[
 {
  "id": "04f65c78-55dc-4484-8b07-dd066e41e55d",
  "name": "rustic-keen-petrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 48124,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:13:59.781508+00:00",
  "ended_at": "2026-08-27T14:14:01.245874+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad66c903-19f8-4b74-98ad-1cb06d82498f",
  "name": "wry-oaken-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33244,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:08:35.638683+00:00",
  "ended_at": "2026-08-27T03:08:40.948667+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "355ea2c5-ce0d-4af1-915c-4d723749b952",
  "name": "placid-fringed-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53988,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:19.170196+00:00",
  "ended_at": "2026-08-27T02:50:24.057545+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "81401bee-16cd-4491-bdc0-356d23d6365d",
  "name": "meadow-thawing-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 34498,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:38:37.306270+00:00",
  "ended_at": "2026-08-27T02:38:40.481492+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6eb57d4b-da97-4de0-8f83-f70db9f7e43c",
  "name": "lively-feathered-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55568,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:38:33.333391+00:00",
  "ended_at": "2026-08-27T02:38:40.480304+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "364c94ec-c9d2-45f0-b8e4-2427a4f1f560",
  "name": "peaty-steady-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50074,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:23:30.933953+00:00",
  "ended_at": "2026-08-26T13:23:35.553378+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5f478697-0697-4c09-96f0-bb92d24d88ce",
  "name": "fleeting-whispering-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60870,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 553,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:12:05.090701+00:00",
  "ended_at": "2026-08-26T13:12:09.539132+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aef5bdfc-ac32-4b03-a032-ed995f41b3ec",
  "name": "proud-humble-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 54228,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:34:50.094707+00:00",
  "ended_at": "2026-08-26T12:34:57.445063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78389d4b-de1b-403b-8ad2-5fa049110124",
  "name": "gleaming-crisp-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33428,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 402,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:34:43.145583+00:00",
  "ended_at": "2026-08-26T12:34:57.446023+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "c88a40df-a844-48ad-9d3a-19291ed8dc4e",
  "name": "salty-weathered-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43304,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 847,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:40:23.703335+00:00",
  "ended_at": "2026-08-26T11:40:24.998012+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2092
 },
 {
  "id": "18cdf5ba-215d-4b86-806f-9abec1cc186e",
  "name": "frugal-dappled-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43320,
  "username": "ec2-user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:39:59.586241+00:00",
  "ended_at": "2026-08-26T11:40:00.386543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24fa9f3d-763b-41c8-9f38-ec7f87a881d1",
  "name": "arctic-grassy-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43136,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:09.431034+00:00",
  "ended_at": "2026-08-26T06:39:13.751160+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "29b33bb8-f705-469f-b40b-7672ef44028b",
  "name": "rambling-lanky-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48664,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:23:46.626875+00:00",
  "ended_at": "2026-08-26T06:23:51.807498+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7e09e0c2-60d3-45a2-a8b8-d8d803f5e8bc",
  "name": "stoic-cobalt-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 39118,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:43:48.642439+00:00",
  "ended_at": "2026-08-26T05:43:50.982652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21ac6372-f49e-48ef-9c83-9f37849b8245",
  "name": "graceful-nameless-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51364,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:43.991251+00:00",
  "ended_at": "2026-08-26T05:43:50.983807+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "f2939518-e802-4330-84cc-0b1dfcc97886",
  "name": "gentle-ruddy-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52156,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:49:16.704754+00:00",
  "ended_at": "2026-08-25T01:49:21.995546+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "90e9329e-e970-4404-aa5a-112d11a64693",
  "name": "ashen-gloomy-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37898,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:59:37.690613+00:00",
  "ended_at": "2026-08-25T00:59:40.522401+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cbfa0591-e2a8-4c47-910a-ba181719b2cb",
  "name": "lofty-ruddy-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 35428,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:52:07.788331+00:00",
  "ended_at": "2026-08-25T00:52:09.531970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1a717c3-427c-42c5-b4af-aa0e4a183444",
  "name": "blithe-hidden-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39850,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:01.307991+00:00",
  "ended_at": "2026-08-25T00:52:09.534491+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "a4478524-deb1-4255-922b-5522f3ccb79a",
  "name": "indigo-primal-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38896,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:01.507721+00:00",
  "ended_at": "2026-08-24T10:16:05.365865+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cbeddb1e-d2cf-4f20-950d-58dd963f04a0",
  "name": "lively-downy-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57496,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:07:26.005306+00:00",
  "ended_at": "2026-08-24T10:07:29.710894+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "db5ad59c-423c-438c-87a6-56d715c2869e",
  "name": "tender-tranquil-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 48232,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:59:33.692853+00:00",
  "ended_at": "2026-08-24T08:59:36.194549+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8f42a7b3-b2a9-41f5-8cd6-67286251607d",
  "name": "fickle-lawful-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39680,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:59:27.894378+00:00",
  "ended_at": "2026-08-24T08:59:36.192222+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7ea2be4c-18bd-40f9-885e-f87d5f16cd00",
  "name": "vivid-sincere-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.124",
  "src_port": 41430,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:32:05.124106+00:00",
  "ended_at": "2026-08-22T12:32:10.046352+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7858c551-74c8-45f7-98c2-6959f4b7b90a",
  "name": "proud-golden-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 45780,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1639,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:31:59.497898+00:00",
  "ended_at": "2026-08-22T12:32:10.044886+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "ecfd59c8-3716-403b-a84a-801535f6e3e5",
  "name": "gritty-brisk-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50756,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:22:12.469235+00:00",
  "ended_at": "2026-08-22T12:22:16.313321+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5a016fb4-e563-42b3-b4fb-427851486bd5",
  "name": "candid-thorny-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 43336,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:10:00.921437+00:00",
  "ended_at": "2026-08-22T12:10:02.890096+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "61d39da1-92b2-4972-b317-4708450eaaf3",
  "name": "jolly-rugged-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 33146,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 430,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:09:56.019764+00:00",
  "ended_at": "2026-08-22T12:10:02.888486+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "bcef251b-9e57-4050-9c27-1f2f989c783e",
  "name": "fleeting-quartz-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 45820,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:47:06.571357+00:00",
  "ended_at": "2026-08-21T13:47:09.569111+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "41d5b334-546f-4638-8d0c-846f01f2a9c6",
  "name": "wandering-deft-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 58170,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:32:56.124116+00:00",
  "ended_at": "2026-08-21T13:33:01.113430+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "43c3b77c-2365-4f5d-bc17-931571d719cf",
  "name": "jovial-drifting-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 40744,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T13:10:37.526742+00:00",
  "ended_at": "2026-08-21T13:10:39.939785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b11d805c-08a7-4a4e-b852-714c62fc11bd",
  "name": "vigilant-frank-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 49782,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:10:32.478649+00:00",
  "ended_at": "2026-08-21T13:10:39.938502+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "afeed3e7-6bbf-47c8-91fa-8fa8342653c0",
  "name": "alpine-reedy-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37188,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:59:00.984150+00:00",
  "ended_at": "2026-08-20T18:59:06.214917+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "9f673484-5319-45ae-b05d-486e4c76b452",
  "name": "vernal-nimble-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 52612,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 170,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:50:42.268455+00:00",
  "ended_at": "2026-08-20T18:50:47.439432+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "6d1d1e99-1641-4f92-a9bc-634721dd7e94",
  "name": "upland-subtle-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 36214,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:48:55.527691+00:00",
  "ended_at": "2026-08-20T18:48:56.854926+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "57a7290e-1ba4-4003-8989-a6852eca550c",
  "name": "gritty-cunning-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50894,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:48:52.460992+00:00",
  "ended_at": "2026-08-20T18:48:56.856554+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "8c23de3f-5036-4bc3-b13f-d8f504ea0318",
  "name": "lunar-dutiful-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 58408,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:34:15.062053+00:00",
  "ended_at": "2026-08-20T10:34:15.932327+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 760
 },
 {
  "id": "a83524a1-f601-45f5-aefc-8aa6b17f8b37",
  "name": "painted-proud-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42600,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:29:31.910854+00:00",
  "ended_at": "2026-08-20T10:29:32.575203+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 724
 },
 {
  "id": "988d8014-aa26-4240-b0c1-66335147aa4a",
  "name": "quiet-restless-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 59138,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:29:29.362027+00:00",
  "ended_at": "2026-08-20T10:29:30.980013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6dfea4da-5a40-4621-842a-b09d32c8439e",
  "name": "emerald-courtly-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42572,
  "username": "ec2-user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:29:28.777577+00:00",
  "ended_at": "2026-08-20T10:29:30.979323+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1596
 }
]