[
 {
  "id": "5121a5b8-25db-4538-b9ea-2f8fb63a5c2f",
  "name": "freckled-somber-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 33414,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T12:37:48.201764+00:00",
  "ended_at": "2026-08-27T12:37:48.304192+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 738
 },
 {
  "id": "147c4d43-d748-46cc-ab15-52e1fb043649",
  "name": "seaward-weathered-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38606,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 495,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:46.407146+00:00",
  "ended_at": "2026-08-27T03:10:52.562607+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da7e72fc-acd5-4565-bb94-7b378117a67e",
  "name": "dewy-crimson-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57232,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:10.632130+00:00",
  "ended_at": "2026-08-27T03:09:14.344914+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c7b21c5b-e277-4471-808c-65033e6bccb5",
  "name": "western-emerald-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44912,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:49.413502+00:00",
  "ended_at": "2026-08-27T02:57:53.328700+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8962c436-dc99-4b0c-9e07-0d9420165f11",
  "name": "curious-craggy-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54108,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:32.516508+00:00",
  "ended_at": "2026-08-27T02:57:37.984114+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9d4a7ff1-0db4-48c4-9a67-be4ea4202c4c",
  "name": "candid-alpine-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49644,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 342,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:48:21.875282+00:00",
  "ended_at": "2026-08-27T02:48:26.373517+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "141af61b-dffb-4974-b21e-b00dd6ab250e",
  "name": "prairie-tangled-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50990,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:34:46.600428+00:00",
  "ended_at": "2026-08-27T02:34:49.957689+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "506e2ff1-523a-4735-ad64-6f0d6b87430e",
  "name": "eager-dewy-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56260,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 415,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:30:33.397561+00:00",
  "ended_at": "2026-08-27T02:30:34.334010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "12ae3236-5424-4c2c-a36d-a6aa81123087",
  "name": "tangled-hearty-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58624,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 380,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:27:20.362254+00:00",
  "ended_at": "2026-08-27T02:27:24.060520+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2454e3e6-a985-491b-b00b-61d7fff10775",
  "name": "polar-wry-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41024,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:25:57.857786+00:00",
  "ended_at": "2026-08-27T02:26:01.289372+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8dc7f2e6-0b42-4d02-ad87-c2652d9e8e8b",
  "name": "calm-glassy-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56436,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 346,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:17:00.642311+00:00",
  "ended_at": "2026-08-27T02:17:04.378564+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5475cea5-947e-444b-ac00-1513d0719292",
  "name": "polar-blazing-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42334,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 418,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:15:56.301187+00:00",
  "ended_at": "2026-08-26T14:16:01.739180+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f0d6f964-5b30-48ce-a9b3-9045f175f30a",
  "name": "noble-fickle-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34322,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 549,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:06:03.537802+00:00",
  "ended_at": "2026-08-26T14:06:08.055525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8f588832-e0ff-4c3b-81e9-ac8879a32133",
  "name": "tranquil-clever-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37998,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 468,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:34:11.518103+00:00",
  "ended_at": "2026-08-26T13:34:14.340356+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "47066562-71d9-4ad3-be44-e9527f8cd185",
  "name": "frank-flinty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40322,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:45:58.223873+00:00",
  "ended_at": "2026-08-26T12:46:03.860175+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac149ec0-a270-4351-9111-ac856d2170e8",
  "name": "jaunty-prairie-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51096,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 530,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:39:21.025066+00:00",
  "ended_at": "2026-08-26T12:39:24.438514+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca1bb215-8ea6-420a-9d1c-f33c1b592e98",
  "name": "golden-foggy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52734,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 391,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:20:10.167772+00:00",
  "ended_at": "2026-08-26T12:20:13.026483+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b84ddd96-3ca9-4aab-bdbc-cb216ae0774e",
  "name": "twilight-inland-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39850,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 691,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:16:30.075036+00:00",
  "ended_at": "2026-08-26T12:16:36.093797+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3e0f6546-02bc-4714-8962-dbe9dd9368c9",
  "name": "cosmic-wistful-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37044,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 578,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:59:48.723944+00:00",
  "ended_at": "2026-08-26T11:59:54.525427+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e221dd3e-46b7-42da-baa7-c2feccfa1a1c",
  "name": "murky-dusty-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53162,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:53:15.534806+00:00",
  "ended_at": "2026-08-26T11:53:19.055420+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "24de3af0-a44b-4d47-8ffa-47a015f6e4d2",
  "name": "creaky-gallant-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44278,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:50:34.305581+00:00",
  "ended_at": "2026-08-26T11:50:40.867587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d80ebc81-8481-4065-8bf8-766296d36e73",
  "name": "frugal-sooty-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52056,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 533,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:50:31.962153+00:00",
  "ended_at": "2026-08-26T11:50:40.868637+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "0cbc4748-e578-4e5e-ae52-2f26d80c09bf",
  "name": "thorny-twilight-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48870,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:43.590603+00:00",
  "ended_at": "2026-08-26T06:47:49.602152+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fc651ed9-2e1f-43af-b805-cab7a9d7cbec",
  "name": "daring-jagged-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37756,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:46:47.060696+00:00",
  "ended_at": "2026-08-26T06:46:51.819164+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f7225710-6012-4769-a074-8e8eed3110b1",
  "name": "vaulted-subtle-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51464,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:41:50.544728+00:00",
  "ended_at": "2026-08-26T06:41:55.571184+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fee77fdb-86ea-4fcd-9069-3486e754566f",
  "name": "coral-golden-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37186,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:48.898524+00:00",
  "ended_at": "2026-08-26T06:28:52.978103+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce947ff5-5898-4231-bbb1-3efe0281dbda",
  "name": "breezy-somber-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39880,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:18:10.949921+00:00",
  "ended_at": "2026-08-26T06:18:16.702715+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "93e362bf-58aa-49f1-b34f-db6345dfa900",
  "name": "steady-bronzed-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52870,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:05.444351+00:00",
  "ended_at": "2026-08-26T06:06:11.476701+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d9630ee3-2ccf-40ce-bd93-ce16e4212155",
  "name": "brisk-gentle-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53738,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:44:50.651310+00:00",
  "ended_at": "2026-08-26T05:44:54.615193+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3c8f1204-030d-414e-8a2f-f31b83fb31ab",
  "name": "burly-lunar-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47994,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:44:01.816236+00:00",
  "ended_at": "2026-08-26T05:44:07.777649+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fc407d62-d986-4ac3-a1f8-2fc1862f68b5",
  "name": "wistful-craggy-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 37078,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:39:51.234239+00:00",
  "ended_at": "2026-08-26T05:39:53.246012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef48d493-bc9a-4704-ad1c-f05c04364185",
  "name": "alpine-ancient-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59944,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:39:47.389239+00:00",
  "ended_at": "2026-08-26T05:39:53.246913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "1c2d9b44-6239-4c6b-b8b5-f43ef59a7c30",
  "name": "thrifty-snowy-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45586,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:30:14.395186+00:00",
  "ended_at": "2026-08-25T02:30:20.208044+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e83a0a39-502d-4a99-8def-d5a054e41342",
  "name": "ashen-russet-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47856,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:22:48.699683+00:00",
  "ended_at": "2026-08-25T02:22:51.883149+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "986c07c4-23ce-4465-99d8-85487729e7c9",
  "name": "oaken-electric-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42308,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:00:11.215459+00:00",
  "ended_at": "2026-08-25T02:00:16.104616+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0ec4384c-d317-48c2-9c49-9f86aeca6d1e",
  "name": "lively-wooded-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46038,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:59:43.216128+00:00",
  "ended_at": "2026-08-25T01:59:48.708002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bbc20102-323f-4117-8a83-17aed5ff0ce2",
  "name": "cobalt-noble-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37970,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:58:11.213060+00:00",
  "ended_at": "2026-08-25T01:58:15.015069+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7134e719-32a0-4e07-94d8-1a0e4d40f05a",
  "name": "leafy-canny-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38990,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:44:59.199860+00:00",
  "ended_at": "2026-08-25T01:45:03.305397+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a9f3018d-2274-44f0-b103-82ad186ec145",
  "name": "lunar-sunlit-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43282,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:43:43.012913+00:00",
  "ended_at": "2026-08-25T01:43:47.014769+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "83508947-b5c7-4397-8171-38e3e46b505c",
  "name": "sunlit-windswept-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35916,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:21:52.631774+00:00",
  "ended_at": "2026-08-25T01:21:56.129630+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9000d00d-325e-425a-815a-0c5422ed4332",
  "name": "leafy-distant-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46342,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:07:22.603833+00:00",
  "ended_at": "2026-08-25T01:07:25.813010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "145c9f7d-7539-49a0-87eb-a1a8c8bf84f2",
  "name": "kindly-frosty-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 51652,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:51:12.310802+00:00",
  "ended_at": "2026-08-25T00:51:14.217870+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "810f17ab-3d53-4815-bcdb-83c05dfc871c",
  "name": "bronzed-indigo-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46066,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:08.100341+00:00",
  "ended_at": "2026-08-25T00:51:14.216582+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "d3cec385-30ea-429b-b6ce-fdb32fe3cc43",
  "name": "misty-keen-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59458,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 166,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:18:54.611098+00:00",
  "ended_at": "2026-08-24T10:18:58.479727+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a9a914e7-5b82-4649-a19e-8ce3e0d0c937",
  "name": "ashen-pewter-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41462,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 345,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:52.644666+00:00",
  "ended_at": "2026-08-24T10:16:56.404097+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "83b82d3b-3797-4b1c-a7f1-c24f28644f3a",
  "name": "tangled-creaky-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55830,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:06:44.614027+00:00",
  "ended_at": "2026-08-24T10:06:50.006022+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9f6058b3-20d1-4e7d-ae6b-95df74095cb6",
  "name": "lively-crystal-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33768,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:05:52.414578+00:00",
  "ended_at": "2026-08-24T10:05:56.450060+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "44e5bbe8-b1aa-4475-a273-994785e81727",
  "name": "lonesome-ashen-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56818,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:53:36.579598+00:00",
  "ended_at": "2026-08-24T09:53:41.686964+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f1f12e51-db02-4276-9578-366d0eb7daff",
  "name": "meadow-mindful-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42530,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:45:09.406097+00:00",
  "ended_at": "2026-08-24T09:45:12.823383+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "04ab9f54-9cff-4c7a-897c-6119ad7bb71f",
  "name": "gloomy-ashen-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53498,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:22:43.114147+00:00",
  "ended_at": "2026-08-24T09:22:48.396683+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a3633d00-4562-42b8-bf93-618d52ce73aa",
  "name": "wistful-eager-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51576,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:19.717192+00:00",
  "ended_at": "2026-08-24T09:16:23.016137+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3962ff0a-e255-48d8-a009-1768b55afaf1",
  "name": "fleeting-hardy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54180,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:55:05.211493+00:00",
  "ended_at": "2026-08-24T08:55:08.287991+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f4338368-3c52-4d42-8dcf-33871a78a3ea",
  "name": "fleeting-solemn-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 34606,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:48:16.310220+00:00",
  "ended_at": "2026-08-24T08:48:19.344461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e35cfa17-00b1-4122-b234-1f0051069331",
  "name": "rapid-dewy-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60844,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:48:13.921540+00:00",
  "ended_at": "2026-08-24T08:48:19.345539+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "7dbda87e-3636-4616-ba91-c75a5e0fc47d",
  "name": "breezy-clever-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 53178,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 385,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-22T14:40:38.611544+00:00",
  "ended_at": "2026-08-22T14:40:38.872527+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 837
 },
 {
  "id": "3f92ca69-f2d5-4feb-8477-e4b966d909da",
  "name": "lively-somber-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 48304,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:16:17.400803+00:00",
  "ended_at": "2026-08-22T12:16:23.626189+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cce03ea1-6e2b-4b78-9abe-acaf0b393563",
  "name": "quartz-hidden-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 34534,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:08:33.031772+00:00",
  "ended_at": "2026-08-22T12:08:36.234038+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9d8a8d9a-2265-411c-ba04-e85be0497c93",
  "name": "quiet-restless-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 59450,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 767,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:06:58.678032+00:00",
  "ended_at": "2026-08-22T12:07:03.408574+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "acb60237-f07b-47ef-ae60-e97ca50dcefd",
  "name": "peaty-serene-tapir",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 52388,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:59:26.079951+00:00",
  "ended_at": "2026-08-22T11:59:28.187882+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f650dc0-57d6-4eb7-b98e-f8ffaff15847",
  "name": "stormy-sincere-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 46466,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 580,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:59:18.710429+00:00",
  "ended_at": "2026-08-22T11:59:28.189063+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "de098acc-1b2b-4fd4-b2cc-d827ee97728d",
  "name": "fringed-sterling-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41234,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:51:19.595302+00:00",
  "ended_at": "2026-08-21T13:51:23.552864+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "b60768ce-3ae6-402f-9743-8a1bb9950490",
  "name": "restless-blazing-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 55136,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:40:05.320151+00:00",
  "ended_at": "2026-08-21T13:40:10.302053+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "1143d897-8e11-4261-9c8f-de716b0098ec",
  "name": "craggy-crisp-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 32932,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:39:35.343133+00:00",
  "ended_at": "2026-08-21T13:39:39.016666+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "d8572a06-87b8-4ff7-9fe3-187335d41a6e",
  "name": "inland-drifting-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 34000,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 283,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:36:48.307838+00:00",
  "ended_at": "2026-08-21T13:36:52.690094+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "ec10f0fa-1453-4d43-a4f3-b3f45673a1f5",
  "name": "wry-inland-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 58152,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:22:56.175852+00:00",
  "ended_at": "2026-08-21T13:23:00.200007+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "9e82dece-3abd-48ee-b5e3-c543ffa1531c",
  "name": "craggy-wry-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 44390,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:22:32.096540+00:00",
  "ended_at": "2026-08-21T13:22:36.561461+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "95c69355-a1c0-43e0-8a5e-921dd4292735",
  "name": "western-forlorn-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 42354,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:06:22.252470+00:00",
  "ended_at": "2026-08-21T13:06:25.152481+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "dc9dd610-7fa8-4a30-91f9-767ff8d9e678",
  "name": "serene-ashen-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 57776,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 605,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:03:13.160171+00:00",
  "ended_at": "2026-08-21T13:03:18.131302+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "a82ad22b-05be-48a4-9ed8-eb4ad792134d",
  "name": "wry-daring-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45704,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:47:55.148495+00:00",
  "ended_at": "2026-08-21T12:47:59.718700+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "57168b3c-e89f-4459-aa3a-bbcb236d3ba3",
  "name": "dapper-wiry-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 50744,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 186,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:45:12.212804+00:00",
  "ended_at": "2026-08-21T12:45:17.085027+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "f21a380f-4e37-41e5-bf66-7e06b3836757",
  "name": "hazel-brisk-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 51318,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-21T11:37:33.533659+00:00",
  "ended_at": "2026-08-21T11:37:33.673425+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 836
 },
 {
  "id": "b3a0ce5d-ef7d-410a-b8d6-d3d107667e71",
  "name": "balmy-tawny-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 52214,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 164,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:51:37.616784+00:00",
  "ended_at": "2026-08-20T19:51:40.833162+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "a8b1d871-6557-4b80-9402-73db50aa9f8a",
  "name": "snowy-ivory-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 57998,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:43:22.859631+00:00",
  "ended_at": "2026-08-20T19:43:28.677198+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "d4032ac0-0898-467d-b62e-19828c4a4520",
  "name": "marbled-sincere-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50500,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 173,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:24:53.067842+00:00",
  "ended_at": "2026-08-20T19:24:59.155736+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "d09474b7-2501-4826-826a-64c52c1ae61c",
  "name": "watchful-merry-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 33136,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:22:23.554544+00:00",
  "ended_at": "2026-08-20T19:22:28.070875+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "7aff027f-d087-4558-9ff7-bbcdb061812a",
  "name": "nimble-nameless-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 47188,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:14:46.903635+00:00",
  "ended_at": "2026-08-20T19:14:50.127746+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "45751d84-5777-4c3d-87a7-7589432128ce",
  "name": "rambling-barren-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50806,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:05:35.188595+00:00",
  "ended_at": "2026-08-20T19:05:39.577829+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "783ba678-dd99-414b-96af-5ce0b3ebc45d",
  "name": "jovial-wandering-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42210,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:54:24.407118+00:00",
  "ended_at": "2026-08-20T18:54:30.155021+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "b1ba9a3f-db29-4187-b553-5178a9fe2b16",
  "name": "zealous-subtle-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 45204,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:41:23.877868+00:00",
  "ended_at": "2026-08-20T18:41:27.548817+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "abb3727e-9e43-4416-bb77-6721b9ad94f6",
  "name": "gallant-salty-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 46750,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:32:38.386408+00:00",
  "ended_at": "2026-08-20T18:32:42.617000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "b1d56e98-fcf3-420a-9816-62f72be2a7bc",
  "name": "weathered-patient-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 35706,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:24:30.911318+00:00",
  "ended_at": "2026-08-20T18:24:32.967486+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "081f945e-9c66-44fd-951b-956080653849",
  "name": "glassy-polar-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 55986,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:24:30.228799+00:00",
  "ended_at": "2026-08-20T18:24:32.965912+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "b04d12c0-129e-4a3b-9602-61af5bafaaf0",
  "name": "balmy-wandering-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 53176,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:08:11.601420+00:00",
  "ended_at": "2026-08-20T11:08:12.519622+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "c8d390e8-aed7-4a92-b759-510127f3a296",
  "name": "cosmic-vivid-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51118,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:00:14.832210+00:00",
  "ended_at": "2026-08-20T11:00:15.042346+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 872
 },
 {
  "id": "8ba5b35d-a3a9-40ed-9760-b13cb598b127",
  "name": "hazel-verdant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 41290,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 502,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:56:01.922554+00:00",
  "ended_at": "2026-08-20T10:56:02.692552+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "63ed274d-352d-43a5-8da1-e9711e5dbb1c",
  "name": "keen-breezy-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51096,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:51:25.151439+00:00",
  "ended_at": "2026-08-20T10:51:25.817063+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 678
 },
 {
  "id": "4a62022a-35cd-4ec3-adbe-fda440549796",
  "name": "jagged-boreal-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 50890,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 200,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:50:04.527131+00:00",
  "ended_at": "2026-08-20T10:50:05.408564+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 831
 },
 {
  "id": "d80f1bc6-1d05-4af3-a510-f998923461ab",
  "name": "cunning-tidal-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 46944,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:35:09.822103+00:00",
  "ended_at": "2026-08-20T10:35:10.653672+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 854
 },
 {
  "id": "058a5955-002a-4bc4-a848-78344cb3029f",
  "name": "prairie-vaulted-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 39656,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:18:14.836802+00:00",
  "ended_at": "2026-08-20T10:18:15.704659+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "1619dcc2-b3c0-4d00-ab65-e815e25886f8",
  "name": "sullen-curious-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 52792,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:13:34.171930+00:00",
  "ended_at": "2026-08-20T10:13:34.908889+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 942
 },
 {
  "id": "8452685d-8ce1-409e-b22d-0a1b3c0320b6",
  "name": "jovial-fringed-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 49424,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:06:05.337669+00:00",
  "ended_at": "2026-08-20T10:06:06.676956+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e87680f1-9c2a-4dcd-a4fb-8694ffc60edb",
  "name": "earnest-hidden-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51790,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:06:04.871029+00:00",
  "ended_at": "2026-08-20T10:06:06.675818+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1554
 },
 {
  "id": "8285608d-99b5-48ea-9ef1-023be6f68be9",
  "name": "brave-drifting-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44760,
  "username": "claude",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 420,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:05:44.248896+00:00",
  "ended_at": "2026-08-20T10:05:45.273058+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 214
 }
]