[
 {
  "id": "92f79bfd-6af6-423b-ae4a-edc12c4026b0",
  "name": "barren-salty-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 49358,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:58:11.390937+00:00",
  "ended_at": "2026-08-27T13:58:13.191461+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2121
 },
 {
  "id": "bfa3910a-3236-4650-a43e-6ccab7ac1232",
  "name": "lawful-golden-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 53446,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:57:41.380643+00:00",
  "ended_at": "2026-08-27T13:57:42.939001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b464d23-4a9a-46c2-b421-cbddd6f10f66",
  "name": "vaulted-obsidian-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 53000,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:10:09.081161+00:00",
  "ended_at": "2026-08-27T08:10:10.584016+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "c48c1d3e-9aa5-4875-b56e-66143a70bff8",
  "name": "rapid-wiry-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 54322,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:09:54.179779+00:00",
  "ended_at": "2026-08-27T08:09:55.022125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9bdaf3ce-2e88-4b5a-9165-b78fb227aec3",
  "name": "clever-gleaming-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54376,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 437,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:53:04.161134+00:00",
  "ended_at": "2026-08-27T02:53:08.983693+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f51c47b5-6bb6-46f7-97e8-70696de44899",
  "name": "rapid-thawing-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41246,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:47:46.693359+00:00",
  "ended_at": "2026-08-27T02:47:51.163349+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e1d6a25a-26dc-4f6f-bd36-67fe62a74d26",
  "name": "mottled-umber-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 44594,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:14:01.354817+00:00",
  "ended_at": "2026-08-27T02:14:03.888893+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4febe64b-4ca1-400d-914c-33515125d438",
  "name": "pewter-pristine-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38834,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:13:59.371301+00:00",
  "ended_at": "2026-08-27T02:14:03.887498+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "196f1d27-2c48-4975-ba0b-ddd181b0dab5",
  "name": "icy-grumpy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 32900,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:50:32.380524+00:00",
  "ended_at": "2026-08-27T01:50:33.575565+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2259
 },
 {
  "id": "63098e80-2a8f-4c80-a71d-e5d6fbcfb33f",
  "name": "weathered-somber-snipe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43954,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:50:13.513392+00:00",
  "ended_at": "2026-08-27T01:50:15.011292+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b9eb3aad-1ada-4969-92e9-51b053452758",
  "name": "gilded-bitter-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 53794,
  "username": "oracle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:29:09.204502+00:00",
  "ended_at": "2026-08-26T23:33:09.221372+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "52d54982-8c24-4a41-90b2-7ab3820dda9f",
  "name": "merry-twilight-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52616,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:03:17.466738+00:00",
  "ended_at": "2026-08-26T14:03:20.729374+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5f5810a1-4c36-4d98-b38f-37244620eead",
  "name": "sincere-lonesome-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53834,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 599,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:27:33.724269+00:00",
  "ended_at": "2026-08-26T13:27:38.020119+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0d97948c-9066-4321-8d4c-20434de1be4f",
  "name": "arctic-lucid-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 37654,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:54:49.271339+00:00",
  "ended_at": "2026-08-26T12:54:55.396063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a20fc49e-c647-4cfc-a377-825707e94b75",
  "name": "thrifty-marbled-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49774,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 342,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:54:42.322666+00:00",
  "ended_at": "2026-08-26T12:54:55.397244+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "8fdfef39-d58a-4929-83fb-ab13a4b1c32c",
  "name": "stormy-tawny-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49774,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 164,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:48:17.965479+00:00",
  "ended_at": "2026-08-26T06:48:21.807026+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "37bcab52-cb1c-41e0-bf3c-9492d1c2a220",
  "name": "craggy-ruddy-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56300,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:13:00.645857+00:00",
  "ended_at": "2026-08-26T06:13:06.467550+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "40c01261-f151-44da-8cdf-f6126e5efb83",
  "name": "serene-rugged-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 38852,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:38:28.542578+00:00",
  "ended_at": "2026-08-26T05:38:30.318459+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f01d3198-91f2-4b4a-94ae-6997095af8cf",
  "name": "umber-rapid-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59916,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:38:25.380931+00:00",
  "ended_at": "2026-08-26T05:38:30.319249+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "b9d14717-ed11-414e-976a-6805de3f824c",
  "name": "boreal-shaded-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 56536,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:22:18.794280+00:00",
  "ended_at": "2026-08-26T02:22:18.988262+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e1293800-9f4a-49c4-8f5f-485ddeaaba22",
  "name": "solar-prairie-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38702,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:36:32.468076+00:00",
  "ended_at": "2026-08-25T23:36:34.552030+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "37a10140-f210-4995-9a4d-35b92e761b9f",
  "name": "nautical-tidal-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50520,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:50.033387+00:00",
  "ended_at": "2026-08-25T23:29:51.221063+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b5810a33-7838-422a-b72c-bcd902fda84e",
  "name": "quiet-sooty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48976,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:06:16.010839+00:00",
  "ended_at": "2026-08-25T23:06:17.557652+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "cea076b0-d9d1-401d-a8d3-dfa9034c3d70",
  "name": "breezy-hazel-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58116,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:04:15.251722+00:00",
  "ended_at": "2026-08-25T23:04:17.309450+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "745d9813-8f01-4e53-8de3-1bcdeb060a99",
  "name": "quiet-rugged-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42082,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:57:38.172715+00:00",
  "ended_at": "2026-08-25T22:57:39.372036+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b6959116-24e6-4bc7-88dd-27ebdd16c659",
  "name": "plush-vaulted-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45736,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:42:42.832094+00:00",
  "ended_at": "2026-08-25T22:42:44.854466+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4bad3a25-0cbb-497c-9636-5727300f122f",
  "name": "scarlet-smooth-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40264,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:39:31.332989+00:00",
  "ended_at": "2026-08-25T22:39:33.244845+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "7dce3b21-d3bf-48d2-9b9d-a3e5abc26158",
  "name": "western-thrifty-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46316,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:25:24.051016+00:00",
  "ended_at": "2026-08-25T22:25:26.476435+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1728f8f3-e79e-42ba-915c-0679f5dba144",
  "name": "gilded-serene-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41770,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:12:21.893310+00:00",
  "ended_at": "2026-08-25T22:12:23.388567+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "60ef47e0-2836-429a-bd8c-c25a12d1ed5f",
  "name": "lucid-reedy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48882,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:07:41.516292+00:00",
  "ended_at": "2026-08-25T22:07:42.932902+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "56027d7b-96a0-452e-ad09-e7e8ee791b8f",
  "name": "spirited-gritty-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 38814,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:07:10.556379+00:00",
  "ended_at": "2026-08-25T22:07:42.931859+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "48362a16-46b3-4c43-918f-a6427f447aa6",
  "name": "prairie-electric-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 30134,
  "username": "oracle",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:41:27.273396+00:00",
  "ended_at": "2026-08-25T07:41:31.888032+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7be27737-2351-4a0b-ac78-bbf1da0bcd01",
  "name": "mighty-seaward-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57154,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:49:53.202863+00:00",
  "ended_at": "2026-08-25T01:49:57.209197+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4dcc279b-cb49-49aa-8288-ab21dc82e579",
  "name": "honest-humble-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54614,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:04:34.118574+00:00",
  "ended_at": "2026-08-25T01:04:37.595448+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2938f347-c662-42e8-b6d8-f0c250adf117",
  "name": "lawful-solar-jaguar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 47648,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:56:10.700654+00:00",
  "ended_at": "2026-08-25T00:56:12.811065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "229d1235-6753-40a5-bade-2709a3f19f36",
  "name": "opal-frank-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 32958,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:56:07.425488+00:00",
  "ended_at": "2026-08-25T00:56:12.809545+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "7c1fc0d8-483f-4c21-9828-fa71f65e727c",
  "name": "cosmic-vivid-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44758,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:53:09.234872+00:00",
  "ended_at": "2026-08-24T09:53:13.431930+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c4c9c7bb-7f7b-4471-9dbd-785de58f7fc6",
  "name": "grumpy-marine-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37012,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:18:39.292170+00:00",
  "ended_at": "2026-08-24T09:18:44.720916+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "43ee4964-bac0-4bc7-a315-fb52254a9c6e",
  "name": "mighty-sturdy-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 39642,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:09:14.163467+00:00",
  "ended_at": "2026-08-24T09:09:16.098466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f61119d5-6ce4-4ed4-9bc6-d2de9ef0009b",
  "name": "rustic-brisk-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57292,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:09:09.909206+00:00",
  "ended_at": "2026-08-24T09:09:16.099405+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "e16c6d69-db8f-4701-9f37-114c992aecbc",
  "name": "alpine-sterling-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.35",
  "src_port": 18572,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1906,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T04:02:14.002391+00:00",
  "ended_at": "2026-08-24T04:02:17.068839+00:00",
  "ended_reason": "exec complete",
  "commands": 6,
  "transcript_bytes": 617
 },
 {
  "id": "e5898c5e-8ef9-4306-b46c-b1393ffe0d4f",
  "name": "plush-eager-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 60522,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:41:26.921744+00:00",
  "ended_at": "2026-08-23T08:41:28.289577+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46fc64b7-2c79-4356-b503-f8b9407de12b",
  "name": "pleasant-fierce-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37144,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:41:23.007219+00:00",
  "ended_at": "2026-08-23T08:41:28.288484+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "42fc9d46-e986-4335-9b3d-76176c685d66",
  "name": "cunning-mellow-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.124",
  "src_port": 51818,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T12:32:29.141765+00:00",
  "ended_at": "2026-08-22T12:32:33.468061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eea8209e-92a6-4521-9df0-1c9d3addbd18",
  "name": "fearless-smoky-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.124",
  "src_port": 48992,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1179,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:32:22.014131+00:00",
  "ended_at": "2026-08-22T12:32:33.466283+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "c610fd2d-2d65-4aa0-a5d4-157df704a6e8",
  "name": "plush-dapper-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 34734,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:12:50.229072+00:00",
  "ended_at": "2026-08-22T12:12:54.283339+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "adb2b6cf-833f-426e-bce0-856c88c5989f",
  "name": "sandy-brazen-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 41002,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:59:37.245338+00:00",
  "ended_at": "2026-08-22T11:59:39.481507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a2574b61-4e06-4ece-8c18-6cd6cfc93cb3",
  "name": "honest-sleepy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50902,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 485,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:59:30.351013+00:00",
  "ended_at": "2026-08-22T11:59:39.482478+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1662
 },
 {
  "id": "259dcecb-f8b0-47df-83d0-9c42767a23c2",
  "name": "plucky-arctic-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 39758,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 367,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:19:46.669537+00:00",
  "ended_at": "2026-08-21T13:19:51.871529+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "20650a54-5002-4dc3-b66d-703646ef7c7c",
  "name": "cobalt-vivid-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 42300,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:00:36.159860+00:00",
  "ended_at": "2026-08-21T13:00:40.715494+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "5d672ada-507f-4f72-879e-4dfd0e3aaaad",
  "name": "burly-fringed-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 36278,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:45:58.796585+00:00",
  "ended_at": "2026-08-21T12:46:03.937796+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "2eeb23fa-0771-4b0c-a736-31a0d32b58ec",
  "name": "nautical-western-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 34656,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 171,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:18:48.427549+00:00",
  "ended_at": "2026-08-20T19:18:52.486671+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "dd39f1b6-8b34-41c6-89e9-f32159f76b9e",
  "name": "weathered-prairie-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 43792,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:14:49.037761+00:00",
  "ended_at": "2026-08-20T19:14:54.995109+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "f0dcaa78-a805-4ffe-b7ce-70c52d84e07e",
  "name": "jovial-vivid-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 33110,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:59:42.259125+00:00",
  "ended_at": "2026-08-20T18:59:43.643241+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01314b84-4664-451a-a891-1fe008df07bf",
  "name": "granite-daring-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40074,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 186,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:59:36.353915+00:00",
  "ended_at": "2026-08-20T18:59:43.645846+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "8b864323-4d5e-4395-aef1-92dc85e4f2cc",
  "name": "craggy-jagged-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 52222,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:40:07.804794+00:00",
  "ended_at": "2026-08-20T10:40:08.341345+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 928
 },
 {
  "id": "f44aa896-cbe1-404b-8043-37b28727f2c4",
  "name": "lunar-placid-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 33574,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 220,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:24:38.043031+00:00",
  "ended_at": "2026-08-20T10:24:39.343525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 820
 },
 {
  "id": "b891c3f2-01ba-4cba-9476-6de2a4a20bd8",
  "name": "vigilant-lively-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 37110,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:22:40.252663+00:00",
  "ended_at": "2026-08-20T10:22:42.020408+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c062c493-5928-474e-9916-ecc7d34dc00c",
  "name": "salty-sandy-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51978,
  "username": "oracle",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:22:39.769928+00:00",
  "ended_at": "2026-08-20T10:22:42.019421+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1578
 }
]