[
 {
  "id": "ff5a7f90-82ae-445e-abcd-3a34f5b2fea4",
  "name": "arctic-vernal-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59390,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:02:07.645167+00:00",
  "ended_at": "2026-08-27T12:02:08.629014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "a8b5b1f7-985f-455c-897b-93f738cc92be",
  "name": "barren-blithe-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59414,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:01:50.046578+00:00",
  "ended_at": "2026-08-27T12:01:51.729475+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5009160c-b2a5-4ec0-9a3d-6eced0c40f32",
  "name": "cunning-quaint-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 57762,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:50:15.699722+00:00",
  "ended_at": "2026-08-27T10:50:16.834738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "053adf7e-97d1-4f8e-9eaa-06d2952fcd5a",
  "name": "shaded-creaky-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58250,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:08:44.750922+00:00",
  "ended_at": "2026-08-27T03:08:48.950166+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e449c8cb-5ed3-4d12-833a-5cfde24481fb",
  "name": "lucid-deft-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34676,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:40.816866+00:00",
  "ended_at": "2026-08-27T02:57:45.554063+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a96b4832-7bc1-4a02-9779-a2112b945d53",
  "name": "breezy-blazing-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41808,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:53:31.981900+00:00",
  "ended_at": "2026-08-27T02:53:37.018238+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "baaa95b2-057c-42ed-b5d2-2b1ee36afa78",
  "name": "ancient-sunlit-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48802,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:34:21.537210+00:00",
  "ended_at": "2026-08-27T02:34:27.154445+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7150224-baca-4cdf-afd0-40aa2f763f93",
  "name": "earnest-tawny-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52936,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:33:52.356441+00:00",
  "ended_at": "2026-08-27T02:33:56.981642+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8bc2c9e4-f34b-4250-bac9-2cb6085e60b9",
  "name": "bashful-thorny-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33606,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:33:13.578162+00:00",
  "ended_at": "2026-08-27T02:33:18.185250+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b17ef772-286f-4cad-a937-92a9ad21e4dd",
  "name": "foggy-cunning-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 46582,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:51:47.481211+00:00",
  "ended_at": "2026-08-26T23:55:47.506849+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "50795711-7d35-449f-bc23-252841b31253",
  "name": "cosmic-forlorn-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46104,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 519,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:23:55.588927+00:00",
  "ended_at": "2026-08-26T14:24:00.159294+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "49a673a9-9dea-41ae-b39b-c1c4e6309b91",
  "name": "cobalt-hearty-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55574,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 392,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:07:52.926878+00:00",
  "ended_at": "2026-08-26T14:07:56.713945+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c3e1d326-fd96-4dcc-a2d7-898de6c23d0e",
  "name": "frosty-meadow-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40510,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:58:08.535315+00:00",
  "ended_at": "2026-08-26T13:58:12.563344+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "29250cbe-ee87-43ba-b210-73dd2bdbc306",
  "name": "breezy-noble-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40922,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 603,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:48:01.545241+00:00",
  "ended_at": "2026-08-26T12:48:05.551546+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "daaf3fe1-9222-4b4a-9d81-80ac08155a14",
  "name": "grassy-coastal-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54220,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 615,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:05:12.978839+00:00",
  "ended_at": "2026-08-26T12:05:18.738946+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8adcb5cd-0434-46fd-8be0-d5e82959f200",
  "name": "gnarled-solar-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 59354,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:54:56.151024+00:00",
  "ended_at": "2026-08-26T11:55:01.890312+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0411f5d-d551-48d4-903c-548dfca91c93",
  "name": "creaky-arctic-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45344,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 605,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:54:52.175596+00:00",
  "ended_at": "2026-08-26T11:55:01.888276+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "ff0a98f6-8923-4978-9129-7de7505ec3fa",
  "name": "brazen-solar-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43732,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:45:56.281321+00:00",
  "ended_at": "2026-08-26T06:46:01.842139+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7bc01533-e476-452f-961a-11ac584c7fe9",
  "name": "dewy-ginger-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42024,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:19.333884+00:00",
  "ended_at": "2026-08-26T06:28:22.268423+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e3392d68-7843-4b14-9052-232c3680b5b0",
  "name": "rugged-umber-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38684,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:21:58.334716+00:00",
  "ended_at": "2026-08-26T06:22:03.515927+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4094d09a-2657-49fc-87f0-0a26456cdce3",
  "name": "hearty-nautical-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37528,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:52.942314+00:00",
  "ended_at": "2026-08-26T06:09:58.883027+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17202afa-59fe-4885-a676-224bd42eb37a",
  "name": "autumn-hushed-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36980,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:53:37.872176+00:00",
  "ended_at": "2026-08-26T05:53:40.886990+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fa69aac8-ff37-4d06-a667-2d9896f3c2a4",
  "name": "twilight-lucid-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 50188,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:43:15.310611+00:00",
  "ended_at": "2026-08-26T05:43:17.184204+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "03d58167-0e86-464a-9358-3125b9a7a5c9",
  "name": "kindly-freckled-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39054,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:09.479263+00:00",
  "ended_at": "2026-08-26T05:43:17.185606+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "aea5a59b-6f79-4c5a-bf3e-0d4aac96451e",
  "name": "seaward-sleepy-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 47052,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:38:04.049195+00:00",
  "ended_at": "2026-08-26T02:38:04.222536+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e1409f46-b470-4d7d-be24-370c7fb9b399",
  "name": "russet-gnarled-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45764,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:14:55.184474+00:00",
  "ended_at": "2026-08-25T23:14:56.794622+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c45dcfaa-0625-433b-acb4-3463d43df65c",
  "name": "upland-thawing-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 33388,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:57:13.814753+00:00",
  "ended_at": "2026-08-25T22:57:14.142068+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d607b5e9-637e-4478-a067-1788a2078d12",
  "name": "stormy-gnarled-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37888,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:32:06.837811+00:00",
  "ended_at": "2026-08-25T22:32:08.468007+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "fca26d3c-6b07-4b52-9558-9abdcf5ff522",
  "name": "sullen-gleaming-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57412,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:20:16.813188+00:00",
  "ended_at": "2026-08-25T22:20:18.156940+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "222becad-df09-4d0d-86f0-3225349ee5ea",
  "name": "diligent-barren-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56218,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:05:38.561696+00:00",
  "ended_at": "2026-08-25T22:05:39.646362+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "289c9f66-f0af-4684-8359-49450570e663",
  "name": "dusty-plucky-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 56230,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:05:07.730536+00:00",
  "ended_at": "2026-08-25T22:05:39.644883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1fc5403-c996-416f-b55c-0990189c875c",
  "name": "lucid-buoyant-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56618,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:03:52.392832+00:00",
  "ended_at": "2026-08-25T02:03:55.196382+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2750eb50-c34c-46c9-b7d2-9a441de75dbc",
  "name": "wooded-tawny-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49674,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:41:39.521707+00:00",
  "ended_at": "2026-08-25T01:41:44.298638+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "12479431-0741-49cf-9984-923bbdd0cfee",
  "name": "buoyant-courtly-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39164,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:19:16.011732+00:00",
  "ended_at": "2026-08-25T01:19:20.608473+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9789a20b-29b8-4020-89ef-94cdc201542e",
  "name": "painted-proud-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55822,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:08:17.116046+00:00",
  "ended_at": "2026-08-25T01:08:22.634560+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a6aa24e6-0a3a-4b01-8db2-926e2107df48",
  "name": "forlorn-chilly-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35200,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:59:43.631057+00:00",
  "ended_at": "2026-08-25T00:59:46.605911+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d018b867-f028-49d6-bf04-e120692b9831",
  "name": "brazen-primal-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 34872,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:57:39.712452+00:00",
  "ended_at": "2026-08-25T00:57:41.794495+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b4296b4-53f2-401b-b349-0a4889256ac3",
  "name": "feathered-subtle-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38578,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:57:35.023441+00:00",
  "ended_at": "2026-08-25T00:57:41.793238+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "cabe31de-832f-4bfb-8434-62358186c043",
  "name": "brazen-stoic-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47990,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:07:45.891588+00:00",
  "ended_at": "2026-08-24T10:07:50.113685+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e00deea8-5a4f-49aa-b03d-8be6c4d2dd36",
  "name": "eager-bitter-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49462,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:50:33.508391+00:00",
  "ended_at": "2026-08-24T09:50:39.511538+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "57c5c0b8-a7e7-43fc-94e9-1fecb5e84f9c",
  "name": "breezy-seaward-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46408,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:49:05.701432+00:00",
  "ended_at": "2026-08-24T09:49:09.816216+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "330fcbbb-5a47-454b-9156-56cd8be0957c",
  "name": "jagged-canny-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57488,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:22.388108+00:00",
  "ended_at": "2026-08-24T09:41:27.329694+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2469bfb-6188-4525-a09a-3893e7bda266",
  "name": "amber-crisp-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39842,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 267,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:19:52.586527+00:00",
  "ended_at": "2026-08-24T09:19:57.098398+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4e48759f-e8ee-451e-ab62-0981dd1de297",
  "name": "marbled-watchful-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55738,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:14:44.131288+00:00",
  "ended_at": "2026-08-24T09:14:47.840886+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e7f7dbb6-a16b-4c61-8999-9b185b3b0a19",
  "name": "rugged-jagged-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44844,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:28:57.248067+00:00",
  "ended_at": "2026-08-23T21:28:59.056434+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b676b72c-78c6-4c96-a156-fb49bbbf3e55",
  "name": "rapid-fierce-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44804,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T21:28:56.175073+00:00",
  "ended_at": "2026-08-23T21:28:59.066009+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "f3186c55-2d94-4e06-8e47-3aa60811f5f9",
  "name": "creaky-sleepy-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 45414,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:35:53.111457+00:00",
  "ended_at": "2026-08-23T08:35:54.989752+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d82ea62c-3678-4bc0-8e80-7751fb2640b4",
  "name": "leafy-crystal-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52312,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:49.231820+00:00",
  "ended_at": "2026-08-23T08:35:54.990890+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "256fa9bc-86ee-4c51-9f07-f28c11c20b25",
  "name": "vigilant-crystal-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 33032,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:24:02.858693+00:00",
  "ended_at": "2026-08-22T12:24:05.457320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b4b54865-5c8b-4aa0-9a80-a8300f778b72",
  "name": "vivid-twilight-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 41984,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:23:59.481046+00:00",
  "ended_at": "2026-08-22T12:24:05.455823+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1657
 },
 {
  "id": "7c2ff2dd-dd20-4403-ab7a-740dbd8cf08c",
  "name": "jolly-restless-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 38160,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:52:14.312971+00:00",
  "ended_at": "2026-08-21T13:52:18.877752+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "9cfd3ec8-6fcc-45a5-9b67-b7abc3466980",
  "name": "granite-ginger-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 49546,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:30:16.164411+00:00",
  "ended_at": "2026-08-21T13:30:21.970517+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "55fcbc7f-85a2-4216-8141-7af3558e0e0e",
  "name": "solar-graceful-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 42376,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:24:22.799125+00:00",
  "ended_at": "2026-08-21T13:24:26.139053+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "eebb3a22-b6e1-44d1-abdc-2e680b816c19",
  "name": "tangled-sullen-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 60184,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:20:46.982509+00:00",
  "ended_at": "2026-08-21T13:20:51.518142+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "24ae9a6b-5f6c-44d2-a9ad-a69788c1f728",
  "name": "ginger-grumpy-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 55462,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:50:20.538229+00:00",
  "ended_at": "2026-08-21T12:50:25.908199+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "d3cfd8bb-3118-41f8-9804-118166cf1e50",
  "name": "noble-hazy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40226,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:09:17.647214+00:00",
  "ended_at": "2026-08-20T19:09:21.410252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "77dd7a63-0424-4ac4-9d64-4da36bf9b7bf",
  "name": "upland-cheerful-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 37218,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:00:05.301458+00:00",
  "ended_at": "2026-08-20T19:00:09.718512+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "aedb5e26-0f89-4330-bb85-b51b1f7ff59b",
  "name": "hearty-jaunty-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 46518,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:55:09.435407+00:00",
  "ended_at": "2026-08-20T18:55:14.498853+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "1f7bce0d-39be-43cd-bf9a-c09543dcb926",
  "name": "silent-prickly-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 43758,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:44:08.188075+00:00",
  "ended_at": "2026-08-20T18:44:13.134688+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "93d8cbad-2d6e-4afa-88ba-e9a878c7ba98",
  "name": "hearty-austere-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 33508,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:29:47.055421+00:00",
  "ended_at": "2026-08-20T18:29:48.466377+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e2e28e1-a262-442a-b56f-92522166a35f",
  "name": "quiet-glassy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40710,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:29:41.750640+00:00",
  "ended_at": "2026-08-20T18:29:48.474405+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1648
 },
 {
  "id": "a28fa947-762a-4b2d-8b72-128dd0ac4fa4",
  "name": "nimble-sturdy-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.50.51.198",
  "src_port": 52154,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T14:39:41.104829+00:00",
  "ended_at": "2026-08-20T14:43:41.602775+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "2d87c0a0-db2b-4205-9898-96327590e1dc",
  "name": "ancient-whispering-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51206,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:07:23.004519+00:00",
  "ended_at": "2026-08-20T11:07:23.954817+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "f5f9ac09-fb21-41ff-b623-cd902c3cafe5",
  "name": "breezy-fierce-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 54754,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:53:18.600824+00:00",
  "ended_at": "2026-08-20T10:53:19.365801+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 785
 },
 {
  "id": "4ee0cb78-da44-495e-843c-1a683e935e00",
  "name": "windswept-pleasant-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 45740,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:53:02.118244+00:00",
  "ended_at": "2026-08-20T10:53:02.698190+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 758
 },
 {
  "id": "3f8f8351-98a4-4314-95b0-a6a1facb8ddb",
  "name": "sincere-marbled-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 44260,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:48:12.659456+00:00",
  "ended_at": "2026-08-20T10:48:13.480051+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 },
 {
  "id": "6785e8a4-765c-43ed-b6f4-266de900bbe2",
  "name": "gloomy-graceful-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 49984,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:18:45.588568+00:00",
  "ended_at": "2026-08-20T10:18:47.567350+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51c46b22-2bd2-43f6-b1e5-8329d0f7d117",
  "name": "courtly-lonesome-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 48212,
  "username": "git",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:18:45.176539+00:00",
  "ended_at": "2026-08-20T10:18:47.567913+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1697
 },
 {
  "id": "55201d6c-52e0-4e1b-9293-3ba44f0bc34b",
  "name": "faded-sunlit-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.48.90.166",
  "src_port": 46146,
  "username": "git",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T05:51:01.222142+00:00",
  "ended_at": "2026-08-20T05:52:59.292227+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]