[
 {
  "id": "d939b128-e9e4-41e9-9911-efef096d2136",
  "name": "coral-salty-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51044,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 415,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:44.414147+00:00",
  "ended_at": "2026-08-27T03:10:48.398301+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce0da0ed-6bfa-44f1-af54-2ab9b9d401a5",
  "name": "genial-thorny-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57194,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:00.117534+00:00",
  "ended_at": "2026-08-27T03:09:05.994238+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3d64063a-37f4-4b89-9dc0-aaf8b720b185",
  "name": "downy-autumn-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59362,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:59:57.480834+00:00",
  "ended_at": "2026-08-27T03:00:02.160958+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06e84c80-f186-41b4-957d-90b0ad5064dc",
  "name": "umber-downy-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53696,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:54:32.123598+00:00",
  "ended_at": "2026-08-27T02:54:36.475323+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d85429dd-af81-4fbb-b3aa-62376d24f5cf",
  "name": "feathered-gentle-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43902,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 321,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:49:28.103566+00:00",
  "ended_at": "2026-08-27T02:49:32.882350+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cef1a3c4-89b5-4efa-bdbb-d96b7656e5f9",
  "name": "marbled-sunlit-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 43370,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:45:00.309597+00:00",
  "ended_at": "2026-08-27T02:45:02.259661+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb5f733e-9c4e-47e8-9b69-c1ea0b05b016",
  "name": "ancient-sunlit-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35988,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:44:53.809904+00:00",
  "ended_at": "2026-08-27T02:45:02.260742+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "ab0fe243-2ae8-4009-acc7-f45ef1a211fa",
  "name": "valiant-hidden-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58026,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 398,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:32:45.690302+00:00",
  "ended_at": "2026-08-26T14:32:48.931822+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea26497e-3ab0-48fd-829a-52c184be61b0",
  "name": "russet-hazel-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40704,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:23:12.910086+00:00",
  "ended_at": "2026-08-26T14:23:14.585682+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2233
 },
 {
  "id": "b56e4ed5-af44-4318-9871-55013d8c4f6e",
  "name": "mindful-plush-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40706,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:49.864970+00:00",
  "ended_at": "2026-08-26T14:22:51.679636+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86a35e29-1a47-4b18-b09c-39cd181c00b0",
  "name": "bronzed-whispering-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64336,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 288,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:19:20.933243+00:00",
  "ended_at": "2026-08-26T14:19:22.363330+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2266
 },
 {
  "id": "83ae0dde-b1bd-47d8-97f5-571f61670e3e",
  "name": "weathered-western-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 61502,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:18:56.268088+00:00",
  "ended_at": "2026-08-26T14:18:57.607495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab786837-6d8a-442b-80f8-b9623e54aa28",
  "name": "thorny-gentle-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59394,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 732,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:14:01.893266+00:00",
  "ended_at": "2026-08-26T14:14:06.232629+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "149a062c-2ee8-4365-80a6-36ac1e97b31a",
  "name": "bronzed-salty-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56638,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 514,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:46:32.289025+00:00",
  "ended_at": "2026-08-26T13:46:35.865840+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "46d7b808-6a39-4278-b1a6-f4c0158c2b60",
  "name": "early-honest-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48540,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:33:04.018362+00:00",
  "ended_at": "2026-08-26T12:33:08.013458+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "216dd79f-18bc-4b87-817d-49c17e4712ba",
  "name": "whispering-mighty-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60740,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:59:56.425542+00:00",
  "ended_at": "2026-08-26T11:59:59.433169+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fe1a1cc2-2686-4826-963f-b18d67fc7802",
  "name": "dappled-sincere-seal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 38870,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:54:26.942931+00:00",
  "ended_at": "2026-08-26T11:54:30.704242+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94268478-809d-46a5-a852-c685e75f1d06",
  "name": "foggy-candid-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39230,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 798,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:54:21.133041+00:00",
  "ended_at": "2026-08-26T11:54:30.702420+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "583be4a2-4e44-4fc9-abb8-056375bdbc2d",
  "name": "blunt-hardy-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39076,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:31:16.210219+00:00",
  "ended_at": "2026-08-26T06:31:18.956369+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e14ba4e6-fa4c-4b7b-bf2d-ef069ff25591",
  "name": "hazel-flinty-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48034,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:23:14.577703+00:00",
  "ended_at": "2026-08-26T06:23:18.172797+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dc0a5b9b-8edb-4d92-968c-26e6930a5903",
  "name": "amiable-twilight-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46688,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:14.502387+00:00",
  "ended_at": "2026-08-26T05:59:17.836159+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dbc73256-44ec-4bfd-ab65-1f3111ca55de",
  "name": "lonesome-tranquil-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33322,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:52:25.597024+00:00",
  "ended_at": "2026-08-26T05:52:28.335484+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7144f95e-0eda-4f57-99bc-65cab7323618",
  "name": "mindful-lanky-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45062,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:45:16.640327+00:00",
  "ended_at": "2026-08-26T05:45:21.662439+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c9286140-5da1-4be8-b7d9-d6116f1cdd26",
  "name": "serene-rustic-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 57164,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:41:17.519112+00:00",
  "ended_at": "2026-08-26T05:41:22.726999+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "5b74d77a-326c-4cea-ae5b-7df41f4ed8ed",
  "name": "downy-balmy-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33114,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:08:12.573136+00:00",
  "ended_at": "2026-08-25T23:08:14.177004+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a0221c51-04c8-4e49-9257-8cc4a98def6a",
  "name": "keen-flinty-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58572,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:09.368283+00:00",
  "ended_at": "2026-08-25T22:14:10.607122+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "5fe2d493-517a-4346-b8c9-ecfe2a0255ac",
  "name": "vivid-jolly-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39724,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:13:38.570352+00:00",
  "ended_at": "2026-08-25T22:14:10.608504+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5b711e3-b29d-4a67-930b-0db5ed26a3d2",
  "name": "russet-tender-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 36074,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T20:19:59.469770+00:00",
  "ended_at": "2026-08-25T20:19:59.562767+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0c1a511d-b50f-480c-8c05-f2cab8007dfd",
  "name": "stoic-lanky-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56724,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:27:44.007435+00:00",
  "ended_at": "2026-08-25T02:27:49.284758+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2d055685-0903-4a26-8029-1292d9de6ec8",
  "name": "lucid-whispering-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52178,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:13:44.604174+00:00",
  "ended_at": "2026-08-25T02:13:49.016400+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c2964242-b375-4c09-a97c-e873a5e80d11",
  "name": "amiable-icy-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52978,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:52:25.108615+00:00",
  "ended_at": "2026-08-25T01:52:30.205376+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3a06a0f-8138-4d92-9ccb-55159e7acc1b",
  "name": "dappled-fringed-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42672,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:50:28.106481+00:00",
  "ended_at": "2026-08-25T01:50:32.199068+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b09ef282-03b2-4429-a071-a8795cc3f963",
  "name": "curious-lanky-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44356,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:35:16.717881+00:00",
  "ended_at": "2026-08-25T01:35:19.506802+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f85950c1-5f68-4956-afc1-5ce279a355bf",
  "name": "twilight-smoky-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 55874,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:45:00.722467+00:00",
  "ended_at": "2026-08-25T00:45:02.725627+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75cb9dc5-850d-426e-93f6-c96cb8b441dd",
  "name": "hardy-plucky-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57516,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:44:59.314113+00:00",
  "ended_at": "2026-08-25T00:45:02.724331+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "b35cafce-e24c-4de2-94dd-cbfdaf4bc977",
  "name": "russet-brave-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53396,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:13:35.106542+00:00",
  "ended_at": "2026-08-24T10:13:38.420587+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "16abc400-08b0-4b56-b087-b1caf4df5219",
  "name": "hazy-buoyant-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53878,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:11:44.205804+00:00",
  "ended_at": "2026-08-24T10:11:47.679134+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "53c0a674-e9fd-4db7-b68d-2e1c2d5b64cb",
  "name": "smoky-crisp-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38260,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:09:57.390373+00:00",
  "ended_at": "2026-08-24T10:10:00.705328+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "932b9674-f5e3-46a2-9f38-ac6365300339",
  "name": "idle-snowy-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40370,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:01:39.708826+00:00",
  "ended_at": "2026-08-24T10:01:43.228667+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df141d71-b7d0-48bd-9631-b89c75a8c9b3",
  "name": "bitter-tawny-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40430,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:54:58.948203+00:00",
  "ended_at": "2026-08-24T09:55:03.814432+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aedb4550-45c4-41d1-8633-252bff60085b",
  "name": "blazing-misty-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 47820,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:12:16.943591+00:00",
  "ended_at": "2026-08-24T09:12:20.127526+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f8360ba2-e9c9-4a79-81a4-e03fe0b01522",
  "name": "rambling-hidden-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39716,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:10.998626+00:00",
  "ended_at": "2026-08-24T09:12:20.130748+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "291af6ba-5824-42c1-977c-866685fc9534",
  "name": "frank-foggy-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.71.192.108",
  "src_port": 39330,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 477,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:35:55.531860+00:00",
  "ended_at": "2026-08-23T13:35:55.678004+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3419
 },
 {
  "id": "bf36e1d2-5b79-457b-98b0-9d4c0a4da92c",
  "name": "dusty-stoic-swallow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 50306,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:35:39.038083+00:00",
  "ended_at": "2026-08-23T13:35:39.286012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acfa63b5-d54f-4639-bb8d-c5ac8f88d9ad",
  "name": "fabled-lunar-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.71.192.108",
  "src_port": 39340,
  "username": "developer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:35:26.125087+00:00",
  "ended_at": "2026-08-23T13:35:27.646001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb1b028f-ab55-417d-ae21-b67ada32f77f",
  "name": "hushed-quaint-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 47528,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:35:16.700909+00:00",
  "ended_at": "2026-08-23T08:35:18.639749+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c427b111-ee9e-4067-9d9e-ae36985e4079",
  "name": "wiry-fickle-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58618,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:14.825929+00:00",
  "ended_at": "2026-08-23T08:35:18.637433+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "62c5b36c-cd8a-4476-82e3-c31fc0790724",
  "name": "vivid-smooth-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 37392,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 472,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:17:53.567529+00:00",
  "ended_at": "2026-08-22T12:17:57.548569+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78a41e6d-335a-4fc6-9c4c-b2515efee193",
  "name": "sterling-airy-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 38424,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:01:28.498461+00:00",
  "ended_at": "2026-08-22T12:01:30.362829+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4c671410-d00f-4e9e-bd28-03b138f87542",
  "name": "stormy-lunar-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 48026,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:01:23.065077+00:00",
  "ended_at": "2026-08-22T12:01:30.363867+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "704adfb9-8058-4598-9df7-3e12d04ae042",
  "name": "distant-lofty-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45884,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 342,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:40:23.535172+00:00",
  "ended_at": "2026-08-21T13:40:27.568901+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "d9ffafb6-ee40-4275-b0d6-9ee3baa36f94",
  "name": "ruddy-spirited-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 47570,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 404,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:13:53.176789+00:00",
  "ended_at": "2026-08-21T13:13:55.824478+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "148489a9-2b92-4c30-92ae-5dfb581a5d32",
  "name": "jolly-vernal-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 48882,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:07:52.461748+00:00",
  "ended_at": "2026-08-21T13:07:58.332371+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "c1131001-9271-46ab-82ea-dcb5b156008f",
  "name": "polar-ginger-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 35042,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:06:41.822438+00:00",
  "ended_at": "2026-08-21T13:06:47.024935+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "e2e23a81-3dc1-451d-a374-6db8402e7527",
  "name": "drifting-rugged-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 55728,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T13:04:22.787331+00:00",
  "ended_at": "2026-08-21T13:04:24.453505+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bfc91ab7-913d-4046-ba3e-51fbaa6f46c1",
  "name": "wandering-frugal-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 40336,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:04:16.469453+00:00",
  "ended_at": "2026-08-21T13:04:24.454573+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1655
 },
 {
  "id": "283e9f63-f5c2-4f39-b9b0-66c1e23fc52f",
  "name": "lucid-gleaming-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 54448,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:13:56.061558+00:00",
  "ended_at": "2026-08-20T19:14:01.398230+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "b96f0e88-e89f-40d8-9a18-32a2d80c8ad1",
  "name": "solar-quiet-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 44960,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:56:26.967429+00:00",
  "ended_at": "2026-08-20T18:56:32.520921+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "1a8a6da9-68a6-4063-a2e5-edad30877a99",
  "name": "balmy-buoyant-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 39912,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:55:58.314219+00:00",
  "ended_at": "2026-08-20T18:56:01.702913+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "37a73e50-4c1f-4ce9-83e3-dee8a612a4d8",
  "name": "sincere-cobalt-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40632,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:52:41.988641+00:00",
  "ended_at": "2026-08-20T18:52:46.503192+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "d9335c86-25bb-4f59-92e0-213678d14209",
  "name": "forlorn-cobalt-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 55944,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:51:39.779649+00:00",
  "ended_at": "2026-08-20T18:51:41.398417+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab600bb2-a2a9-495b-80ee-1062a36badc8",
  "name": "idle-fabled-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42238,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:51:33.383492+00:00",
  "ended_at": "2026-08-20T18:51:41.397234+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "97fa4488-dfff-48c2-9f7b-e329eb213a49",
  "name": "coastal-languid-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 32864,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:05:39.923924+00:00",
  "ended_at": "2026-08-20T11:05:40.344552+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "6b539797-7d0f-463c-a40d-d72e4d5c15a7",
  "name": "grassy-dapper-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 52308,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:59:55.419418+00:00",
  "ended_at": "2026-08-20T10:59:56.348956+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "8b00091c-12a0-4a4a-a66b-d0da6f204371",
  "name": "painted-placid-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 34248,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:46:22.199111+00:00",
  "ended_at": "2026-08-20T10:46:23.013096+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 841
 },
 {
  "id": "49e8e4cd-4cea-4c5a-812d-cb218fa004d8",
  "name": "painted-supple-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 58318,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:38:17.468962+00:00",
  "ended_at": "2026-08-20T10:38:18.062334+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 870
 },
 {
  "id": "876ff960-7d11-4400-b736-fcd749416d6f",
  "name": "tender-clever-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 52228,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:06:33.598090+00:00",
  "ended_at": "2026-08-20T10:06:34.901722+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc0e1d3a-68b5-4732-b36b-ce4868a82065",
  "name": "blazing-wry-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 47544,
  "username": "developer",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:06:33.049557+00:00",
  "ended_at": "2026-08-20T10:06:34.902319+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 2405
 }
]