[
 {
  "id": "83036a95-cc21-4998-9943-79d781f8cf17",
  "name": "bitter-mellow-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33882,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:47.653735+00:00",
  "ended_at": "2026-08-27T03:07:50.939413+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "26f4e8d1-c6fe-4a7d-921f-4b8984432cbb",
  "name": "merry-jovial-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 54958,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:57:36.125507+00:00",
  "ended_at": "2026-08-27T02:57:39.244543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f58ca360-8133-4fcd-bdcd-42e1c92812fe",
  "name": "balmy-leafy-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59044,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 419,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:30.747795+00:00",
  "ended_at": "2026-08-27T02:57:39.245944+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "897439c2-5925-438a-8b14-2eabc9021a13",
  "name": "fickle-bronzed-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40802,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:56:35.032491+00:00",
  "ended_at": "2026-08-26T14:56:36.307896+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "093d8a79-093d-4123-a319-8830b9dc5b85",
  "name": "inland-glassy-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40804,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:56:13.163965+00:00",
  "ended_at": "2026-08-26T14:56:14.391029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7fc0bc7-d506-4935-bfd9-e21e65e3941e",
  "name": "hidden-murky-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37834,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:34:18.365444+00:00",
  "ended_at": "2026-08-26T14:34:21.383432+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1ebbb7f1-d5fc-490f-9b3f-11e5171af2f9",
  "name": "loyal-flinty-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50212,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:25:22.761801+00:00",
  "ended_at": "2026-08-26T14:25:24.511576+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "f204ce74-8583-4004-a3c0-aaf0b823c4cb",
  "name": "brisk-thrifty-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50224,
  "username": "webuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:24:58.326248+00:00",
  "ended_at": "2026-08-26T14:24:59.020377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0eb9d990-99ac-47b3-a6cf-ddff64085e87",
  "name": "prickly-sullen-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 58418,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:08:50.867195+00:00",
  "ended_at": "2026-08-26T14:09:05.396453+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1dffc5a8-d16d-4660-b3c5-bac177c6c11a",
  "name": "brisk-russet-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40600,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1119,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:08:43.803025+00:00",
  "ended_at": "2026-08-26T14:09:05.393994+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "24da396c-b43a-4c31-bb29-a0846423eeed",
  "name": "noble-meadow-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 36596,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:33:24.727777+00:00",
  "ended_at": "2026-08-26T06:33:27.044964+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3aaa3a8f-adb2-4a12-8bdd-f7883dd54dfa",
  "name": "foggy-mottled-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54238,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:33:24.162133+00:00",
  "ended_at": "2026-08-26T06:33:26.962755+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5741300d-568b-4ceb-8e2f-d065281f6dcf",
  "name": "early-glacial-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38152,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:33:20.111711+00:00",
  "ended_at": "2026-08-26T06:33:27.044009+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "52b834ad-dffd-4e0e-82c8-eec2140e21ad",
  "name": "placid-wooded-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34406,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:34:06.398841+00:00",
  "ended_at": "2026-08-25T01:34:09.297969+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d677c897-0e30-45ac-9a18-714999af2440",
  "name": "sunlit-placid-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 48636,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:51:21.194396+00:00",
  "ended_at": "2026-08-25T00:51:23.097280+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42b2eb45-a3a3-411f-8280-d44015dcef1d",
  "name": "proud-icy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43066,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:17.013481+00:00",
  "ended_at": "2026-08-25T00:51:23.095955+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "9c856c58-46d9-4206-97fb-02c9cb2ef32a",
  "name": "prairie-thorny-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53672,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:37:31.015257+00:00",
  "ended_at": "2026-08-24T09:37:33.902272+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7314b7ba-0235-44ae-bb99-57ddf1a74642",
  "name": "plush-northern-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 34388,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:35:41.211021+00:00",
  "ended_at": "2026-08-24T09:35:43.107756+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e6b16af-c3a4-4698-8144-0b928c26b6ad",
  "name": "hollow-stoic-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57420,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:37.731066+00:00",
  "ended_at": "2026-08-24T09:35:43.106462+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a3feb693-98f8-4d77-88dc-3352079fa18e",
  "name": "fleeting-gleaming-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56082,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:49.935179+00:00",
  "ended_at": "2026-08-23T08:38:52.824852+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "64acf815-596e-424f-8e8d-c7e82207ca6c",
  "name": "brisk-fickle-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 42032,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 533,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:06:20.915105+00:00",
  "ended_at": "2026-08-22T12:06:25.249382+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7a5cd5af-e524-440c-829d-33eb8006508c",
  "name": "feral-candid-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 60882,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:02:59.358433+00:00",
  "ended_at": "2026-08-22T12:03:02.361679+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "864f4895-5c1a-4cf5-9e90-1a84569d9cb4",
  "name": "tender-loyal-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 40954,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 413,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:02:55.528295+00:00",
  "ended_at": "2026-08-22T12:03:02.362989+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a5bd1beb-af40-4a5b-afb1-51040eb2baf3",
  "name": "pleasant-noble-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 52880,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:30:01.439796+00:00",
  "ended_at": "2026-08-21T13:30:05.529936+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "29db64ff-1bc4-4dbb-9756-97ec3960605e",
  "name": "prairie-burly-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 35154,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T12:52:19.036250+00:00",
  "ended_at": "2026-08-21T12:52:21.228439+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2fb26d90-bc3a-44b9-a920-62ac0e2886fc",
  "name": "jovial-freckled-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 52286,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:52:13.382508+00:00",
  "ended_at": "2026-08-21T12:52:21.227423+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d08789ed-27cf-4c45-bc3f-34a19aebfaf9",
  "name": "gilded-scarlet-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 38370,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:09:16.034474+00:00",
  "ended_at": "2026-08-20T19:09:19.908628+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "edd42e8b-ecf8-4073-a7af-272b8bc6c0fd",
  "name": "thawing-idle-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 48286,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:54:17.493296+00:00",
  "ended_at": "2026-08-20T18:54:19.067347+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "561606f2-e173-48e8-a823-dd392839f34e",
  "name": "whispering-brave-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 58694,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:54:11.674721+00:00",
  "ended_at": "2026-08-20T18:54:19.055972+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "40b420a8-5c6e-46e4-b013-a92af11efa4a",
  "name": "blazing-glassy-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 39192,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:13:18.257279+00:00",
  "ended_at": "2026-08-20T10:13:19.452662+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 848
 },
 {
  "id": "20d6cf6e-dc3e-4d99-b925-c25ca162f221",
  "name": "gnarled-brisk-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 36258,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:05:27.603665+00:00",
  "ended_at": "2026-08-20T10:05:29.387528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0d04294-1849-4362-99bf-93f4e0ab8799",
  "name": "primal-muted-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44138,
  "username": "webuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:05:26.862420+00:00",
  "ended_at": "2026-08-20T10:05:29.385913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1580
 }
]