[
 {
  "id": "53b84977-5d1f-495c-9108-74efdc695480",
  "name": "primal-early-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 41662,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 734,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:11.645160+00:00",
  "ended_at": "2026-08-27T12:00:13.363660+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "7b3c1ac6-0fbe-494a-a1d1-ce47a88af53d",
  "name": "jolly-autumn-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 36482,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:48.336665+00:00",
  "ended_at": "2026-08-27T11:59:50.022368+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e831502-1d1c-425e-bc76-b0098dc56c16",
  "name": "downy-crystal-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59254,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:07.585521+00:00",
  "ended_at": "2026-08-27T11:51:09.054208+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "2d6a8f31-0a6a-4f6e-bdb6-7acbec4814ff",
  "name": "blunt-downy-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59276,
  "username": "azureuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:50:48.889495+00:00",
  "ended_at": "2026-08-27T11:50:50.125444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee60ca3b-482e-4fd6-a35c-3180463c302c",
  "name": "quiet-scarlet-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33184,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:11:18.834944+00:00",
  "ended_at": "2026-08-27T03:11:21.651910+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b899edda-fb7f-44d0-b660-dc52366c327f",
  "name": "steady-lunar-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 48238,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:51:35.925348+00:00",
  "ended_at": "2026-08-27T02:51:38.324269+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed74de36-0ef0-44b8-8571-97c44e3b2ab7",
  "name": "noble-twilight-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40536,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 371,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:51:29.252320+00:00",
  "ended_at": "2026-08-27T02:51:38.325901+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "a9c5ace5-3650-488f-addb-c47fb4d38ed4",
  "name": "fabled-craggy-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43600,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:07:47.231399+00:00",
  "ended_at": "2026-08-26T13:07:50.366584+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4fd3428f-075c-4217-b5c1-219a42c50f10",
  "name": "marine-distant-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44404,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:57:50.105209+00:00",
  "ended_at": "2026-08-26T12:57:54.134470+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2f21110-8b8d-482c-8553-eae1c7eeff8f",
  "name": "grassy-ashen-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58982,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 619,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:57:45.195530+00:00",
  "ended_at": "2026-08-26T12:57:54.133204+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "386a9cc1-dd06-4331-88b6-4dc1c393041e",
  "name": "icy-plucky-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55276,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:55:28.509905+00:00",
  "ended_at": "2026-08-26T05:55:31.743321+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "449f731f-8506-47a7-a3ce-bf3ada4fc430",
  "name": "rugged-prairie-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 39070,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:43:47.125787+00:00",
  "ended_at": "2026-08-26T05:43:49.632072+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f5f438f8-bd9d-4faf-973b-7c18f3767475",
  "name": "jovial-cosmic-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51396,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:43.638691+00:00",
  "ended_at": "2026-08-26T05:43:49.641475+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "2b035c63-dc32-4662-b5eb-6f3aab7d98a3",
  "name": "snowy-windswept-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44940,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:39:29.999602+00:00",
  "ended_at": "2026-08-25T01:39:33.703348+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9a62f9ed-042c-4234-8db2-811f17ab62d1",
  "name": "keen-twilight-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 45444,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:45:46.811017+00:00",
  "ended_at": "2026-08-25T00:45:48.910642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2e79b0a9-6a7f-4acd-8d89-eec47942ebcf",
  "name": "canny-tender-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60800,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:45:44.107243+00:00",
  "ended_at": "2026-08-25T00:45:48.911634+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "a501dfff-14ca-45a6-bb55-2a7f47d21d2e",
  "name": "hardy-civil-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39828,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:40.492939+00:00",
  "ended_at": "2026-08-24T09:16:44.752964+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "53a12dc5-d62d-447f-bd52-1e8998226c47",
  "name": "lucid-polar-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 47918,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:49:43.385689+00:00",
  "ended_at": "2026-08-24T08:49:45.516266+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6c9c91a-323d-47a4-a187-411abaa61235",
  "name": "pleasant-deft-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43104,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:49:38.593713+00:00",
  "ended_at": "2026-08-24T08:49:45.517517+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "5249d6e3-038c-44a1-98a6-6ed0c514beb7",
  "name": "sandy-muted-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51016,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 171,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:41:59.811857+00:00",
  "ended_at": "2026-08-23T08:42:00.597942+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 276
 },
 {
  "id": "4216b603-c9df-4900-8960-ca1c785437a5",
  "name": "civil-distant-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 33046,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:25:03.388419+00:00",
  "ended_at": "2026-08-22T12:25:09.434307+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5e37fa84-5218-4884-8c56-b2f20b5747e7",
  "name": "wiry-ruddy-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 55310,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:22:35.137894+00:00",
  "ended_at": "2026-08-22T12:22:37.621886+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94355485-81f1-427b-819c-479c04ef04cc",
  "name": "gentle-vaulted-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 37562,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:22:28.564856+00:00",
  "ended_at": "2026-08-22T12:22:37.624730+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "06acdc44-eeda-4891-a7b6-65b43069b0c9",
  "name": "proud-whispering-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41358,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:32:41.137488+00:00",
  "ended_at": "2026-08-21T13:32:45.880697+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "01c58ef6-6335-4c36-92be-15646ed7070a",
  "name": "creaky-boreal-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 40726,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T12:43:27.651254+00:00",
  "ended_at": "2026-08-21T12:43:34.262033+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a8458aba-2631-4227-84e3-99fd70ac9c3e",
  "name": "eager-lanky-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 47812,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 2023,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:43:19.314001+00:00",
  "ended_at": "2026-08-21T12:43:34.263101+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "0a463f7b-5e66-4aa0-af18-896da7891dc8",
  "name": "brisk-cobalt-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42858,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:38:07.482280+00:00",
  "ended_at": "2026-08-20T19:38:11.728033+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "5c0cdfd3-36c6-4e6b-bc8a-db7e88c7798b",
  "name": "frosty-subtle-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 50572,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:04:03.301606+00:00",
  "ended_at": "2026-08-20T19:04:04.782308+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bef75b6-8e9e-4ab6-8b16-7db7b34a3628",
  "name": "chilly-nameless-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 53240,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:04:00.016199+00:00",
  "ended_at": "2026-08-20T19:04:04.780113+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "682e3991-f49c-4bcf-b30f-d39980590d66",
  "name": "earnest-peaty-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 57240,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:05:32.916127+00:00",
  "ended_at": "2026-08-20T11:05:33.759064+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 789
 },
 {
  "id": "2289f7d5-133b-45a5-828e-11a3b3eebb62",
  "name": "coral-craggy-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 41950,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:10:34.448084+00:00",
  "ended_at": "2026-08-20T10:10:36.161057+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c021dca-f2be-4600-aeb6-d5edf4cd533c",
  "name": "crystal-plush-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 49712,
  "username": "azureuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:10:34.003167+00:00",
  "ended_at": "2026-08-20T10:10:36.163803+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1516
 }
]