[
 {
  "id": "ed74de36-0ef0-44b8-8571-97c44e3b2ab7",
  "name": "noble-twilight-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40536,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 371,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:51:29.252320+00:00",
  "ended_at": "2026-08-27T02:51:38.325901+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "5260efbd-4491-4915-b2dc-23d420609df7",
  "name": "subtle-shifting-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44058,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:55.469346+00:00",
  "ended_at": "2026-08-27T02:51:03.341377+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "d96a20de-1b23-4046-9901-e0c6141ea4ed",
  "name": "gleaming-canny-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60360,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:17:53.483167+00:00",
  "ended_at": "2026-08-27T02:18:00.531468+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "97567f62-c7d9-45cd-bc9f-549a60556cc5",
  "name": "fickle-brazen-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58606,
  "username": "pi",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:07:54.671846+00:00",
  "ended_at": "2026-08-27T02:08:01.763365+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "108e615d-2368-4e6a-832c-8efc558c1fa3",
  "name": "murky-stormy-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49824,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 360,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:45:51.501849+00:00",
  "ended_at": "2026-08-26T13:46:02.205499+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "e2f21110-8b8d-482c-8553-eae1c7eeff8f",
  "name": "grassy-ashen-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58982,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 619,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:57:45.195530+00:00",
  "ended_at": "2026-08-26T12:57:54.133204+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "6dfba3b5-8c39-47d1-b46c-9f304d1f71b4",
  "name": "wistful-fickle-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56656,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:01:08.605577+00:00",
  "ended_at": "2026-08-26T12:01:23.839534+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "660ba7be-cb59-4cef-b168-343ef912537e",
  "name": "tranquil-boreal-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38764,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 279,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:34:53.568268+00:00",
  "ended_at": "2026-08-26T05:34:58.182088+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "8686b763-afd0-4a08-a64c-6fbe2a7d075d",
  "name": "cosmic-prairie-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45156,
  "username": "teamspeak",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:11:14.418723+00:00",
  "ended_at": "2026-08-25T01:11:19.905263+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "69cc582a-98c9-4b5c-a88a-0edb495a0461",
  "name": "austere-silent-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 32778,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:10.088419+00:00",
  "ended_at": "2026-08-25T01:05:16.915162+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "ae8446ae-dd06-4bc3-8555-63a2ecec9be8",
  "name": "noble-northern-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47574,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:48:08.715064+00:00",
  "ended_at": "2026-08-25T00:48:16.213374+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "f8360ba2-e9c9-4a79-81a4-e03fe0b01522",
  "name": "rambling-hidden-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39716,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:10.998626+00:00",
  "ended_at": "2026-08-24T09:12:20.130748+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "e35cfa17-00b1-4122-b234-1f0051069331",
  "name": "rapid-dewy-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60844,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:48:13.921540+00:00",
  "ended_at": "2026-08-24T08:48:19.345539+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "0a2b4c75-5829-42f5-8de5-c9a65265ec92",
  "name": "dapper-electric-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54076,
  "username": "myuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:34.751840+00:00",
  "ended_at": "2026-08-23T08:39:40.291918+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "5bac7db0-810c-4ab0-b5f1-64148bdbb715",
  "name": "gallant-pewter-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41382,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:16.681760+00:00",
  "ended_at": "2026-08-23T08:38:23.801102+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "55529dd1-5322-4124-9ba5-98aa1d448b9c",
  "name": "curious-blithe-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 55396,
  "username": "app",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 471,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:58:35.191665+00:00",
  "ended_at": "2026-08-22T11:58:46.360575+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "87d6443c-2bf5-444b-89fd-3d38db69d16c",
  "name": "sincere-dutiful-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 56318,
  "username": "home",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:52:28.586488+00:00",
  "ended_at": "2026-08-21T12:52:36.763502+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "a8458aba-2631-4227-84e3-99fd70ac9c3e",
  "name": "eager-lanky-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 47812,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 2023,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:43:19.314001+00:00",
  "ended_at": "2026-08-21T12:43:34.263101+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "3bef75b6-8e9e-4ab6-8b16-7db7b34a3628",
  "name": "chilly-nameless-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53240,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:04:00.016199+00:00",
  "ended_at": "2026-08-20T19:04:04.780113+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "412504c0-19ff-4685-9437-bb377af1c48e",
  "name": "foggy-mellow-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 59912,
  "username": "home",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:02:29.129061+00:00",
  "ended_at": "2026-08-20T19:02:35.849760+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "ab600bb2-a2a9-495b-80ee-1062a36badc8",
  "name": "idle-fabled-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42238,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:51:33.383492+00:00",
  "ended_at": "2026-08-20T18:51:41.397234+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "0ec007a7-df76-409c-85d9-c1bd6da82134",
  "name": "subtle-mottled-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 40912,
  "username": "home",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:39:36.216028+00:00",
  "ended_at": "2026-08-20T10:39:38.704314+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1668
 },
 {
  "id": "3ad88cbd-476b-4cc6-96fa-d9613044fad1",
  "name": "fickle-autumn-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42034,
  "username": "gitlab",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:34:42.035794+00:00",
  "ended_at": "2026-08-20T10:34:44.079118+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1626
 },
 {
  "id": "5d2b90ba-3da7-44b7-9b41-e8e9012c50ff",
  "name": "autumn-coral-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 33630,
  "username": "server",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:24:44.737248+00:00",
  "ended_at": "2026-08-20T10:24:46.658074+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1664
 },
 {
  "id": "6e43cfa0-d132-4c1c-a326-eff1328e1ca9",
  "name": "electric-ivory-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 50022,
  "username": "bob",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:18:59.614704+00:00",
  "ended_at": "2026-08-20T10:19:01.775574+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1634
 },
 {
  "id": "afd8e24e-e3dd-487a-9a16-f3981e7a0262",
  "name": "sandy-feral-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 41806,
  "username": "teamspeak",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:03:30.537527+00:00",
  "ended_at": "2026-08-20T10:03:32.418871+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1484
 },
 {
  "id": "d15bee22-1e32-4e9d-8ac9-1834aed925c9",
  "name": "honest-barren-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 56980,
  "username": "ubuntu",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:01:23.078655+00:00",
  "ended_at": "2026-08-20T10:01:25.224370+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1984
 }
]