
  "name": "shifting-tranquil-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 40258,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:05:08.227391+00:00",
  "ended_at": "2026-08-23T08:05:09.902665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fd80e66-afa3-403e-8563-87848a473a70",
  "name": "woven-brazen-muntjac",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 8226,
  "username": "test",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:49:29.950136+00:00",
  "ended_at": "2026-08-22T18:49:34.448597+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8909c67d-a8f8-42c7-9249-be52228a90d6",
  "name": "alpine-electric-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.166.242.149",
  "src_port": 50140,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-22T18:29:45.140673+00:00",
  "ended_at": "2026-08-22T18:32:45.405330+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 560
 },
 {
  "id": "b39f15db-a451-4d81-ae63-7b4902a573ae",
  "name": "solar-opal-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.166.242.149",
  "src_port": 50156,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T18:29:44.105963+00:00",
  "ended_at": "2026-08-22T18:29:45.131750+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f5ed280b-ce72-4a24-acc2-10c65622baf1",
  "name": "rustic-grassy-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 33710,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-22T13:51:41.013673+00:00",
  "ended_at": "2026-08-22T13:51:41.142772+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 837
 },
 {
  "id": "47227eee-ea51-439a-a926-cc0c3f5a52f7",
  "name": "burly-eager-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 36308,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1479,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:34:01.616307+00:00",
  "ended_at": "2026-08-22T12:34:07.062699+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "a910b5e2-95b4-4a47-b52d-d5d5628f91ef",
  "name": "emerald-cheerful-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 36402,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:25:55.943003+00:00",
  "ended_at": "2026-08-22T12:26:00.178233+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2e0be829-759b-4c48-afab-4878464afe2e",
  "name": "woven-flinty-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 35260,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:24:15.910358+00:00",
  "ended_at": "2026-08-22T12:24:21.331283+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c730dcbf-a4e9-4d90-b249-0513e9494a87",
  "name": "buoyant-golden-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 47778,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 342,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:20:50.797806+00:00",
  "ended_at": "2026-08-22T12:20:55.358100+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f3b60593-aa83-43bd-8d38-8f69f30a5143",
  "name": "vivid-curious-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 57664,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:17:12.306959+00:00",
  "ended_at": "2026-08-22T12:17:16.414156+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "773df810-8ea9-4ed2-8f40-0060f6097ea1",
  "name": "frugal-weathered-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 39940,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 602,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:15:21.558780+00:00",
  "ended_at": "2026-08-22T12:15:27.046618+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b20ffd0-1668-43e0-bf71-ebe696f51160",
  "name": "twilight-brave-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 38378,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:12:42.434392+00:00",
  "ended_at": "2026-08-22T12:12:47.173742+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3adf8ae1-6355-46ec-8a34-dbb2c65dd950",
  "name": "primal-jovial-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 34028,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:09:07.551103+00:00",
  "ended_at": "2026-08-22T12:09:11.336562+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8c985c10-c7aa-43ff-96fd-8e6111a73ea7",
  "name": "murky-somber-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 58238,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 433,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:00:04.540519+00:00",
  "ended_at": "2026-08-22T12:00:09.451388+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "04db4c5d-68a3-4ff3-885f-e8bc5b107aea",
  "name": "stormy-ginger-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 40882,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:59:30.518430+00:00",
  "ended_at": "2026-08-22T11:59:32.236026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5b0b9b8-d6f4-45cd-a69b-64a1bf33feb0",
  "name": "amber-burly-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 54890,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:59:25.209312+00:00",
  "ended_at": "2026-08-22T11:59:32.238687+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "a223ff40-55ab-439c-a397-192fb71087eb",
  "name": "mossy-tranquil-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.231.188.110",
  "src_port": 60432,
  "username": "test",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:50:02.593376+00:00",
  "ended_at": "2026-08-22T11:50:05.189206+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1f87e67-6186-4a5e-8920-d2aea36c71b4",
  "name": "patient-vigilant-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "94.158.49.223",
  "src_port": 57054,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T04:53:19.523151+00:00",
  "ended_at": "2026-08-22T04:53:20.759810+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "169acd25-8cad-4ea7-891d-d59b2c479f41",
  "name": "flinty-crystal-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 37780,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:49:59.879255+00:00",
  "ended_at": "2026-08-21T13:50:06.074538+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "e5ddcc6d-2540-46db-85e8-f6b7de4be945",
  "name": "autumn-dappled-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 40856,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:45:05.973788+00:00",
  "ended_at": "2026-08-21T13:45:10.339063+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "970942d8-52b2-4839-875c-a8eb99263bcb",
  "name": "pewter-sturdy-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 57798,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:43:40.528277+00:00",
  "ended_at": "2026-08-21T13:43:43.619966+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "a1422b83-0eb6-4a2c-976b-7b159d0a0986",
  "name": "rustic-tangled-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 57758,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:43:34.272145+00:00",
  "ended_at": "2026-08-21T13:43:39.723755+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "43c84352-c425-4a88-95be-2b74c9d2a9ba",
  "name": "brave-creaky-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 50454,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:40:50.966006+00:00",
  "ended_at": "2026-08-21T13:40:56.892138+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "669d9097-c81d-440d-a55c-0be4f3e0728e",
  "name": "plush-sincere-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 44766,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:27:51.673602+00:00",
  "ended_at": "2026-08-21T13:27:55.667236+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "f172f1dc-7554-46f8-94c6-1b2a29846acf",
  "name": "meadow-crimson-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 35228,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:16:24.757702+00:00",
  "ended_at": "2026-08-21T13:16:30.670840+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "be74af91-7506-44f5-b7b4-223f542b1af7",
  "name": "solemn-diligent-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39364,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:12:35.366088+00:00",
  "ended_at": "2026-08-21T13:12:40.330588+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "07afd36e-f6f3-4e42-a352-7e53a9962421",
  "name": "granite-shaded-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 34454,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:12:27.403165+00:00",
  "ended_at": "2026-08-21T13:12:31.356955+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "277d9bca-276a-48ff-ab06-6cf246948dea",
  "name": "murky-ancient-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 51162,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 424,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:11:41.057635+00:00",
  "ended_at": "2026-08-21T13:11:45.700194+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "f0624ab2-24dd-49ce-9fe4-23c121a9f7f3",
  "name": "frosty-western-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 33552,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:07:40.418330+00:00",
  "ended_at": "2026-08-21T13:07:45.949525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "4cc1bac9-208e-482c-8c2f-2fba303454dc",
  "name": "graceful-steady-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39982,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 305,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:01:19.869887+00:00",
  "ended_at": "2026-08-21T13:01:25.340602+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "5a1bd812-594f-484d-8cc3-a2768f547f94",
  "name": "arctic-quaint-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 48448,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:59:55.647841+00:00",
  "ended_at": "2026-08-21T13:00:00.262242+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "bd10e440-4ed6-46ec-b8b4-b066cc29c908",
  "name": "umber-lofty-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 41024,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-21T10:52:02.461964+00:00",
  "ended_at": "2026-08-21T10:52:02.595668+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 836
 },
 {
  "id": "1255821b-c7c6-4f95-9c06-cade8b6bc1d3",
  "name": "brazen-stormy-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.173.200.62",
  "src_port": 56104,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T10:35:07.107588+00:00",
  "ended_at": "2026-08-21T10:35:08.679827+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e3eeb8b4-cf96-4abc-b157-c7135acdec12",
  "name": "breezy-jolly-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 46412,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:51:10.997452+00:00",
  "ended_at": "2026-08-20T19:51:13.909900+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "bbf346ac-5813-4008-937c-03443646910c",
  "name": "daring-vivid-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42804,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:46:47.628557+00:00",
  "ended_at": "2026-08-20T19:46:53.261871+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "687da802-14d6-457c-90d9-81fb74809823",
  "name": "downy-stoic-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 38838,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:46:21.915770+00:00",
  "ended_at": "2026-08-20T19:46:25.792929+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "36019b42-2219-4c47-be89-5281aa6df818",
  "name": "hidden-barren-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 48906,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:26:22.318340+00:00",
  "ended_at": "2026-08-20T19:26:26.606481+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "192487c5-032c-4031-afdb-4088eaea8259",
  "name": "mindful-crystal-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 35108,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:18:05.500666+00:00",
  "ended_at": "2026-08-20T19:18:10.811475+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "67d3cc0d-1903-42d0-b458-d0c52b5b93d2",
  "name": "wandering-rugged-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 59400,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:03:08.927359+00:00",
  "ended_at": "2026-08-20T19:03:14.241743+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "aa923965-7108-4fd7-9ccf-93eb51e0525c",
  "name": "sterling-nimble-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47568,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:01:36.362186+00:00",
  "ended_at": "2026-08-20T19:01:40.231464+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "28505344-9c55-40ee-834f-175d4d81790a",
  "name": "ruddy-twilight-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 55734,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:44:46.550560+00:00",
  "ended_at": "2026-08-20T18:44:51.219677+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "dc58d191-9780-47b0-b6d6-786a0f45b3cb",
  "name": "steady-fleeting-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 43294,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:42:55.894929+00:00",
  "ended_at": "2026-08-20T18:43:00.467696+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "7a0c7062-0771-4b99-98a9-0e8f20d04671",
  "name": "courtly-forlorn-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 51358,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:39:54.583104+00:00",
  "ended_at": "2026-08-20T18:39:59.707397+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "02838aa6-041e-455b-a028-cf247eb9017b",
  "name": "creaky-hearty-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40870,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:37:12.877635+00:00",
  "ended_at": "2026-08-20T18:37:15.683817+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "7fd30fe7-8716-41e6-a4fc-9cc40e707ff4",
  "name": "twilight-bronzed-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50738,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:33:12.198512+00:00",
  "ended_at": "2026-08-20T18:33:16.160343+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "94f453d5-ae80-4787-b4ad-4b7437a81542",
  "name": "placid-dusky-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 33204,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:31:35.540699+00:00",
  "ended_at": "2026-08-20T18:31:40.781928+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "318720fd-21d5-499d-9370-8fbd18a798ff",
  "name": "fierce-mellow-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 55102,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:05:05.297257+00:00",
  "ended_at": "2026-08-20T11:05:06.154733+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 823
 },
 {
  "id": "c01eb6c2-1939-4457-8a4b-fec815fbf0d4",
  "name": "canny-quiet-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 38734,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:00:55.106809+00:00",
  "ended_at": "2026-08-20T11:00:55.402203+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 652
 },
 {
  "id": "d157582f-16dc-4a0c-8c0c-dcf4af964897",
  "name": "indigo-mottled-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 40498,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:58:16.614017+00:00",
  "ended_at": "2026-08-20T10:58:17.368642+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 765
 },
 {
  "id": "3e083758-e85d-4721-988d-c2a1e489d396",
  "name": "humble-western-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 34024,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:57:05.159750+00:00",
  "ended_at": "2026-08-20T10:57:06.145171+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 683
 },
 {
  "id": "92161025-d638-4fe1-827e-d44dbff65d3e",
  "name": "clever-hazy-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 39908,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:56:15.224343+00:00",
  "ended_at": "2026-08-20T10:56:16.424700+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 896
 },
 {
  "id": "7725e7cf-4041-41b1-91ba-0ffcfc17c9f6",
  "name": "frank-prickly-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 50838,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:49:59.056528+00:00",
  "ended_at": "2026-08-20T10:50:00.200295+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 850
 },
 {
  "id": "bae4eb5c-93f7-4882-9546-88dbb88793b2",
  "name": "cheerful-salty-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 39068,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 267,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:43:56.496848+00:00",
  "ended_at": "2026-08-20T10:43:57.226673+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 855
 },
 {
  "id": "1045c869-a095-4c5c-9647-37ac597acdb0",
  "name": "mossy-airy-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 47592,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:32:00.047818+00:00",
  "ended_at": "2026-08-20T10:32:00.828590+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 818
 },
 {
  "id": "8986b6b5-17c9-45f0-b5da-eb9159267c94",
  "name": "dapper-painted-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56808,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:16:45.867828+00:00",
  "ended_at": "2026-08-20T10:16:46.838869+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 1408
 },
 {
  "id": "58f6fb18-1f9f-4e6e-b092-e0bb2a718529",
  "name": "gallant-languid-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 55340,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:14:58.954285+00:00",
  "ended_at": "2026-08-20T10:14:59.652789+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "3aa7bee2-1a38-41ce-801d-267dd6065bcf",
  "name": "early-somber-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 46572,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:14:24.449749+00:00",
  "ended_at": "2026-08-20T10:14:25.224888+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 737
 },
 {
  "id": "6f6e1cf0-f701-4a44-9857-a71391f9ee9b",
  "name": "quartz-drifting-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44406,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:10:56.910683+00:00",
  "ended_at": "2026-08-20T10:10:58.310665+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 834
 },
 {
  "id": "663031fb-8a11-4cde-a4e4-74bf209f6b69",
  "name": "ginger-cobalt-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 47494,
  "username": "test",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:06:18.127811+00:00",
  "ended_at": "2026-08-20T10:06:19.012982+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "6499622a-564b-4690-a018-cfda072f8bc7",
  "name": "mighty-solemn-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 46842,
  "username": "test",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:18:34.014294+00:00",
  "ended_at": "2026-08-20T09:18:34.783280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1293c656-4950-4c43-9cc3-ae717b2501d6",
  "name": "arctic-vernal-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.24.211.204",
  "src_port": 56050,
  "username": "test",
  "client_version": "SSH-2.0-libssh2_1.11.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T08:17:32.469485+00:00",
  "ended_at": "2026-08-20T08:17:33.098224+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]