[
 {
  "id": "ff391039-4ad4-42f4-8198-8bbd4bdef91a",
  "name": "lunar-fringed-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41492,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:13:51.801314+00:00",
  "ended_at": "2026-08-27T03:13:55.971351+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d484a114-604b-43ff-83e3-4baf34922eb4",
  "name": "marbled-peaty-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43344,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:08:41.732935+00:00",
  "ended_at": "2026-08-27T03:08:47.324560+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "87910df0-afc0-43d9-a1c9-122af4512651",
  "name": "hollow-western-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56504,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:05.544875+00:00",
  "ended_at": "2026-08-27T03:05:10.508578+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2a301500-cb6b-477b-ba13-507b43ad48cb",
  "name": "lunar-lawful-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 33600,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:51:00.979448+00:00",
  "ended_at": "2026-08-27T02:51:03.340262+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5260efbd-4491-4915-b2dc-23d420609df7",
  "name": "subtle-shifting-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44058,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:55.469346+00:00",
  "ended_at": "2026-08-27T02:51:03.341377+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "9480181a-9c50-41c9-87da-909c641bd03c",
  "name": "rambling-fearless-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38216,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:33:26.155615+00:00",
  "ended_at": "2026-08-26T14:33:31.909826+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e33fb34c-e844-46fc-b3db-d3f9497a6bd9",
  "name": "calm-earnest-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59482,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 651,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:29:52.014376+00:00",
  "ended_at": "2026-08-26T13:29:55.117603+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6838a718-f2f9-4d1c-90c0-75ac21336ae3",
  "name": "gnarled-knotted-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54478,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:51:10.183235+00:00",
  "ended_at": "2026-08-26T12:51:16.490836+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fcce9d3b-af95-4781-a9e6-c0a967fd9e22",
  "name": "inland-loyal-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44108,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:32:46.125753+00:00",
  "ended_at": "2026-08-26T12:32:52.888466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8583357-8237-4c7f-9d4b-ed9e73568ef2",
  "name": "earnest-sleepy-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52786,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:32:40.627710+00:00",
  "ended_at": "2026-08-26T12:32:52.889725+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "d9b684a5-6816-4dda-9c52-83c11b2160dc",
  "name": "oaken-indigo-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39906,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:02.203847+00:00",
  "ended_at": "2026-08-26T06:28:08.197348+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "84483166-8e52-40c2-aa23-588d1d756e49",
  "name": "diligent-calm-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50262,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:26:47.222493+00:00",
  "ended_at": "2026-08-26T06:26:52.436741+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e0ecbae2-cdd8-4aed-88d0-6aa831ae9747",
  "name": "vernal-blunt-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38952,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 270,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:26:44.912531+00:00",
  "ended_at": "2026-08-26T06:26:47.740403+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad51b0ad-93c5-4a75-821c-254c73bf937b",
  "name": "alpine-fleeting-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 51590,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T06:14:03.082013+00:00",
  "ended_at": "2026-08-26T06:14:05.468309+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73b96847-f0d7-4f0f-8cb2-8ce95a51d442",
  "name": "honest-valiant-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51544,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:14:02.615176+00:00",
  "ended_at": "2026-08-26T06:14:05.467028+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "994886e6-0844-46c9-b956-2c09c31512b3",
  "name": "opal-wry-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48114,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:33:49.565836+00:00",
  "ended_at": "2026-08-25T22:33:51.120635+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "95349468-0761-45c8-b5c7-0441c74d554c",
  "name": "brisk-feral-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 32902,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:33:18.777698+00:00",
  "ended_at": "2026-08-25T22:33:51.121927+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94dddfb2-32de-4cba-a165-f31add498c95",
  "name": "murky-wry-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53556,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:07.211726+00:00",
  "ended_at": "2026-08-25T02:16:11.812030+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09abf073-537e-43ed-bdeb-a451ec330696",
  "name": "chilly-honest-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54000,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:32:08.997111+00:00",
  "ended_at": "2026-08-25T01:32:12.508252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7dfcf600-b460-48d7-a0c4-36dabfe554e3",
  "name": "plucky-bashful-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38594,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:18:11.720018+00:00",
  "ended_at": "2026-08-25T01:18:14.603101+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f158dc12-ab82-4139-9452-2eecb3fefd4d",
  "name": "forlorn-burly-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 46856,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:07:43.410461+00:00",
  "ended_at": "2026-08-25T01:07:45.107277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "556ff795-5b74-4df6-a4f9-7044f25fb51a",
  "name": "breezy-hazy-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43434,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:07:38.212110+00:00",
  "ended_at": "2026-08-25T01:07:45.108066+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "242cb24d-5c29-4d16-8e49-cbbaed55fd3b",
  "name": "electric-mellow-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47040,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:53:47.392193+00:00",
  "ended_at": "2026-08-24T09:53:52.886943+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "73799ed0-b50f-452c-8c7d-79ad92f72501",
  "name": "bold-silent-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45668,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:30:40.796441+00:00",
  "ended_at": "2026-08-24T09:30:46.021456+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dd8c4441-7d52-4f2a-a88a-275a23fe2c15",
  "name": "smoky-mighty-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49234,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:24:42.649350+00:00",
  "ended_at": "2026-08-24T09:24:46.903106+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ade39d43-c98a-4515-bde0-a65370c734b7",
  "name": "austere-clever-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 60822,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:20:31.614479+00:00",
  "ended_at": "2026-08-24T09:20:33.639194+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a6e2f7e-caf9-40d3-8d93-aea7a958e368",
  "name": "icy-jagged-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51678,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:20:26.903211+00:00",
  "ended_at": "2026-08-24T09:20:33.637829+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "8dd0a6c0-6df3-4d1c-bf69-b26b93143da2",
  "name": "earnest-early-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39512,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:50:42.462988+00:00",
  "ended_at": "2026-08-21T13:50:48.603867+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "ef011bf6-119e-4991-a5e2-addd3d612974",
  "name": "lucid-ivory-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 56120,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 332,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:41:21.448508+00:00",
  "ended_at": "2026-08-21T13:41:25.869807+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "309fc16e-2cce-45e2-8933-18f3ec44be32",
  "name": "wooded-gloomy-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 49848,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:37:02.870112+00:00",
  "ended_at": "2026-08-21T13:37:07.981760+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "92cb0940-e21a-4b7f-a819-e4b9fc59a0b2",
  "name": "dappled-cobalt-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 52518,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:23:46.160615+00:00",
  "ended_at": "2026-08-21T13:23:50.194092+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "462270fd-4750-4882-8342-d1a6db4a628f",
  "name": "murky-stoic-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 43838,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:09:23.415670+00:00",
  "ended_at": "2026-08-21T13:09:27.981189+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "f071bac7-2e32-4d49-abf3-84d045a90442",
  "name": "thorny-gentle-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 60572,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 398,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:03:49.411681+00:00",
  "ended_at": "2026-08-21T13:03:55.848605+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "353239fd-e706-4544-86a0-34fd8e12acb8",
  "name": "shaded-lofty-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55458,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:36:05.063034+00:00",
  "ended_at": "2026-08-21T01:36:06.566252+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "263b73b0-198f-4236-8b4d-73206eef4f45",
  "name": "mottled-sandy-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 55430,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:36:00.655826+00:00",
  "ended_at": "2026-08-21T01:40:01.203836+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "d7cb966d-2139-40f9-9190-e417d1e06f04",
  "name": "earnest-bronzed-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 52178,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:46:23.470561+00:00",
  "ended_at": "2026-08-20T19:46:27.838457+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "9213fa15-8894-4aff-9632-a9a4278a2ff9",
  "name": "electric-lonesome-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 41010,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:39:21.380741+00:00",
  "ended_at": "2026-08-20T19:39:27.415047+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "96c14a0d-5938-40b5-9581-4353ac7a97e8",
  "name": "rugged-wandering-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 33172,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:36:28.976398+00:00",
  "ended_at": "2026-08-20T19:36:34.080441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "8e1d0c25-fd8d-46fa-a2b7-3952b8d515b4",
  "name": "inland-early-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47660,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:33:07.414336+00:00",
  "ended_at": "2026-08-20T19:33:12.016330+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "c6a9d255-d06d-4939-b80b-3fc0874fd164",
  "name": "knotted-windswept-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37816,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:31:27.836213+00:00",
  "ended_at": "2026-08-20T18:31:32.180616+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "162643a7-5311-4e8b-b20d-b2804fa45593",
  "name": "dutiful-merry-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 35388,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:26:19.274687+00:00",
  "ended_at": "2026-08-20T18:26:20.689397+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "37e97152-a139-45fa-a960-f892fa9b193b",
  "name": "velvet-woven-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 52662,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:26:17.240952+00:00",
  "ended_at": "2026-08-20T18:26:20.690864+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1652
 },
 {
  "id": "f76cfe13-0f3f-424f-8a5a-ae1cb04a85ed",
  "name": "fringed-airy-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51914,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:07:57.511037+00:00",
  "ended_at": "2026-08-20T11:07:58.322437+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 729
 },
 {
  "id": "bfc84bab-8964-46a0-94d0-b68f45887dd8",
  "name": "primal-salty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51558,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:04:51.868018+00:00",
  "ended_at": "2026-08-20T11:04:52.296026+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "5de57bfc-cba2-4446-974d-6226787104cb",
  "name": "nameless-weathered-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 58292,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:38:05.392793+00:00",
  "ended_at": "2026-08-20T10:38:08.164676+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d29e8cf-8a54-4c1c-b168-5e2ab5f57abe",
  "name": "thawing-silent-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 37744,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:38:04.967233+00:00",
  "ended_at": "2026-08-20T10:38:08.165419+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1697
 },
 {
  "id": "49036b5b-e360-4a51-a7fd-04269e6d2780",
  "name": "vernal-cobalt-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43432,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:30:19.744175+00:00",
  "ended_at": "2026-08-20T10:30:20.268719+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "2353d1c2-b041-413d-b547-c8c93817c3ad",
  "name": "steady-gleaming-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51302,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:29:14.591415+00:00",
  "ended_at": "2026-08-20T10:29:15.024373+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "a2e16a08-27e0-41d8-a2b9-a9e2b47e0c68",
  "name": "brazen-flinty-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43140,
  "username": "appuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:22:15.945942+00:00",
  "ended_at": "2026-08-20T10:22:16.915314+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 }
]